Passwords
All things password cracking.
General
- hashcat
- hashcat-utils
- princeprocessor
- rephraser
- hydra
- authoscope
- Crack custom web services
- progpick
- Bruteforce with a stream of permutations of a specific pattern
- DeepPass
- Identify passwords in documents
- hashcat-cheatsheet
- pdfrip
- Crack PDFs
- hcre
- Standalone Hashcat rules engine in Python as a CLI utility
- Name-That-Hash
- Hash type identifier
- Search-That-Hash
- Automatically search APIs for a given hash and crack it if not found
- Mainly useful as a reference, especially for API calls
- CredMaster
- Password spray/brute force tool that shifts IP via AWS passthrough proxies
- KeePass Password Dumper (CVE-2023-32784)
- Fixed in KeePass 2.54
- KeeFarce
- Extract passwords from a KeePass 2.x database directly from memory
- npk
- Serverless + distributed hash cracking platform (!)
- changeme
- Default credential scanner
- vast.ai
- Cheap GPU rentals
Rules
Wordlists
- SecLists
- Default Creds Cheatsheet
- CrackStation
- Aggregation of various wordlists
- WeakPass
- Many different wordlists + aggregations
- Probable Wordlists
- Statistically common passwords
- Beware that this requires torrent and/or mega.nz download (or just use WeakPass)
- passphrase-wordlist
- Wordlist for more uncommon words, e.g. some words are sourced from KnowYourMeme
- CeWL
- Custom Word List generator
- D4N155
- Wordlist based on website contents
- Wikimedia Dumps
- You could probably pull something out of this
- DBpedia
- Structured data from Wikimedia projects, exposes a SPARQL endpoint for querying
- english-words
- A text file with 466k English words
- Google Books n-gram frequency lists
- Rocktastic (Nettitude)
Books
- Project Gutenberg
- SO: How to download all English books from Gutenberg?
- Two options:
- For specific files/filetypes, or smaller sets in general: Information About Robot Access to our Pages
- For the entire collection: Mirroring How-To
Movie/TV Scripts
TODO: Need to find a way to extract text from PDFs...
- IMSDb
- All the movie/TV scripts
- Use imsdb_download_all_scripts to scrape the website. If it doesn't work for whatever reason, it's super easy to scrape the website anyway.
- AwesomeFilm.com
- Scripts as plain text files
- Script on Screen
- Search engine for movie scripts if a specific one is needed
- The Daily Script
- List of resources for finding scripts
Song Lyrics
- musiXmatch
- Music Dataset: Lyrics and Metadata from 1950 to 2019
- Kaggle is pretty handy!
- https://www.kaggle.com/datasets/deepshah16/song-lyrics-dataset
- https://www.kaggle.com/datasets/neisse/scrapped-lyrics-from-6-genres
- https://www.kaggle.com/datasets/paultimothymooney/poetry
- https://www.kaggle.com/datasets/terminate9298/songs-lyrics