Crack password hashes and test authentication across Windows, Linux, and web services.
npx skills add https://github.com/brucesongs/kali-claw --skill password-attack
Please help me install this Agent Skill. Skill: password-attack Source: https://github.com/brucesongs/kali-claw/tree/main/skills/password-attack Command: npx skills add https://github.com/brucesongs/kali-claw --skill password-attack
Password security testing often requires combining offline hash cracking, online brute force, and dictionary mutations to evaluate password policies and detect weak credentials across systems and services.
In a security assessment, describe to the AI a target environment and authorize a full password-attack test to identify weak passwords and policy gaps.
High-intent search queries and answers about installing and using this skill.
To automate password hash cracking and brute force testing, you can use this Skill to orchestrate offline dictionary and rule-based cracking alongside online credential stuffing and password spraying across Windows, Linux, and web services. It leverages tools like Hashcat, John the Ripper, and Hydra to identify weak credentials and assess policy strength.
The best way to test password policy strength across Windows and Linux environments is to perform comprehensive password attacks. This Skill identifies and cracks password hashes, executes online brute force, and analyzes policy gaps using Hashcat, Medusa, and Crunch to detect weak credentials during penetration tests.
Yes, you can generate targeted wordlists and mutation rules for password spraying campaigns. This Skill includes dictionary and mutation resources using tools like CeWL and Crunch, applying example payloads and test cases to rapidly create targeted wordlists for evaluating authentication defenses.
Yes, this password attack workflow fully supports both offline hash cracking and online brute force. It identifies hashes and tests password-based authentication across offline and online surfaces using Hashcat, John the Ripper, and Hydra to evaluate defense controls in enterprise environments.
You need to use credential stuffing instead of dictionary attacks during a pentest when testing for reused credentials across multiple services rather than guessing individual passwords. This Skill automates both workflows, allowing you to evaluate authentication defenses through online brute force and offline hash cracking.
trilwuIdentify hash types and crack password hashes with hashcat or John the Ripper.
profbernardojAudit OpenClaw gateway hosts for security vulnerabilities and configuration risks.
AeonDavePerform online brute-force and password spraying attacks against over 50 network protocols.
AeonDaveCrack over 300 hash types with GPU-accelerated wordlist and mask attacks.
