Password Attacks

Awesome Password Cracking : Unlocking The Code – A Comprehensive Guide To Tools And Techniques

In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form.

A common approach (brute-force attack) is to repeatedly try guesses for the password and to check them against an available cryptographic hash of the password.

This is a curated list of awesome tools, research, papers and other projects related to password cracking and password security by @n0kovo@infosec.exchange.

Read CONTRIBUTING.md before contributing! In short:

Contents

  • Books
  • Cloud
  • Conversion
  • Hashcat
    • Automation
    • Distributed cracking
    • Rules
    • Rule tools
    • Web interfaces
  • John the Ripper
  • Misc
    • Notable People
  • Websites
    • Communities
    • Lookup services
  • Wordlist tools
    • Analysis
    • Generation/Manipulation
  • Wordlists
    • Laguage specific
    • Other
  • Specific file formats
    • PDF
    • PEM
    • JKS
    • ZIP
  • Artificial Intelligence
  • Research
    • Articles and Blog Posts
    • Papers
    • Talks

Books

Cloud

  • Cloud_crack – Crack passwords using Terraform and AWS.
  • Cloudcat – A script to automate the creation of cloud infrastructure for hash cracking.
  • Cloudstomp – Automated deployment of instances on EC2 via plugin for high CPU/GPU applications at the lowest price.
  • Cloudtopolis – A tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended (and also, free!).
  • NPK – NPK is a distributed hash-cracking platform built entirely of serverless components in AWS including Cognito, DynamoDB, and S3.
  • Penglab – Abuse of Google Colab for cracking hashes.
  • Rook – Automates the creation of AWS p3 instances for use in GPU-based password cracking.

For more information click here.

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

SpyAI : Intelligent Malware With Advanced Capabilities

SpyAI is a sophisticated form of malware that leverages advanced technologies to capture and analyze…

1 day ago

Proxmark3 : The Ultimate Tool For RFID Security And Analysis

The Proxmark3 is a versatile, open-source tool designed for radio-frequency identification (RFID) security analysis, research,…

1 day ago

Awesome Solana Security : Enhancing Program Development

The "Awesome Solana Security" collection is a comprehensive resource designed to help developers build more…

1 day ago

IngressNightmare-POCs : Understanding The Vulnerability Exploitation Flow

The "IngressNightmare" vulnerabilities, disclosed in March 2025, represent a critical set of security issues affecting…

1 day ago

AdaptixC2 : Enhancing Penetration Testing With Advanced Framework Capabilities

AdaptixC2 is an advanced post-exploitation and adversarial emulation framework designed specifically for penetration testers. It…

1 day ago

Bincrypter : Enhancing Linux Binary Security through Runtime Encryption And Obfuscation

Bincrypter is a powerful Linux binary runtime crypter written in BASH. It is designed to…

1 day ago