acccheck|0.2.1|A password dictionary attack tool that targets windows authentication via the SMB protocol.|http://labs.portcullis.co.uk/tools/acccheck/
against|0.2|A very fast ssh attacking script which includes a multithreaded port scanning module (tcp connect) for discovering possible targets and a multithreaded brute-forcing module which attacks parallel all discovered hosts or given ip addresses from a list.|http://nullsecurity.net/tools/cracker.html
asleap|2.2|Actively recover LEAP/PPTP passwords.|http://www.willhackforsushi.com/Asleap.html
beleth|36.0963699|A Multi-threaded Dictionary based SSH cracker.|https://github.com/chokepoint/Beleth
bgp-md5crack|0.1|RFC2385 password cracker|http://www.c0decafe.de/
bios_memimage|1.2|A tool to dump RAM contents to disk (aka cold boot attack).|http://citp.princeton.edu/memory/code/
bkhive|1.1.1|Program for dumping the syskey bootkey from a Windows NT/2K/XP system hive.|http://sourceforge.net/projects/ophcrack
blackhash|0.2|Creates a filter from system hashes|http://16s.us/blackhash/
bob-the-butcher|0.7.1|A distributed password cracker package.|http://btb.banquise.net/
bruteforce-wallet|19.62572dd|Try to find the password of an encrypted Peercoin (or Bitcoin,Litecoin, etc...) wallet file.|https://github.com/glv2/bruteforce-wallet
brutessh|0.6|A simple sshd password bruteforcer using a wordlist, it's very fast for internal networks. It's multithreads.|http://www.edge-security.com/edge-soft.php
bully|21.388df45|A wifi-protected-setup (WPS) brute force attack tool.|http://code.google.com/p/bully/
chapcrack|17.ae2827f|A tool for parsing and decrypting MS-CHAPv2 network handshakes.|https://github.com/moxie0/chapcrack
checkpwd|1.23|Oracle Password Checker (Cracker).|http://www.red-database-security.com/software/checkpwd.html
cintruder|0.2.0|An automatic pentesting tool to bypass captchas.|http://cintruder.sourceforge.net/
cisco-auditing-tool|1|Perl script which scans cisco routers for common vulnerabilities. Checks for default passwords, easily guessable community names, and the IOS history bug. Includes support for plugins and scanning multiple hosts.|http://www.scrypt.net
cisco-ocs|0.2|Cisco Router Default Password Scanner.|http://www.question-defense.com/2013/01/11/ocs-version-2-release-ocs-cisco-router-default-password-scanner
cisco-scanner|0.2|Multithreaded Cisco HTTP vulnerability scanner. Tested on Linux, OpenBSD and Solaris.|http://wayreth.eu.org/old_page/
cisco5crack|2.c4b228c|Crypt and decrypt the cisco enable 5 passwords.|https://github.com/madrisan/cisco7crack
cisco7crack|2.f1c21dd|Crypt and decrypt the cisco enable 7 passwords.|https://github.com/madrisan/cisco7crack
cmospwd|5.0|Decrypts password stored in CMOS used to access BIOS setup.|http://www.cgsecurity.org/wiki/CmosPwd
crackhor|2.ae7d83f|A Password cracking utility.|https://github.com/CoalfireLabs/crackHOR
crackle|71.20215f8|Crack and decrypt BLE encryption|https://github.com/mikeryan/crackle/
crackq|48.89b7318|Hashcrack.org GPU-accelerated password cracker.|https://github.com/vnik5287/Crackq
crackserver|33.e5763ab|An XMLRPC server for password cracking.|https://github.com/averagesecurityguy/crack
creddump|0.3|A python tool to extract various credentials and secrets from Windows registry hives.|https://code.google.com/p/creddump/
crowbar|77.67293cc|A brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.|https://github.com/galkan/crowbar
cupp|3.0|Common User Password Profiler|http://www.remote-exploit.org/?page_id=418
dbpwaudit|0.8|A Java tool that allows you to perform online audits of password quality for several database engines|http://www.cqure.net/wp/dbpwaudit/
depant|0.3a|Check network for services with default passwords.|http://midnightresearch.com/projects/depant/
device-pharmer|37.e0e6281|Opens 1K+ IPs or Shodan search results and attempts to login.|https://github.com/DanMcInerney/device-pharmer
dislocker|0.3|A tool to exploit the hash length extension attack in various hashing algorithms. With FUSE capabilities built in.|http://www.hsc.fr/ressources/outils/dislocker/
doozer|9.5cfc8f8|A Password cracking utility.|https://github.com/CoalfireLabs/crackHOR
dpeparser|beta002|Default password enumeration project|http://www.toolswatch.org/dpe/
eapmd5pass|1.4|An implementation of an offline dictionary attack against the EAP-MD5 protocol|http://www.willhackforsushi.com/?page_id=67
enabler|1|Attempts to find the enable password on a cisco system via brute force.|http://packetstormsecurity.org/cisco/enabler.c
evilize|0.2|Tool to create MD5 colliding binaries.|http://www.mathstat.dal.ca/~selinger/md5collision/
evilmaid|1.01|TrueCrypt loader backdoor to sniff volume password|http://theinvisiblethings.blogspot.com
facebrute|7.ece355b|This script tries to guess passwords for a given facebook account using a list of passwords (dictionary).|https://github.com/emerinohdz/FaceBrute
fang|20.4b176f3|A multi service threaded MD5 cracker.|https://github.com/evilsocket/fang
fcrackzip|1.0|Zip file password cracker|http://oldhome.schmorp.de/marc/fcrackzip.html
fern-wifi-cracker|222|WEP, WPA wifi cracker for wireless penetration testing|http://code.google.com/p/fern-wifi-cracker/
ftp-scanner|0.2.5|Multithreaded ftp scanner/brute forcer. Tested on Linux, OpenBSD and Solaris.|http://wayreth.eu.org/old_page/
hashcat|2.00|A multithreaded cross platform hash cracker.|http://hashcat.net/hashcat/
hashcat-utils|1.2|Utilites for Hashcat|http://hashcat.net/wiki/doku.php?id=hashcat_utils
hasher|48.40173c5|A tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally.|https://github.com/ChrisTruncer/Hasher
hashtag|0.41|A python script written to parse and identify password hashes.|https://github.com/SmeegeSec/HashTag
hostbox-ssh|0.1.1|A ssh password/account scanner.|http://stridsmanit.wordpress.com/2012/12/02/brute-forcing-passwords-with-hostbox-ssh-1-1/
htpwdscan|16.99697fc|A python HTTP weak pass scanner.|https://github.com/lijiejie/htpwdScan
hydra|8.2|A very fast network logon cracker which support many different services|https://www.thc.org/thc-hydra/
ibrute|12.3a6a11e|An AppleID password bruteforce tool. It uses Find My Iphone service API, where bruteforce protection was not implemented.|https://github.com/hackappcom/ibrute/
iheartxor|0.01|A tool for bruteforcing encoded strings within a boundary defined by a regular expression. It will bruteforce the key value range of 0x1 through 0x255.|http://hooked-on-mnemonics.blogspot.com.es/p/iheartxor.html
iisbruteforcer|15|HTTP authentication cracker. It's a tool that launchs an online dictionary attack to test for weak or simple passwords against protected areas on an IIS Web server.|http://www.open-labs.org/
ikecrack|1.00|An IKE/IPSec crack tool designed to perform Pre-Shared-Key analysis of RFC compliant aggressive mode authentication|http://sourceforge.net/projects/ikecrack/
inguma|0.1.1|A free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler.|http://inguma.sourceforge.net
ipmipwn|6.74a08a8|IPMI cipher 0 attack tool.|https://github.com/AnarchyAngel/IPMIPWN
jbrute|0.99|Open Source Security tool to audit hashed passwords.|http://sourceforge.net/projects/jbrute/
john|1.8.0.jumbo1|John the Ripper password cracker|http://www.openwall.com/john
johnny|20120424|GUI for John the Ripper.|http://openwall.info/wiki/john/johnny
keimpx|165.aab7213|Tool to verify the usefulness of credentials across a network over SMB.|http://code.google.com/p/keimpx/
khc|0.2|A small tool designed to recover hashed known_hosts fiels back to their plain-text equivalents.|http://packetstormsecurity.com/files/87003/Known-Host-Cracker.2.html
ldap-brute|21.acc06e3|A semi fast tool to bruteforce values of LDAP injections over HTTP.|https://github.com/droope/ldap-brute
levye|84.5406303|A brute force tool which is support sshkey, vnckey, rdp, openvpn.|https://github.com/galkan/levye
lodowep|1.2.1|Lodowep is a tool for analyzing password strength of accounts on a Lotus Domino webserver system.|http://www.cqure.net/wp/lodowep/
mdcrack|1.2|MD4/MD5/NTLM1 hash cracker|http://c3rb3r.openwall.net/mdcrack/
medusa|2.2|Speedy, massively parallel and modular login brute-forcer for network|http://www.foofus.net/jmk/medusa/medusa.html
mfoc|0.10.7|Mifare Classic Offline Cracker|http://code.google.com/p/mfoc/
mkbrutus|1.0.2|Password bruteforcer for MikroTik devices or boxes running RouterOS.|http://mkbrutusproject.github.io/MKBRUTUS/
morxbook|1.0|A password cracking tool written in perl to perform a dictionary-based attack on a specific Facebook user through HTTPS.|http://www.morxploit.com/
morxbrute|1.01|A customizable HTTP dictionary-based password cracking tool written in Perl|http://www.morxploit.com/morxbrute/
morxbtcrack|1.0|Single Bitcoin private key cracking tool released.|http://www.morxploit.com/tools/
morxcoinpwn|1.0|Mass Bitcoin private keys brute forcing/Take over tool released.|http://www.morxploit.com/tools/
morxcrack|1.2|A cracking tool written in Perl to perform a dictionary-based attack on various hashing algorithm and CMS salted-passwords.|http://www.morxploit.com/morxcrack/
ncrack|0.4a|A high-speed network authentication cracking tool|http://nmap.org/ncrack/
oclhashcat|2.01|Worlds fastest WPA cracker with dictionary mutation engine.|http://hashcat.net/oclhashcat/
onesixtyone|0.7|An SNMP scanner that sends multiple SNMP requests to multiple IP addresses|http://labs.portcullis.co.uk/application/onesixtyone/
ophcrack|3.6.0|A free Windows password cracker based on rainbow tables|http://ophcrack.sourceforge.net
outlook-webapp-brute|1.61d7177|Microsoft Outlook WebAPP Brute.|https://github.com/lijiejie/OutLook_WebAPP_Brute
owabf|1.3|Outlook Web Access bruteforcer tool.|http://netsec.rs/70/tools.html
pack|0.0.4|Password Analysis and Cracking Kit|http://thesprawl.org/projects/pack/
passcracking|20131214|A little python script for sending hashes to passcracking.com and milw0rm|http://github.com/jensp/passcracking
passe-partout|0.1|Tool to extract RSA and DSA private keys from any process linked with OpenSSL. The target memory is scanned to lookup specific OpenSSL patterns.|http://www.hsc.fr/ressources/outils/passe-partout/index.html.en
patator|122.96eb9f9|A multi-purpose bruteforcer.|https://github.com/lanjelot/patator
pdfcrack|0.15|Password recovery tool for PDF-files.|http://pdfcrack.sourceforge.net/
pdgmail|1.0|A password dictionary attack tool that targets windows authentication via the SMB protocol|http://www.jeffbryner.com/code/pdgmail
pemcrack|11.a0fecd7|Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks.|https://github.com/robertdavidgraham/pemcrack
pemcracker|9.a741c93|Tool to crack encrypted PEM files.|https://github.com/bwall/pemcracker.git
phoss|0.1.13|Sniffer designed to find HTTP, FTP, LDAP, Telnet, IMAP4, VNC and POP3 logins.|http://www.phenoelit.org/fr/tools.html
php-mt-seed|3.2|PHP mt_rand() seed cracker|http://www.openwall.com/php_mt_seed/
php-rfi-payload-decoder|30.bd42caa|Decode and analyze RFI payloads developed in PHP.|https://github.com/bwall/PHP-RFI-Payload-Decoder
phrasendrescher|1.2.2|A modular and multi processing pass phrase cracking tool|http://www.leidecker.info/projects/phrasendrescher/
pipal|1.1|A password analyser|http://www.digininja.org/projects/pipal.php
pipeline|18.d90fc65|Designed to aid in targeted brute force password cracking attacks.|https://github.com/hirnschallsebastian/Pipeline2
pkcrack|1.2.2|A PkZip encryption cracker.|https://www.unix-ag.uni-kl.de/~conrad/krypto/pkcrack/download1.html
pyrit|0.4.0|WPA/WPA2-PSK attacking with gpu and cluster|https://code.google.com/p/pyrit
rainbowcrack|1.6|Password cracker based on the faster time-memory trade-off. With MySQL and Cisco PIX Algorithm patches.|http://project-rainbowcrack.com/
rarcrack|0.2|This program uses bruteforce algorithm to find correct password (rar, 7z, zip).|http://rarcrack.sourceforge.net/
rcracki-mt|0.7.0|A tool to perform rainbow table attacks on password hashes. It is intended for indexed/perfected rainbow tables, mainly generated by the distributed project www.freerainbowtables.com|http://rcracki.sourceforge.net/
rdesktop-brute|1.5.0|It connects to windows terminal servers - Bruteforce patch included.|http://www.rdesktop.org/
ridenum|51.dc23c91|A null session RID cycle attack for brute forcing domain controllers.|https://github.com/trustedsec/ridenum
rlogin-scanner|0.2|Multithreaded rlogin scanner. Tested on Linux, OpenBSD and Solaris.|http://wayreth.eu.org/old_page/
rootbrute|0.1|Local root account bruteforcer.|http://www.packetstormsecurity.org/
rpdscan|2.a71b0f3|Remmina Password Decoder and scanner.|https://github.com/freakyclown/RPDscan
rsakeyfind|1.0|A tool to find RSA key in RAM.|http://citp.princeton.edu/memory/code/
samdump2|3.0.0|Dump password hashes from a Windows NT/2k/XP installation|http://sourceforge.net/projects/ophcrack/files/samdump2/
samydeluxe|2.2ed1bac|Automatic samdump creation script.|http://github.com/jensp/samydeluxe
sidguesser|1.0.5|Guesses sids/instances against an Oracle database according to a predefined dictionary file.|http://www.cqure.net/wp/tools/database/sidguesser/
sipcrack|0.2|A SIP protocol login cracker.|http://www.remote-exploit.org/codes_sipcrack.html
skul|11.6808dbe|A PoC to bruteforce the Cryptsetup implementation of Linux Unified Key Setup (LUKS).|https://github.com/cryptcoffee/skul
smbbf|0.9.1|SMB password bruteforcer.|http://packetstormsecurity.com/files/25381/smbbf.9.1.tar.gz.html
snmp-brute|15.64ec0ce|SNMP brute force, enumeration, CISCO config downloader and password cracking script.|https://github.com/SECFORCE/SNMP-Brute
speedpwn|8.3dd2793|An active WPA/2 Bruteforcer, original created to prove weak standard key generation in different ISP labeled routers without a client is connected.|https://gitorious.org/speedpwn/
sqlpat|1.0.1|This tool should be used to audit the strength of Microsoft SQL Server passwords offline.|http://www.cqure.net/wp/sqlpat/
ssh-privkey-crack|0.4|A SSH private key cracker.|https://code.google.com/p/lusas/
sshatter|1.2|Password bruteforcer for SSH.|http://www.nth-dimension.org.uk/downloads.php?id=34
sshscan|1.0|A horizontal SSH scanner that scans large swaths of IPv4 space for a single SSH user and pass.|https://github.com/getdual/scripts-n-tools/blob/master/sshscan.py
sshtrix|0.0.2|A very fast multithreaded SSH login cracker.|http://nullsecurity.net/tools/cracker.html
sslnuke|5.c5faeaa|Transparent proxy that decrypts SSL traffic and prints out IRC messages.|https://github.com/jtripper/sslnuke
sucrack|1.2.3|A multi-threaded Linux/UNIX tool for brute-force cracking local user accounts via su|http://labs.portcullis.co.uk/application/sucrack
tckfc|21.a32167e|TrueCrypt key file cracker.|https://github.com/Octosec/tckfc
tftp-bruteforce|0.1|TFTP-bruteforcer is a fast TFTP filename bruteforcer written in perl.|http://www.hackingexposedcisco.com/
thc-keyfinder|1.0|Finds crypto keys, encrypted data and compressed data in files by analyzing the entropy of parts of the file.|https://www.thc.org/releases.php
thc-pptp-bruter|0.1.4|A brute force program that works against pptp vpn endpoints (tcp port 1723).|http://www.thc.org
thc-smartbrute|1.0|This tool finds undocumented and secret commands implemented in a smartcard.|https://www.thc.org/thc-smartbrute/
ufo-wardriving|4|Allows you to test the security of wireless networks by detecting their passwords based on the router model|http://www.ufo-wardriving.com/
vnc-bypauth|0.0.1|Multi-threaded bypass authentication scanner for VNC servers <= 4.1.1.|http://pentester.fr/resources/tools/techno/VNC/VNC_bypauth/
vncrack|1.21|What it looks like: crack VNC.|http://phenoelit-us.org/vncrack
wifite|2.28fc5cd|A tool to attack multiple WEP and WPA encrypted networks at the same time.|http://code.google.com/p/wifite/
wmat|0.1|Automatic tool for testing webmail accounts.|http://netsec.rs/70/tools.html
wordbrutepress|28.8061c52|Python script that performs brute forcing against WordPress installs using a wordlist.|http://www.homelab.it/index.php/2014/11/03/wordpress-brute-force-multithreading/
wpbf|7.11b6ac1|Multithreaded WordPress brute forcer.|https://github.com/dejanlevaja/wpbf
wpbrute-rpc|3.e7d8145|Tool for amplified bruteforce attacks on wordpress based website via xmlrcp API.|https://github.com/zendoctor/wpbrute-rpc
wyd|0.2|Gets keywords from personal files. IT security/forensic tool.|http://www.remote-exploit.org/?page_id=418
zulu|0.1|A light weight 802.11 wireless frame generation tool to enable fast and easy debugging and probing of 802.11 networks.|http://sourceforge.net/projects/zulu-wireless/
