awesome-password-cracking
github.com/n0kovo/awesome-password-cracking ↗A curated list of awesome tools, research, papers and other projects related to password cracking and password security.
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me generation/manipulation resources from awesome-password-cracking"
Installation instructions →What's inside
Conversion
- 7z2hashcat
Extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat.
- bitwarden2hashcat
A tool that converts Bitwarden's data into a hashcat-suitable hash.
- hc_to_7z
Convert 7-Zip hashcat hashes back to 7z archives.
- hcxtools
Portable solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats.
- itunes_backup2hashcat
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat.
- MacinHash
Convert macOS plist password file to hash file for password crackers.
Wordlist tools
- accent_permutatorGeneration/Manipulation
A tool to transform characters from ASCII / UTF-8 to accented characters such as "o" to "ò".
- anewGeneration/Manipulation
Append lines from stdin to a file, but only if they don't already appear in the file. Outputs new lines to stdout too, making it a bit like a tee -a that removes duplicates.
- bopscrkGeneration/Manipulation
Generate smart and powerful wordlists for targeted attacks. Includes song lyrics fetching and different transforms.
- common-substrGeneration/Manipulation
Simple tool to extract the most common substrings from an input text. Built for password cracking.
- CrunchGeneration/Manipulation
Crunch is a wordlist generator where you can specify a standard character set or a character set you specify. Crunch can generate all possible combinations and permutations.
- CUPPGeneration/Manipulation
A tool that lets you generate wordlists by user profiling data such as birthday, nickname, address, name of a pet or relative etc.
Machine Learning / AI
- adams
Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries.
- neural network cracking
Code for cracking passwords with neural networks.
- PassGPT
PassGPT is a GPT-2 model trained from scratch on password leaks.
- RNN-Passwords
Using the char-rnn to learn and guess passwords.
- rulesfinder
This tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords.
- SePass: Semantic Password Guessing using k-nn Similarity Search in Word Embeddings
A password guessing method that utilizes word embeddings to discover and exploit semantic correlations in password lists.
Wordlists
- Albanian wordlistLaguage specific
A mix of names, last names and some albanian literature.
- Danish Phone Wordlist GeneratorLaguage specific
This tool can generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets.
- Danish WordlistsLaguage specific
Collection of danish wordlists for cracking danish passwords.
- French WordlistsLaguage specific
This project aim to provide french word list about everything a person could use as a base password.
- Packet Storm WordlistsOther
A substantial collection of different wordlists in multiple languages.
- RocktasticOther
Includes many permutations of passwords and patterns that have been observed in the wild.
Research
- A Systematic Review on Password Guessing Tasks (2023)Papers
- Bcrypt at 25: A Retrospective on Password SecurityArticles and Blog Posts
- Beyond The Dictionary Attack: Enhancing Password Cracking Efficiency Through Machine Learning-Induced Mangling Rules (2025)Papers
- BSides Cayman Islands 2023 - Leveling Up Password Attacks with Breach DataTalks
Leveling Up Password Attacks with Breach Data
- BSides Cayman Islands 2024 - No Cap Cracking: Improving Offline Hash Recovery MethodologiesTalks
No Cap Cracking: Improving Offline Hash Recovery Methodologies
- Confident Monte Carlo: Rigorous Analysis of Guessing Curves for Probabilistic Password Models (2023)Papers
Hashcat
- autocrackAutomation
Hashcat wrapper to help automate the cracking process.
- Autocrack
A set of client and server tools for automatically, and lightly automatically cracking hashes.
- clem9669 rulesRules
Rule for hashcat or john.
- crackerjackWeb interfaces
CrackerJack is a Web GUI for Hashcat developed in Python.
- CrackLordDistributed cracking
Queue and resource system for cracking passwords.
- CrackQWeb interfaces
A Python Hashcat cracking queue system.
Resources
John the Ripper
- BitCracker
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker.
- johnny
GUI frontend to John the Ripper.
Showing a sample of 191 resources. View the full list on GitHub →