[PACK] Password Analysis & Cracking Kit

PACK (Password Analysis and Cracking Toolkit) is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics. The toolkit generates valid input files for Hashcat family of password crackers.

NOTE: The toolkit itself is not able to crack passwords, but instead designed to make operation of password crackers more efficient.

Download PACK

[Twitter Password Dump] Command-line Tool to Recover Twitter Password from Web Browsers

Twitter Password Dump is the command-line tool to instantly recover your lost Twitter password from all the popular web browsers.


Currently it can recover your Twitter password from following applications,

• Firefox
• Internet Explorer (v6.x - v10.x)
• Google Chrome
• Chrome Canary/SXS
• CoolNovo Browser
• Opera Browser
• Apple Safari
• Flock Browser
• SeaMonkey Browser
• Comodo Dragon Browser

It automatically discovers installed applications on your system and recovers all the stored Twitter login passwords within seconds.

Download TwitterPasswordDump v1.0

[Wi-Fi Password Key Generator] Wireless WEP/WPA/WPA2 Security Key Maker Tool

WiFi Password Key Generator is the free desktop tool to quickly create secure Wireless WEP/WPA/WPA2 keys.

Most devices (Modems/Routers) require you to enter WEP/WPA keys during Wireless security configuration. Unlike regular passwords, these keys have strict length requirements based on type of security mechanism (WEP, WPA, WPA2 etc).

In such cases, 'Wi-Fi Password Key Generator' can help you to easily generate these keys. It supports all types of Wireless Security configurations (WEP, WPA, WPA2) and key length combinations as shown below,

• WEP - 64-bit - 5 Characters
• WEP - 128-bit - 13 Characters
• WEP - 152-bit - 16 Characters
• WEP - 256-bit - 29 Characters
• WPA - 64-bit - 8 Characters
• WPA2 - 160-bit - 20 Characters
• WPA2 - 504-bit - 63 Characters

It generates Secure Wireless keys using combination of lowercase letters, uppercase letters, numbers and special symbols.

Also the generated key is displayed in both ASCII and HEX format. So based on what your wireless device asks, you can copy the right form of key.

It is very easy to use this tool and any one can generate secure Wi-Fi key within seconds with few clicks.

Download WiFi Password Key Generator v1.5

[JBrute v0.9.4] Open Source Security tool to audit hashed passwords

JBrute is an open source tool written in Java to audit security and stronghold of stored password for several open source and commercial apps. It is focused to provide multi-platform support and flexible parameters to cover most of the possible password-auditing scenarios.

Java Runtime version 1.7 or higher is required for running JBrute.

Features

• Muli-platform support (by Java VM)
• Several hashing algorithms supported
• Flexible chained hashes decryption (like MD5(SHA1(MD5())))
• Both brute force and dictionary decryption methods supported
• Build-In rule pre-processor for dictionary decryption
• Multi-threading support for brute force decryption

Supported algorithms:

• MD5
• MD4
• SHA-256
• SHA-512
• MD5CRYPT
• SHA1
• ORACLE-10G
• ORACLE-11G
• NTLM
• LM
• MSSQL-2000
• MSSQL-2005
• MSSQL-2012
• MYSQL-322
• MYSQL-411
• POSTGRESQL
• SYBASE-ASE1502

Download JBrute v0.9.4

[SuperPutty Password Decryptor] SuperPutty Session Login Password Recovery Software

SuperPutty Password Decryptor is the Free desktop tool to instantly recover all the login passswords from SuperPutty session history.

SuperPutty is a Windows GUI Application that allows PuTTY SSH Client to be opened in Tabs. It also stores the session details allowing users to automatically login without entering the password every time.

SuperPutty Password Decryptor helps you to quickly recover all the stored login passwords from this session file. It also automatically detects SuperPutty session file for the current user and displays it. Alternatively, you can also select another session file copied from remote system.

After the successful recovery, you can generate detailed password report in HTML/XML/TEXT file. It is very simple and easy to use tool with its cool GUI interface.

Download SuperPutty Password Decryptor v1.5

[Facebook Password Dump] Tool to instantly recover your lost Facebook password

Facebook Password Dump is the command-line tool to instantly recover your lost Facebook password from popular web browsers and messengers.


It automatically discovers installed applications on your system and recovers all the stored Facebook login passwords within seconds.

Being command-line tool makes it ideal tool for penetration testers and forensic investigators. For GUI version check out the Facebook Password Decryptor.

Download FacebookPasswordDump v1.0

[Browser Password Dump] Tool to instantly recover your lost password from all the popular web browsers

Browser Password Dump is the free command-line tool to instantly recover your lost password from all the popular web browsers.

Currently it can recover stored web login passwords from following browsers.

• Firefox
• Internet Explorer
• Google Chrome
• Chrome Canary/SXS
• CoolNovo Browser
• Opera Browser
• Apple Safari
• Flock Browser
• SeaMonkey Browser
• Comodo Dragon Browser

It automatically discovers installed applications on your system and recovers all the stored web login passwords within seconds.

Download Browser Password Dump v1.0

[Browser Password Decryptor v5.0] Browser Password Recovery Tool

Browser Password Decryptor is the FREE software to instantly recover website login passwords stored by popular web browsers.

Currently it can recover saved login passwords from following browsers.

Firefox Internet Explorer Google Chrome Google Chrome Canary/SXS CoolNovo Browser Opera Browser Apple Safari Comodo Dragon Browser SeaMonkey Browser Flock Browser

It has both GUI interface as well as command line version making it more useful for Penetration testers and Forensic investigators. Download Browser Password Decryptor v5.0

[Twitter Password Decryptor v4.0] Recover Twitter Password

Twitter Password Decryptor is the FREE software to instantly recover Twitter account passwords stored by popular web browsers.

Most web browsers store the login passwords for visited websites so that user don't have to remember and enter the password every time. Each of these web browsers use their own proprietary encryption mechanism to store the login passwords including Twitter account passwords.

TwitterPasswordDecryptor automatically crawls through each of these browsers and instantly recovers all of the stored Twitter passwords.
It supports both GUI interface as well as command line version making it very useful tool for Penetration testers & Forensic investigators.

It currently supports recovering of the stored Twitter account password from following popular Internet browsers.

Internet Explorer Firefox Google Chrome Chrome SXS/Canary CoolNovo Browser Opera Browser Apple Safari Flock Browser Comodo Dragon Browser SeaMonkey Browser

Here are the main features

Instantly decrypt and recover stored encrypted Twitter account password from Popular Web browsers. Comes with both GUI interface as well as Command-line version. Automatically discovers the supported applications from their respective install location and recovers the password instantly. Sort feature to arrange the displayed password list by username and password which makes it easy to search through 100's of entries. Save the recovered Twitter password list to HTML/XML/Text file Easier and faster to use with its enhanced user friendly interface. It comes with Installer for helping you in local Installation & Uninstallation.

Download TwitterPasswordDecryptor v4.0

[Gmail Password Dump] Command-line Tool to Recover Google Password

Gmail Password Dump is the command-line tool to instantly recover your lost gmail password from various Google applications as well as popular web browsers and messengers.

Currently it can recover your Gmail password from following applications,

• Google Talk
• Google Picassa
• Google Desktop Seach
• Gmail Notifier
• Firefox
• Internet Explorer
• Google Chrome
• Chrome Canary/SXS
• CoolNovo Browser
• Opera Browser
• Apple Safari
• Flock Browser
• SeaMonkey Browser
• Comodo Dragon Browser
• Paltalk Messenger
• Pidgin Messenger
• Miranda Messenger

It automatically discovers installed applications on your system and recovers all the stored google account passwords within seconds.

Being command-line tool makes it ideal tool for penetration testers and forensic investigators. For GUI version check out the Google Password Decryptor.

Download Gmail Password Dump v1.0

[Facebook Password Decryptor v5.0] Facebook Password Recovery Software

Facebook Password Decryptor is the FREE software to instantly recover Facebook account passwords stored by popular Web Browsers and Messengers.

It is one of our most popular software with over One Million downloads worldwide.

It supports recovering of the stored Facebook login password from most of the popular Internet browsers and messengers.

Here is the complete list of supported applications.

• Internet Explorer (v4.0 - v10.0)
• Firefox
• Google Chrome
• Chrome Canary/SXS
• CoolNovo Browser
• Opera Browser
• Apple Safari
• Flock Browser
• Comodo Dragon Browser
• SeaMonkey Browser
• Paltalk Messenger
• Miranda Messenger

It presents both GUI interface as well as command line version making it useful tool for Penetration testers and Forensic investigators.

Download Facebook Password Decryptor v5.0 

[Salted Hash Kracker v1.5] Recover the Password from Salted Hash text

Salted Hash Kracker is the free all-in-one tool to recover the Password from Salted Hash text.

These days most websites and applications use salt based hash generation to prevent it from being cracked easily using precomputed hash tables such as Rainbow Crack. In such cases, 'Salted Hash Kracker' will help you to recover the lost password from salted hash text.

It also allow you to specify the salt position either in the beginning of password(salt+password) or at the end of the password (password+salt). In case you want to perform normal hash cracking without the salt then just leave the 'Salt field' blank.

Currently it supports password recovery from following popular Hash types

• MD5
• SHA1
• SHA256
• SHA384
• SHA512

It uses dictionary based cracking method which makes the cracking operation simple and easier. You can find good collection of password dictionaries (also called wordlist) here & here

Download Salted Hash Kracker v1.5

[John the Ripper v1.8.0] Fast Password Cracker

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version.

John the Ripper is free and Open Source software, distributed primarily in source code form. If you would rather use a commercial product tailored for your specific operating system, please consider John the Ripper Pro, which is distributed primarily in the form of "native" packages for the target operating systems and in general is meant to be easier to install and use while delivering optimal performance.

Changelog v1.8.0

• Revised the incremental mode to let the current character counts grow for each character position independently, with the aim to improve efficiency in terms of successful guesses per candidate passwords tested.
• Revised the pre-defined incremental modes, as well as external mode filters that are used to generate .chr files.
• Added makechr, a script to (re-)generate .chr files.
• Enhanced the status reporting to include four distinct speed metrics (g/s, p/s, c/s, and C/s).
• Added the “–fork=N” and “–node=MIN[-MAX]/TOTAL” options for trivial parallel and distributed processing.
• In the external mode compiler, treat character literals as unsigned.
• Renamed many of the formats.
• Updated the documentation.
• Relaxed the license for many source files to cut-down BSD.
• Relaxed the license for John the Ripper as a whole from GPLv2 (exact version) to GPLv2 or newer with optional OpenSSL and unRAR exceptions.
• Assorted other changes have been made.

Download John the Ripper v1.8.0

[Hashcat v0.45] Advanced Password Recovery

* changes v0.44 -> v0.45:

Release with some new algorithms:

• AIX smd5
• AIX ssha1, ssha256, ssha512
• GOST R 34.11-94

We managed also to fix some bugs and implement some additional feature requests

Full changelog:

type: feature

file: hashcat-cli
desc: show status screen also when all hashes were recovered AND add start/stop time too

type: feature
file: hashcat-cli
desc: added -m 6300 = AIX {smd5}
cred: philsmd

type: feature
file: hashcat-cli
desc: added -m 6400 = AIX {ssha256}
cred: philsmd

type: feature
file: hashcat-cli
desc: added -m 6500 = AIX {ssha512}
cred: philsmd

type: feature
file: hashcat-cli
desc: added -m 6700 = AIX {ssha1}
cred: philsmd

type: feature
file: hashcat-cli
desc: added -m 6900 = GOST R 34.11-94
cred: Xanadrel

type: feature
file: hashcat-cli
desc: dropped predefined charsets ?h, ?F, ?G and ?R
trac: #55

type: feature
file: hashcat-cli
desc: added a collection of language-specific charset-files for use with masks
trac: #55

type: feature
file: hashcat-cli
desc: changed the E rule to lowercase all input before processing, its more intuitive
trac: #110

type: feature
file: rules
desc: added a more more complex leetspeak rules file from unix-ninja
trac: #112

type: feature
file: hashcat-cli
desc: changed outfile opts to line up with OCL style
trac: #120

type: feature
file: hashcat-cli
desc: --remove in combination w/ external salts should output plain hash files only (no salt)
trac: #153

type: bug
file: hashcat-cli
desc: fix progress line in status screen when all hashes were recovered

type: bug
file: hashcat-cli
desc: fix for some possible memory overflow problems

type: bug
file: hashcat-cli
desc: an external salt sort failure caused some hashes not to be checked against the digests
trac: #74

type: bug
file: hashcat-cli
desc: fixed a null-pointer dereference that can lead to a segmentation fault
trac: #104

type: bug
file: hashcat-cli
desc: fixed a bug if hashlist contains words with ascii character code >= 0x80
trac: #108

Download Hashcat v0.45

[Cain & Abel v4.9.44] Password recovery tool for Microsoft Operating Systems

Cain & Abel is a password recovery tool for Microsoft Operating Systems.

It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols.

The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort.

It covers some security aspects/weakness present in protocol’s standards, authentication methods and caching mechanisms; its main purpose is the simplified recovery of passwords and credentials from various sources, however it also ships some “non standard” utilities for Microsoft Windows users.

The latest version is faster and contains a lot of new features like APR (Arp Poison Routing) which enables sniffing on switched LANs and Man-in-the-Middle attacks.

The sniffer in this version can also analyze encrypted protocols such as SSH-1 and HTTPS, and contains filters to capture credentials from a wide range of authentication mechanisms.

The new version also ships routing protocols authentication monitors and routes extractors, dictionary and brute-force crackers for all common hashing algorithms and for several specific authentications, password/hash calculators, cryptanalysis attacks, password decoders and some not so common utilities related to network and system security.

03/05/2013

Cain & Abel v4.9.44 released

• Added Windows 8 support in LSA Secret Dumper.
• Added Windows 8 support in Credential Manager Password Decoder.
• Added Windows 8 support in EditBox Revealer.
• Added ability to keep original extensions in fake certificates.
• Winpcap library upgrade to version 4.1.3 (Windows8 supported).
• OUI List updated.

Download Cain & Abel v4.9.44

[BSNL Password Decryptor] Tool to Recover the Login Password of BSNL modem/router

BSNL Password Decryptor is a free desktop tool to instantly recover the Login Password of BSNL modem/router.

If you have lost login authentication password of your BSNL modem and you have backup configuration file then you can use this tool to quickly recover your password.

It supports dual mode of password recovery. You can either enter the encrypted BSNL password directly or specify the BSNL Modem's backup configuration file. In second case, it will automatically detect the login password from config file and decrypt it instantly.

Note that it currently supports limited number of BSNL modems (mainly UT-300 Series). Hence it may or may not work with other models.

This can be very handy tool for all Network Administrators as well as penetration testers.

It is successfully tested on both 32 bit & 64 bit windows systems starting from Windows XP to Windows 8

Download BSNL Password Decryptor