credential-cracking

Crack password hashes and encrypted files using hashcat and john.

253|37|Updated Feb 22, 2026

Search Tags:#offline #hashcat #password #hash #john #crack

Ready to run

npx skills add https://github.com/blacklanternsecurity/red-run --skill credential-cracking

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: credential-cracking
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/post-exploit/credential-cracking
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill credential-cracking

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires hashcat, john-jumbo, zip2john, office2john, pdf2john, keepass2john, ssh2john, 7z2john, rar2john, gpg2john, ansible2john, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of cracking password hashes and encrypted files that have been recovered during an engagement, helping to recover credentials and access sensitive data.

Core Features & Use Cases

Hash Identification: Automatically identifies common hash types (NTLM, Kerberos, SHA, etc.).
File Decryption: Extracts hashes from password-protected files like ZIP, Office documents, PDFs, and KeePass databases using specialized tools.
Cracking Execution: Leverages hashcat or john with wordlists and rules for offline brute-force attacks.
Use Case: After recovering an NTLM hash from a Windows machine, you can use this skill to attempt to crack the password using a wordlist, potentially gaining access to the compromised system or other systems using the same credentials.

Quick Start

Use the credential-cracking skill to attempt to crack the provided NTLM hash using the rockyou.txt wordlist.

Frequently Asked Questions about credential-cracking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I crack an NTLM hash offline using a wordlist?▼

You can crack NTLM hashes offline by using this Skill to automate hashcat and john utilities, applying wordlists like rockyou.txt with rules to recover the original password.

Can I extract and decrypt hashes from password-protected ZIP and PDF files?▼

Yes, you can decrypt password-protected ZIP and PDF files by extracting their hashes with zip2john and pdf2john, then running offline cracking attacks to recover the password.

Does this offline password cracking approach support Kerberos hashes?▼

Yes, offline password cracking supports Kerberos hashes. The Skill automatically identifies common hash types like Kerberos and NTLM before executing brute-force attacks with hashcat or john.

What do I need to set up before attempting to crack recovered password hashes?▼

Before cracking recovered password hashes, you need hashcat, john-jumbo, and wordlists installed in your environment. These dependencies are required for executing offline brute-force attacks.

What is the best way to recover credentials from an encrypted KeePass database?▼

The best way to recover credentials from an encrypted KeePass database is to extract the hash using keepass2john, then leverage hashcat or john with a wordlist to crack the master password offline.

Why does offline hash cracking fail when using an unsupported file format?▼

Offline hash cracking fails on unsupported file formats because extraction tools like rar2john and office2john only parse specific structures. Without a valid extracted hash, hashcat cannot execute the attack.