Brute force password cracker and breaking tools are sometimes necessary when you lose your password. There are other cases as well, such as white hat penetration testing or possibly testing the strength of your own passwords.
Password crackers that can brute force passwords by trying a large amount of queries pulled from a .txt or .csv file are available across all operating systems.
Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms. Features: » Runs on Windows, Linux/Unix, Mac OS X. » Cracks LM and NTLM hashes. John the Ripper can also crack UNIX/Linux passwords. You need root access to your system and to the password (/etc/passwd) and shadow password (/etc/shadow) files. Perform the following steps for cracking UNIX/Linux passwords: Download the UNIX source files from www.openwall.com/john. Reading the password hashes of the target. So we will save the hashes as well in a file called shadow.txt and we will use the famous password cracker john the ripper in order to crack those hashes.In backtrack john the ripper is located in the following path: /pentest/passwords/john. John the ripper directory.
Windows Brute Force Password Cracker’s
If you are not a native Linux or Unix user you may wish to brute force passwords on your windows operating system.
Ophcrack
Download Ophcrack
Ophcrack for windows is an excellent option for brute forcing passwords and cracking.
As stated by the developers:
Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms including Windows.
Ophcrack has a lot of advantages compared to other methods employed by most password crackers.
- Bootable from Live Disc or Live USB
- Excel and .csv exports
- Fast brute force password cracker
- Fully open-source and free
- Windows sample password file
- Brute forces LM and NTLM hashes
Brutus
Download Brutus
Are you are looking for lightning fast and windows only password cracking software? Brutus is you answer.
Brutus uses a technique called time memory trade off which allows for large multi-threaded brute forcing attacks all at once.
Brutus like Ophcrack requires you to use rainbow tables for brute force password cracking. You can go a few routes to obtain rainbow tables.
- Rainbow tables can be generated yourself and collected over time.
- Free sets of rainbow tables can also be grabbed here: http://project-rainbowcrack.com/table.htm
- As a last resort or for a bit more data rainbow tables are available for purchase at http://www.osforensics.com/rainbowtables_hashsets.html and http://project-rainbowcrack.com/buy.php
Cain and Able
Download Cain and Able
Cain and Able is not only a password cracker but and overall excellent network security tool.
Oxid.it the creators of Cain and Able detail the software as,
Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols.
As you can see Cain and Able opens up many more options and methods for obtaining passwords to crack and brute forcing them.
Linux Password Cracking Software
Linux is widely known as a common OS for security professionals and students. Linux has the most brute force password cracking software available compared to any OS and will give you endless options.
John the Ripper
Download John the Ripper
John the Ripper is compatible with Linux, Unix and fully able to brute force Windows LM hashes. Although, John the Ripper is not directly suited to Windows. This software is extremely fast at brute force cracking Linux and Unix NTLM hashes.
John the Ripper Pro is also available for business facing users that would like the software tailored to their operating system. The free JtR will work very well for the average user.
So is John the Ripper any Good?
Yes. Here is just a few of their credentials and reputable organizations that they are involved in:
John the Ripper is part of Owl, Debian GNU/Linux, EnGarde Linux, Gentoo Linux, Mandriva Linux, and SUSE Linux. It is in the ports/packages collections of FreeBSD, NetBSD, and OpenBSD.
John the Ripper is a registered project with Open Hub and it is listed at SecTools.
Medusa
Download Medusa
Medusa is a variation of the THC Hydra cracking software. Medusa has many advantages by being a speedy parallel, modular and login brute forcing tool.
Medusa speed really brings a great amount of appeal to the password cracking suite but the best feature of Medusa is their ability to run across a wide array of platforms and services.
Medusa supports:
- HTTP
- FTP
- SSH
- AFP
- IMAP
- MS SQL
- MYSQL
- NCP
- NNTP
- POP3
- PostgreSQL
- pcAnywhere
- rlogin,
- Telnet
- rsh
- SMTP
- SNMP
- CVS
- VNC
- VmAuthd
- SMB
- SV
Medusa’s parallel attacks are a truly unique option for pen-testers and hackers to utilize. With Medusa you are able to supply both a username file and a password file to attack both concurrently.
So how do I use Medusa brute force password cracking software? Simply entering “medusa” without any options into your terminal will return every one of the parameters it accepts along with their specific descriptions.
Need to crack more than one password? Medusa is your answer.
(Visited 5,563 times, 14 visits today)Related posts:- Pentesting Training Website Challenges Authentication Best Practices
- Glasswire (Network Monitor) Review
- Best Reverse Image Search Tools
- Best Evernote Alternatives 2019
BreachesDecember 14, 2019Parents of three Tennessee children learned today that a hacker had remotely broke into there Ring smart camera. The hacker spoke to the
Today media outlet HEISE reported that 1&1 Web Hosting in Germany was hit with 9.8 million euros in fines over GDPR violations. The
Read More →IT SecurityDecember 8, 2019• 3 CommentsThe penetration testing company Practical Pentest Labs has recently come under fire for how they handle user passwords. The passwords for
Twitch Investigating Streamer with Tourettes→Next Story
Best Evernote Alternatives 2019
Leave a Reply
Default Unix Password
About Tech Wagyu
Tech Wagyu is the premier blog for tech, security, civil unrest, and software reviews.
Copyright © 2020 - Tech Wagyu LLC↑Unix Password Policy