[[
wikihub
]]
Search
⌘K
Explore
People
For Agents
Sign in
Explore
People
For Agents
Sign in
@harrisonqian / Awesome / wiki/security/password-cracking.md
Suggest edit
Cancel
Submit suggestion
Title
Name
Note
--- visibility: public --- # Password Cracking **repo:** [n0kovo/awesome-password-cracking](https://github.com/n0kovo/awesome-password-cracking) **category:** [[security|Security]] **related:** [[cryptography|Cryptography]] · [[hacking|Hacking]] --- # Awesome Password Cracking [](https://awesome.re) In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form. A common approach ([brute-force attack](https://en.wikipedia.org/wiki/Brute-force_attack)) is to repeatedly try guesses for the password and to check them against an available cryptographic hash of the password. This is a curated list of awesome tools, research, papers and other projects related to password cracking and password security by [@n0kovo@infosec.exchange](https://infosec.exchange/@n0kovo/?l). Read [CONTRIBUTING.md](https://github.com/narkopolo/awesome-password-cracking/blob/main/CONTRIBUTING.md) before contributing! In short: - List is alphabetically sorted - If in doubt, use [awesome-lint](https://github.com/sindresorhus/awesome-lint) - If you think an item shouldn't be here [open an issue](https://github.com/narkopolo/awesome-password-cracking/issues/new) ## Contents - [Awesome Password Cracking ](#[awesome](/@harrisonqian/awesome/wiki/miscellaneous/awesome)-password-cracking--) - [Contents](#contents) - [Books](#books) - [Cloud](#cloud) - [Conversion](#conversion) - [Hashcat](#hashcat) - [Automation](#automation) - [Distributed cracking](#distributed-cracking) - [Rules](#rules) - [Rule tools](#rule-tools) - [Web interfaces](#web-interfaces) - [John the Ripper](#john-the-ripper) - [Misc](#misc) - [Notable People](#notable-people) - [Websites](#websites) - [Communities](#communities) - [Lookup services](#lookup-services) - [Wordlist tools](#wordlist-tools) - [Analysis](#analysis) - [Generation/Manipulation](#generationmanipulation) - [Wordlists](#wordlists) - [Laguage specific](#laguage-specific) - [Other](#other) - [Specific file formats](#specific-file-formats) - [PDF](#pdf) - [JKS](#jks) - [ZIP](#zip) - [Machine [Learning](/@harrisonqian/awesome/wiki/programming-languages/learning) / AI](#machine-learning--ai) - [Research](#research) - [Articles and Blog Posts](#articles-and-blog-posts) - [Papers](#papers) - [Talks](#talks) ## Books - [Hash Crack: Password Cracking Manual (v3)](https://www.amazon.com/-/en/Joshua-Picolet/dp/1793458618) - Password Cracking Manual v3 is an expanded reference guide for password recovery (cracking) methods, tools, and analysis techniques. ## Cloud - [Cloud_crack](https://github.com/lordsaibat/Cloud_crack) - Crack passwords using [Terraform](/@harrisonqian/awesome/wiki/back-end-development/terraform) and AWS. - [Cloudcat](https://github.com/stormfleet/cloudcat) - A script to automate the creation of cloud infrastructure for hash cracking. - [Cloudstomp](https://github.com/Fmstrat/cloudstomp) - Automated deployment of instances on EC2 via plugin for high CPU/GPU applications at the lowest price. - [Cloudtopolis](https://github.com/JoelGMSec/Cloudtopolis) - A tool that facilitates the installation and provisioning of Hashtopolis on the [Google Cloud](/@harrisonqian/awesome/wiki/platforms/google-cloud) [Shell](/@harrisonqian/awesome/wiki/development-environment/shell) platform, quickly and completely unattended (and also, free!). - [NPK](https://github.com/c6fc/npk) - NPK is a distributed hash-cracking platform built entirely of serverless components in AWS including Cognito, DynamoDB, and S3. - [Penglab](https://github.com/mxrch/penglab) - Abuse of Google Colab for cracking hashes. - [Rook](https://github.com/JumpsecLabs/Rook) - Automates the creation of AWS p3 instances for use in GPU-based password cracking. ## Conversion - [7z2hashcat](https://github.com/philsmd/7z2hashcat) - Extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat. - [MacinHash](https://github.com/jmagers/MacinHash) - Convert macOS plist password file to hash file for password crackers. - [NetNTLM-Hashcat](https://github.com/ins1gn1a/NetNTLM-Hashcat) - Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format. - [Rubeus-to-Hashcat](https://github.com/PwnDexter/Rubeus-to-Hashcat) - Converts / formats Rubeus kerberoasting output into hashcat readable format. - [WINHELLO2hashcat](https://github.com/Banaanhangwagen/WINHELLO2hashcat) - With this tool one can extract the "hash" from a [WINDOWS](/@harrisonqian/awesome/wiki/platforms/windows) HELLO PIN. This hash can be cracked with Hashcat. - [bitwarden2hashcat](https://github.com/0x6470/bitwarden2hashcat) - A tool that converts Bitwarden's data into a hashcat-suitable hash. - [hc\_to\_7z](https://github.com/philsmd/hc_to_7z) - Convert 7-Zip hashcat hashes back to 7z archives. - [hcxtools](https://github.com/ZerBea/hcxtools) - Portable solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats. - [itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) - Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat. - [mongodb2hashcat](https://github.com/philsmd/mongodb2hashcat) - Extract hashes from the [MongoDB](/@harrisonqian/awesome/wiki/databases/mongodb) [database](/@harrisonqian/awesome/wiki/databases/database) server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256). ## Hashcat *[Hashcat](https://github.com/hashcat/hashcat) is the "World's fastest and most advanced password recovery utility." The following are projects directly related to Hashcat in one way or another.* - [Autocrack](https://github.com/pry0cc/autocrack) - A set of client and server tools for automatically, and lightly automatically cracking hashes. - [docker-hashcat](https://github.com/dizcza/docker-hashcat) - Latest hashcat [docker](/@harrisonqian/awesome/wiki/back-end-development/docker) for Ubuntu 18.04 CUDA, OpenCL, and POCL. - [Hashcat-Stuffs](https://github.com/xfox64x/Hashcat-Stuffs) - Collection of hashcat lists and things. - [hashcat-utils](https://github.com/hashcat/hashcat-utils/) - Small utilities that are useful in advanced password cracking. - [Hashfilter](https://github.com/bharshbarger/Hashfilter) - Read a hashcat potfile and parse different types into a sqlite [database](/@harrisonqian/awesome/wiki/databases/database). - [known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) - A guide and tool for cracking ssh known_hosts files with hashcat. - [pyhashcat](https://github.com/f0cker/pyhashcat) - [Python](/@harrisonqian/awesome/wiki/programming-languages/python) C API binding to libhashcat. ### Automation - [autocrack](https://github.com/timbo05sec/autocrack) - Hashcat wrapper to help automate the cracking process. - [hat](https://github.com/sp00ks-git/hat) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. - [hate_crack](https://github.com/trustedsec/hate_crack) - A tool for automating cracking methodologies through Hashcat from the TrustedSec team. - [Naive hashcat](https://github.com/brannondorsey/naive-hashcat) - Naive hashcat is a plug-and-play script that is pre-configured with naive, emperically-tested, "good enough" parameters/attack types. ### Distributed cracking - [CrackLord](https://github.com/jmmcatee/cracklord) - Queue and resource system for cracking passwords. - [fitcrack](https://github.com/nesfit/fitcrack) - A hashcat-based distributed password cracking system. - [Hashstation](https://github.com/hashstation/hashstation) - Hashstation is a BOINC-based distributed password cracking system with a built-in web interface. - [Hashtopolis](https://github.com/hashtopolis/server) - A multi-platform client-server tool for distributing hashcat tasks to multiple computers. - [Kraken](https://github.com/arcaneiceman/kraken) - A multi-platform distributed brute-force password cracking system. ### Rules - [clem9669 rules](https://github.com/clem9669/hashcat-rule) - Rule for hashcat or john. - [hashcat rules collection](https://github.com/narkopolo/hashcat-rules-collection) - Probably the largest collection of hashcat rules out there. - [Hob0Rules](https://github.com/praetorian-inc/Hob0Rules) - Password cracking rules for Hashcat based on statistics and industry patterns. - [Kaonashi](https://github.com/kaonashi-passwords/Kaonashi) - Wordlist, rules and masks from Kaonashi project (RootedCON 2019). - [nsa-rules](https://github.com/NSAKEY/nsa-rules) - Password cracking rules and masks for hashcat generated from cracked passwords. - [nyxgeek-rules](https://github.com/nyxgeek/nyxgeek-rules) - Custom password cracking rules for Hashcat and John the Ripper. - [OneRuleToRuleThemAll](https://github.com/NotSoSecure/password_cracking_rules) - "One rule to crack all passwords. or atleast we hope so." - [OneRuleToRuleThemStill](https://github.com/stealthsploit/OneRuleToRuleThemStill) - "A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule." - [pantagrule](https://github.com/rarecoil/pantagrule) - Large hashcat rulesets generated from real-world compromised passwords. ### Rule tools - [duprule](https://github.com/mhasbini/duprule) - Detect & filter duplicate hashcat rules. - [ruleprocessorY](https://github.com/TheWorkingDeveloper/ruleprocessorY) - A next-gen Rule processor with complex multibyte character support built to support Hashcat. ### Web interfaces - [crackerjack](https://github.com/ctxis/crackerjack) - CrackerJack is a Web GUI for Hashcat developed in [Python](/@harrisonqian/awesome/wiki/programming-languages/python). - [CrackQ](https://github.com/f0cker/crackq) - A [Python](/@harrisonqian/awesome/wiki/programming-languages/python) Hashcat cracking queue system. - [hashpass](https://github.com/dj-zombie/hashpass) - Hash cracking WebApp & Server for hashcat. - [Hashview](https://github.com/hashview/hashview) - A web front-end for password cracking and [analytics](/@harrisonqian/awesome/wiki/miscellaneous/analytics). - [Wavecrack](https://github.com/wavestone-cdt/wavecrack) - Wavestone's web interface for password cracking with hashcat. - [WebHashCat](https://github.com/hegusung/WebHashcat) - WebHashcat is a very simple but efficient web interface for hashcat password cracking tool. ## John the Ripper *[John the Ripper](https://github.com/openwall/john) is "an Open Source password security auditing and password recovery tool available for many operating systems." The following are projects directly related to John the Ripper in one way or another.* - [BitCracker](https://github.com/e-ago/bitcracker) - BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker. - [johnny](https://github.com/openwall/johnny) - GUI frontend to John the Ripper. ## Misc - [Hashes](https://github.com/zefr0x/hashes) - Identify hashing [algorithms](/@harrisonqian/awesome/wiki/theory/algorithms) (GUI frontend for Name That Hash). - [hashgen](https://github.com/cyclone-github/hashgen) - Hashgen is a simple yet very fast CLI hash generator written in Go and cross compiled for [Linux](/@harrisonqian/awesome/wiki/platforms/linux), [Windows](/@harrisonqian/awesome/wiki/platforms/windows) & Mac. - [Name That Hash](https://github.com/HashPals/Name-That-Hash) - Don't know what type of hash it is? Name That Hash will name that hash type! Identify MD5, SHA256 and 300+ other hashes. Comes with a neat web app. ### Notable People - Alotdv - [Twitter](https://twitter.com/AlongExc). - Clem9669 - [GitHub](https://github.com/clem9669). - Coolbry95 - [GitHub](https://github.com/coolbry95) / [Twitter](https://twitter.com/coolbry95). - Dakykilla - [GitHub](https://github.com/dakykilla) / [Twitter](https://twitter.com/dakykilla). - Dropdeadfu - [GitHub](https://github.com/dropdeadfu) / [Twitter](https://twitter.com/dropdeadfu). - Epixoip - [GitHub](https://github.com/epixoip) / [Mastodon](https://infosec.exchange/@epixoip) / [Twitter](https://twitter.com/jmgosney). - Evilmog - [GitHub](https://github.com/evilmog/) / [Mastodon](https://infosec.exchange/@evilmog) / [Twitter](https://twitter.com/Evil_Mog). - Hydraze - [GitHub](https://github.com/Hydraze) / [Mastodon](https://infosec.exchange/@hydraze) / [Twitter](https://twitter.com/Hydraze). - JakeWnuk - [GitHub](https://github.com/jakewnuk). - Kontrast23 - [GitHub](https://github.com/kontrast23) / [Twitter](https://twitter.com/marco_preuss). - M3g9tr0n - [GitHub](https://github.com/m3g9tr0n) / [Twitter](https://twitter.com/m3g9tr0n). - Matrix - [GitHub](https://github.com/matrix) / [Twitter](https://twitter.com/gm4tr1x). - Minga - [Twitter](https://twitter.com/mingadotcom). - N0kovo - [GitHub](https://github.com/n0kovo) / [Mastodon](https://infosec.exchange/@n0kovo) / [Twitter](https://twitter.com/n0kovos). - NSAKEY - [GitHub](https://github.com/NSAKEY) / [Twitter](https://twitter.com/_NSAKEY) / [Website](https://abigisp.com/). - NullMode - [GitHub](https://github.com/NullMode) / [Mastodon](https://infosec.exchange/@nullmode_@twtr.plus) / [Twitter](https://twitter.com/nullmode_). - Paule965 - [Twitter](https://twitter.com/paule965). - Philsmd - [GitHub](https://github.com/philsmd) / [Twitter](https://twitter.com/philsmd). - Roycewilliams - [GitHub](https://github.com/roycewilliams) / [Mastodon](https://infosec.exchange/@tychotithonus) / [Twitter](https://twitter.com/TychoTithonus). - RuraPenthe - [GitHub](https://github.com/bitcrackcyber) / [Mastodon](https://infosec.exchange/@rurapenthe) / [Twitter](https://twitter.com/RuraPenthe0). - S3in!c - [GitHub](https://github.com/s3inlc) / [Mastodon](https://infosec.exchange/@s3inlc) / [Twitter](https://twitter.com/s3inlc). - Tehnlulz - [GitHub](https://github.com/tehnlulz) / [Twitter](https://twitter.com/tehnlulz). - The_Mechanic - [GitHub](https://github.com/th3mechanic) / [Twitter](https://twitter.com/th3_m3chan1c). - ToXiC - [Twitter](https://twitter.com/yiannistox). - Undeath - [GitHub](https://github.com/undeath). - Unix-ninja - [GitHub](https://github.com/unix-ninja) / [Mastodon](https://infosec.exchange/@unix_ninja@twitterbridge.jannis.rocks) / [Twitter](https://twitter.com/unix_ninja). - Xan - [GitHub](https://github.com/Xanadrel) / [Mastodon](https://infosec.exchange/@Xanadrel) / [Twitter](https://twitter.com/Xanadrel). ## Websites ### Communities - [hashcat Forum](https://hashcat.net/forum/) - Forum by the developers of hashcat. - [Hashmob](https://hashmob.net/) - A growing password recovery community aimed towards being a center point of collaboration for [cryptography](/@harrisonqian/awesome/wiki/computer-science/cryptography) enthusiasts. Huge wordlist collection and a lookup service too. - [Hashkiller Forum](https://forum.hashkiller.io/) - A password cracking forum with over 20,000 registered users. ### Lookup services - [CMD5](https://www.cmd5.org/) - Provides online MD5 / sha1/ [mysql](/@harrisonqian/awesome/wiki/databases/mysql) / sha256 encryption and decryption services. - [CrackStation](https://crackstation.net/) - Free hash lookup service supplying wordlists as well. - [gohashmob](https://github.com/n0kovo/gohashmob) - Go CLI app to quickly lookup hashes using the HashMob API. - [Hashes.com](https://hashes.com/) - A hash lookup service with paid features. - [Hashkiller](https://hashkiller.io/) - A hash lookup service with a forum. - [Online Hash Crack](https://www.onlinehashcrack.com/) - Cloud password recovery service. ## Wordlist tools *Tools for analyzing, generating and manipulating wordlists.* ### Analysis - [PACK](https://github.com/iphelix/pack) - A collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics. - [password-smelter](https://github.com/TheTechromancer/password-smelter) - Ingests passwords from hashcat, etc. and outputs to HTML, [Markdown](/@harrisonqian/awesome/wiki/miscellaneous/markdown), XLSX, PNG, [JSON](/@harrisonqian/awesome/wiki/miscellaneous/json). Dark and light themes supported. Compliments password-stretcher. - [password-stretcher](https://github.com/thetechromancer/password-stretcher) - Generate "disgusting quantities" of passwords from websites, files, or stdin. Compliments password-smelter. - [pcfg_cracker](https://github.com/lakiw/pcfg_cracker) - This project uses [machine learning](/@harrisonqian/awesome/wiki/computer-science/machine-learning) to identify password creation habits of users. - [Pipal](https://github.com/digininja/pipal) - THE password analyser. - [Graphcat](https://github.com/Orange-Cyberdefense/graphcat) - Generate graphs and charts based on password cracking result. ### Generation/Manipulation - [accent_permutator](https://github.com/cyclone-github/accent_permutator) - A tool to transform characters from ASCII / UTF-8 to accented characters such as "o" to "ò". - [anew](https://github.com/tomnomnom/anew) - Append lines from stdin to a file, but only if they don't already appear in the file. Outputs new lines to stdout too, making it a bit like a tee -a that removes duplicates. - [bopscrk](https://github.com/r3nt0n/bopscrk) - Generate smart and powerful wordlists for targeted attacks. Includes song lyrics fetching and different transforms. - [common-substr](https://github.com/sensepost/common-substr) - Simple tool to extract the most common substrings from an input text. Built for password cracking. - [Crunch](https://sourceforge.net/projects/crunch-wordlist/) - Crunch is a wordlist generator where you can specify a standard character set or a character set you specify. Crunch can generate all possible combinations and permutations. - [CUPP](https://github.com/Mebus/cupp) - A tool that lets you generate wordlists by user profiling data such as birthday, nickname, address, name of a pet or relative etc. - [duplicut](https://github.com/nil0x42/duplicut) - Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking). - [Gorilla](https://github.com/d4rckh/gorilla) - Tool for generating wordlists or extending an existing one using mutations. - [Gramify](https://github.com/TheWorkingDeveloper/gramify) - Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis. - [Elpscrk](https://github.com/D4Vinci/elpscrk) - Elpscrk is like cupp, but it's based on permutations and statistics while being memory efficient. - [Keyboard-Walk-Generators](https://github.com/Rich5/Keyboard-Walk-Generators) - Generate Keyboard Walk Dictionaries for cracking. - [kwprocessor](https://github.com/hashcat/kwprocessor) - Advanced keyboard-walk generator with configureable basechars, keymap and routes. - [maskprocessor](https://github.com/hashcat/maskprocessor/) - High-performance word generator with a per-position configureable charset. - [maskuni](https://github.com/flbdx/maskuni) - A standalone fast word generator in the spirit of hashcat's mask generator with [unicode](/@harrisonqian/awesome/wiki/miscellaneous/unicode) support. - [Mentalist](https://github.com/sc0tfree/mentalist) - Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper. - [PTT](https://github.com/JakeWnuk/ptt) - The Password Transformation Tool (ptt) is a versatile utility designed for password cracking. It facilitates the creation of custom rules and transformations, as well as the generation of wordlists. This tool supports processing data from files, URLs, and standard input, streamlining cracking workflows. - [Phraser](https://github.com/Sparell/Phraser) - Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking. - [princeprocessor](https://github.com/hashcat/princeprocessor) - Standalone password candidate generator using the PRINCE algorithm. - [Rephraser](https://github.com/travco/rephraser) - A [Python](/@harrisonqian/awesome/wiki/programming-languages/python)-based reimagining of Phraser using Markov-chains for linguistically-correct password cracking. - [Rling](https://github.com/Cynosureprime/rling) - RLI Next Gen (Rling), a faster multi-threaded, feature rich alternative to rli found in hashcat utilities. - [statsprocessor](https://github.com/hashcat/statsprocessor/) - Word generator based on per-position markov-chains. - [StringZilla](https://github.com/ashvardanian/StringZilla) - Fastest string sort, search, split, and shuffle for long strings and multi-gigabyte files in [Python](/@harrisonqian/awesome/wiki/programming-languages/python) and C. - [TTPassGen](https://github.com/tp7309/TTPassGen) - Flexible and [scriptable](/@harrisonqian/awesome/wiki/miscellaneous/scriptable) password dictionary generator which supportss brute-force, combination, complex rule modes etc. - [token-reverser](https://github.com/dariusztytko/token-reverser) - Words list generator to crack [security](/@harrisonqian/awesome/wiki/security/security) tokens. - [WikiRaider](https://github.com/NorthwaveSecurity/wikiraider) - WikiRaider enables you to generate wordlists based on country specific databases of Wikipedia. ## Wordlists ### Laguage specific - [Albanian wordlist](https://github.com/its0x08/albanian-wordlist) - A mix of names, last names and some albanian literature. - [Danish Phone Wordlist Generator](https://github.com/narkopolo/danish_phone_wordlist_generator) - This tool can generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or [fuzzing](/@harrisonqian/awesome/wiki/security/fuzzing) Danish targets. - [Danish Wordlists](https://github.com/narkopolo/danish-wordlists) - Collection of danish wordlists for cracking danish passwords. - [French Wordlists](https://github.com/clem9669/wordlists) - This project aim to provide french word list about everything a person could use as a base password. ### Other - [Packet Storm Wordlists](https://packetstormsecurity.com/Crackers/wordlists/page1/) - A substantial collection of different wordlists in multiple languages. - [Rocktastic](https://labs.nettitude.com/tools/rocktastic/) - Includes many permutations of passwords and patterns that have been observed in the wild. - [RockYou2021](https://github.com/ohmybahgosh/RockYou2021.txt) - RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. - [WeakPass](https://weakpass.com/) - Collection of large wordlists. ## Specific file formats ### PDF - [pdfrip](https://github.com/mufeedvh/pdfrip) - A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks. ### JKS - [JKS private key cracker](https://github.com/floyd-fuh/JKS-private-key-cracker-hashcat) - Cracking passwords of private key entries in a JKS file. ### ZIP - [bkcrack](https://github.com/kimci86/bkcrack) - Crack legacy zip encryption with Biham and Kocher's known plaintext attack. - [frackzip](https://github.com/hyc/fcrackzip) - Small tool for cracking encrypted ZIP archives. ## Machine Learning / AI - [adams](https://github.com/TheAdamProject/adams) - Reducing Bias in Modeling Real-world Password Strength via [Deep Learning](/@harrisonqian/awesome/wiki/computer-science/deep-learning) and Dynamic Dictionaries. - [neural network cracking](https://github.com/cupslab/neural_network_cracking) - Code for cracking passwords with neural networks. - [RNN-Passwords](https://github.com/gehaxelt/RNN-Passwords) - Using the char-rnn to learn and guess passwords. - [rulesfinder](https://github.com/synacktiv/rulesfinder) - This tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords. - [PassGPT](https://github.com/javirandor/passgpt) - PassGPT is a GPT-2 model trained from scratch on password leaks. - [SePass: Semantic Password Guessing using k-nn Similarity Search in Word Embeddings](https://github.com/Knuust/SePass) - A password guessing method that utilizes word embeddings to discover and exploit semantic correlations in password lists. ## Research ### Articles and Blog Posts - [Optimizing Wordlists with Masks](https://jakewnuk.com/posts/optimizing-wordlists-w-masks/) - [Purple Rain Attack - Password Cracking With Random Generation](https://www.netmux.com/blog/purple-rain-attack) - [Smashing Hashes with Token Swapping Attacks](https://jakewnuk.com/posts/token-swapping-attack/) - [Bcrypt at 25: A Retrospective on Password Security](https://www.usenix.org/publications/loginonline/bcrypt-25-retrospective-password-security) ### Papers - [PassGPT: Password Modeling and (Guided) Generation with LLMs](https://arxiv.org/abs/2306.01545) - [Password Cracking Using Probabilistic Context-Free Grammars (2009)](https://www.researchgate.net/publication/220713709_Password_Cracking_Using_Probabilistic_Context-Free_Grammars) - [Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks (2016)](https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/melicher) - [PassGAN: A [Deep Learning](/@harrisonqian/awesome/wiki/computer-science/deep-learning) Approach for Password Guessing (2017)](https://arxiv.org/pdf/1709.00440) - [GENPass: A General [Deep Learning](/@harrisonqian/awesome/wiki/computer-science/deep-learning) Model for Password Guessing with PCFG Rules and Adversarial Generation (2018)](https://ieeexplore.ieee.org/document/8422243) - [Generating Optimized Guessing Candidates toward Better Password Cracking from Multi-Dictionaries Using Relativistic GAN (2020)](https://www.mdpi.com/2076-3417/10/20/7306/htm) - [Reducing Bias in Modeling Real-world Password Strength via [Deep Learning](/@harrisonqian/awesome/wiki/computer-science/deep-learning) and Dynamic Dictionaries (2020)](https://arxiv.org/abs/2010.12269) - [PassFlow: Guessing Passwords with Generative Flows (2021)](https://arxiv.org/abs/2105.06165) - [GNPassGAN: Improved Generative Adversarial Networks For Trawling Offline Password Guessing (2022)](https://arxiv.org/pdf/2208.06943) - [The Revenge of Password Crackers: Automated Training of Password Cracking Tools (2022)](https://doi.org/10.1007/978-3-031-17146-8_16) - [A Systematic Review on Password Guessing Tasks (2023)](https://doi.org/10.3390/e25091303) - [Harder, better, faster, stronger: Optimising the performance of context-based password cracking dictionaries (2023)](https://doi.org/10.1016/j.fsidi.2023.301507) - [Confident Monte Carlo: Rigorous Analysis of Guessing Curves for Probabilistic Password Models (2023)](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10179365) - [Improving Real-world Password Guessing Attacks via Bi-directional Transformers (2023)](https://www.usenix.org/conference/usenixsecurity23/presentation/xu-ming) - [Mangling Rules Generation With Density-Based Clustering for Password Guessing (2023)](https://annas-archive.pk/scidb/10.1109/tdsc.2022.3217002/) - [No Single Silver Bullet: Measuring the Accuracy of Password Strength Meters (2023)](https://www.usenix.org/system/files/usenixsecurity23-wang-ding-silver-bullet.pdf) - [Optimizing The Computation Of Password Hashes (2023)](https://helda.helsinki.fi/server/api/core/bitstreams/23a37f74-a162-4473-b894-5da77f0627d1/content) - [PGTCN: A Novel Password-Guessing Model Based On Temporal Convolution Network (2023)](https://annas-archive.pk/scidb/10.1016/j.jnca.2023.103592/) - [Towards a Rigorous Statistical Analysis of Empirical Password [Datasets](/@harrisonqian/awesome/wiki/miscellaneous/datasets) (2023)](https://ieeexplore.ieee.org/document/10179431) - [Enhancing The Resistance Of Password Hashing Using Binary Randomization Through Logical Gates (2024)](http://doi.org/10.11591/ijece.v14i5.pp5400-5407) - [GuessFuse: Hybrid Password Guessing With Multi-View (2024)](https://ieeexplore.ieee.org/document/10466588) - [PassRVAE: Improved Trawling Attacks via Recurrent Variational Autoencoder (2024)](https://dl.acm.org/doi/10.1145/3673277.3673295) - [Prob-Hashcat: Accelerating Probabilistic PasswordGuessing with Hashcat by Hundreds of Times (2024)](https://dl.acm.org/doi/epdf/10.1145/3678890.3678919) - [Reinforcing Cybersecurity With Bloom Filters: A Novel Approach To Password Cracking Efficiency (2024)](https://doi.org/10.1186/s13635-024-00183-2) - [Beyond The Dictionary Attack: Enhancing Password Cracking Efficiency Through [Machine Learning](/@harrisonqian/awesome/wiki/computer-science/machine-learning)-Induced Mangling Rules (2025)](https://doi.org/10.1016/j.fsidi.2025.301865) - [MAYA: Addressing Inconsistencies in Generative Password Guessing through a Unified Benchmark (2025)](https://arxiv.org/abs/2504.16651) - [Password Guessing Using Large Language Models (2025)](https://www.usenix.org/system/files/usenixsecurity25-zou-yunkai.pdf) - [PassRecover: A Multi-FPGA System for End-to-End Offline Password Recovery Acceleration (2025)](https://doi.org/10.3390/electronics14071415) - [When Intelligence Fails: An Empirical Study on Why LLMs Struggle with Password Cracking (2025)](https://arxiv.org/abs/2510.17884) - [Success Rates Doubled with Only One Character: Mask Password Guessing (2025)](https://doi.org/10.14722/ndss.2026.241059) - [PGMaP: Password Generation Based On Mask Prediction (2026)](https://linkinghub.elsevier.com/retrieve/pii/S0957417426002319) - [Improving targeted password guessing attacks by using personally identifiable information and old password (2026)](https://doi.org/10.1186/s42400-025-00430-0) ### Talks - [BSides Cayman Islands 2024 - No Cap Cracking: Improving Offline Hash Recovery Methodologies](https://jakewnuk.com/static/No%20Cap%20Cracking%20Improving%20Offline%20Hash%20Recovery%20Methodologies.pdf) - [BSides Cayman Islands 2023 - Leveling Up Password Attacks with Breach Data](https://jakewnuk.com/static/Leveling%20Up%20Password%20Attacks%20with%20Breach%20Data.pdf) - [DEF CON Safe Mode Password Village - Getting Started with Hashcat](https://www.youtube.com/watch?v=MBTJ8f6Fsmg) - [DEF CON Safe Mode Password Village - Jeremi Gosney - Cracking at Extreme Scale](https://www.youtube.com/watch?v=4Ell1Tt23NI) - [DEF CON 28 Safe Mode Password Village – 'Let's Crack RockYou Without Using rockyou txt'](https://www.youtube.com/watch?v=8FtXntEsZdU) - [SecTor 2019 - Will Hunt - Hashes, Hashes Everywhere, But All I See Is Plaintext](https://sector.ca/sessions/hashes-hashes-everywhere-but-all-i-see-is-plaintext/) - [Tailored, [Machine Learning](/@harrisonqian/awesome/wiki/computer-science/machine-learning)-driven Password Guessing Attacks and Mitigation at DefCamp](https://www.youtube.com/watch?v=iK6ZbD6v9Gg) - [UNHash - Methods for better password cracking](https://media.ccc.de/v/31c3_-_5966_-_en_-_saal_1_-_201412292245_-_unhash_-_methods_for_better_password_cracking_-_tonimir_kisasondi) - [USENIX [Security](/@harrisonqian/awesome/wiki/security/security) '23 - No Single Silver Bullet: Measuring the Accuracy of Password Strength Meters](https://www.youtube.com/watch?v=0vhoAaqGYV8) - [USENIX [Security](/@harrisonqian/awesome/wiki/security/security) '23 - Improving Real-World Password Guessing Attacks via Bi-Directional Transformers](https://www.youtube.com/watch?v=kE7dEUcPtU0) - [USENIX [Security](/@harrisonqian/awesome/wiki/security/security) '21 - Reducing Bias in Modeling Real-world Password Strength via [Deep Learning](/@harrisonqian/awesome/wiki/computer-science/deep-learning) and Dynamic Dictionaries](https://www.youtube.com/watch?v=Jvp3UTdCeag) - [USENIX [Security](/@harrisonqian/awesome/wiki/security/security) '16 - Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks](https://www.youtube.com/watch?v=GgaZ_LxsL_8)