Crack password hashes with Hashcat and John the Ripper.
npx skills add https://github.com/0X6C7879/aegissec --skill password-attacks
Please help me install this Agent Skill. Skill: password-attacks Source: https://github.com/0X6C7879/aegissec/tree/main/skills/password-attacks Command: npx skills add https://github.com/0X6C7879/aegissec --skill password-attacks
Hash-based credential management and breach simulations require a structured approach to identifying weak passwords and compromised credentials. This guide helps security practitioners perform ethically authorized password attacks using Hashcat and John the Ripper, streamlining assessment workflows.
Run a controlled cracking workflow against an authorized target to identify weak passwords and compromised hashes.
High-intent search queries and answers about installing and using this skill.
Hash identification across common formats like MD5, SHA1, SHA256, NTLM, and bcrypt determines the cracking strategy. This process involves analyzing the hash structure to select the correct mode in Hashcat or John the Ripper before initiating the attack workflow.
Dictionary attacks against NTLM hashes are executed using Hashcat or John the Ripper with targeted wordlists. This workflow leverages rule-based mutations and hybrid approaches to systematically test potential plaintext passwords against the captured credential hashes.
Password spraying works for access-control testing by attempting a single common password against many accounts to avoid lockouts. This technique, alongside pass-the-hash, simulates realistic attack scenarios in compliant enterprise targets.
Custom wordlists for brute-force and rule-based password attacks can be generated to target specific organizational patterns. This attack planning guidance improves the efficiency of credential hardening evaluations and secure breach simulations.
Cracking workflows handle authorization checks by embedding safety prompts and validation steps into the multi-tool orchestration. This ensures password attacks and credential cracking operations remain strictly within ethically authorized and compliant boundaries.
Hashcat and John the Ripper are both orchestrated for credential cracking, with Hashcat excelling in GPU-accelerated brute-force and hybrid attacks, while John the Ripper offers robust CPU-based dictionary and rule-based mutations for varied hash formats.
ZurybrExtract and crack password hashes from encrypted 7z archives.
benjaminshafiiStore Apple notarization credentials in macOS Keychain for OpenWork notarization workflows.
blacklanternsecurityCrack password hashes and encrypted files using hashcat and john.
AeonDaveExtract Windows credentials and Kerberos tickets from LSASS memory.
