password-attacks

What problem does it solve?

Hash-based credential management and breach simulations require a structured approach to identifying weak passwords and compromised credentials. This guide helps security practitioners perform ethically authorized password attacks using Hashcat and John the Ripper, streamlining assessment workflows.

Core Features & Use Cases

• Hash identification across common formats (MD5, SHA1, SHA256, NTLM, bcrypt) to determine cracking strategy.
• End-to-end cracking workflows: dictionary attacks, brute-force, rule-based mutations, and hybrid approaches.
• Credential spraying and pass-the-hash techniques for realistic access-control testing in compliant environments.
• Wordlist generation and attack planning guidance for secure credential hardening evaluations.

Quick Start

Run a controlled cracking workflow against an authorized target to identify weak passwords and compromised hashes.