cain-and-abel

Recovers Windows passwords by sniffing network traffic and cracking hash types.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill cain-and-abel
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cain-and-abel
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/cracking/cain-and-abel
Command: npx skills add https://github.com/AeonDave/malskill --skill cain-and-abel

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps recover lost or forgotten Windows passwords by sniffing network traffic, cracking captured password hashes, and decoding stored credentials.

Core Features & Use Cases

  • Password Cracking: Utilizes dictionary, brute-force, and cryptanalysis methods to crack various hash types.
  • Credential Sniffing: Captures network credentials through ARP poisoning.
  • Stored Credential Decoding: Recovers passwords from Windows LSA, VNC, and dial-up connections.
  • Use Case: Recover NTLM hashes from a SAM dump by using a dictionary attack with a wordlist.

Quick Start

Use the cain-and-abel skill to crack NTLM hashes from the attached file 'hashes.txt' using the wordlist 'rockyou.txt'.

Frequently Asked Questions about cain-and-abel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I recover Windows passwords from NTLM hashes?

You can recover Windows passwords from NTLM hashes by running dictionary, brute-force, or cryptanalysis attacks against the captured hashes. Supply a SAM dump file and a wordlist to decode the stored credentials.

What is network credential sniffing via ARP poisoning?

Network credential sniffing via ARP poisoning reroutes local network traffic through a sniffer to intercept transmitted credentials. This method captures Windows login hashes traveling across the network for offline password recovery.

Do I need Administrator privileges to run Cain and Abel for password recovery?

Yes, you need Administrator privileges to run the Cain and Abel GUI application for password recovery. Elevated permissions are required to access protected Windows storage areas and perform network sniffing operations.

What hash types can be cracked using dictionary attacks on Windows?

Dictionary attacks on Windows can crack MD5, SHA-1, LM, and NTLM hash types. These algorithms are targeted to decode various stored and captured credentials by systematically applying wordlists to recover original passwords.

Can I recover passwords from Windows LSA and VNC connections?

Yes, you can recover passwords from Windows LSA and VNC connections. The process extracts and decodes cached credentials from these sources, along with dial-up connections, to retrieve the original stored passwords.