password-cracking

Automates password cracking using hashcat, dictionary attacks, and rule-based attacks for penetration testing.

1|Updated Jun 9, 2026

Search Tags:#password cracking #hashcat #password security #Hydra #John the Ripper

Ready to run

npx skills add https://github.com/aivos-xie/hermes-skills --skill password-cracking

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: password-cracking
Source: https://github.com/aivos-xie/hermes-skills/tree/main/security/password-cracking
Command: npx skills add https://github.com/aivos-xie/hermes-skills --skill password-cracking

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires hashcat, john-the-ripper, hydra, cewl, crunch, hashid, nth, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit provides a suite of tools to crack passwords, helping users bypass security measures and regain access to accounts.

Core Features & Use Cases

Password Cracking Tools: Integrates hashcat, John the Ripper, Hydra, Medusa, CeWL, crunch, and more for robust password破解.
Hash Type Identification: Utilizes hashid and nth to identify and select the appropriate cracking method.
Dictionary and Rule-Based Attacks: Offers the ability to perform dictionary and rule-based attacks for a wide range of hash types.
Use Case: Ideal for penetration testing, security audits, and password recovery scenarios where strong passwords need to be cracked.

Quick Start

Use the password-cracking skill to crack a password hash using hashcat with a dictionary attack.

Frequently Asked Questions about password-cracking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify a hash type before starting password cracking?▼

To identify a hash type before password cracking, you can use tools like hashid and nth to automatically detect the hash format and select the appropriate cracking method for your specific target.

What is the best way to run a dictionary attack using hashcat?▼

The best way to run a dictionary attack with hashcat is to provide a wordlist and specify the target hash format, allowing the tool to systematically test passwords against the hash to recover the original plaintext.

Can I use Hydra for online password cracking during security audits?▼

Yes, you can use Hydra for online password cracking during security audits, as it supports rapid network logon attempts against numerous protocols to test authentication security and bypass access controls.

Does John the Ripper support rule-based attacks for complex password recovery?▼

John the Ripper supports rule-based attacks for password recovery, allowing you to modify and mutate wordlist entries dynamically to generate complex password variations that match specific hash targets.

How do I generate custom wordlists for penetration testing?▼

You can generate custom wordlists for penetration testing using tools like crunch to create predictable character combinations and CeWL to scrape potential passwords directly from target websites.

When should I not use dictionary attacks for password cracking?▼

You should avoid dictionary attacks when target passwords are likely long, randomly generated, or highly unique, as these methods rely on finding matches in predefined lists rather than exhausting the entire keyspace.