ToolWar | Information Security (InfoSec) Tools: Password

Wfuzz (Bruteforcing Web Applications,) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wfuzz logo" border="0" height="66" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTyDNKxZPiR8vIvwe8wqdIXpWW_PX8rNIqTPrlYgusHa2x8KH7cW0tcwx2yPpeMO3s43rG8ZKpQxpeTYCmW0uzUqftuWNDufFvFzCOCr9jkle9HezFTKo4IT1FDPS_30JfJLMo67nUGLsS/s1600/wfuzz+logo.png" title="wfuzz logo" width="200" /></div>
<div style="text-align: justify;">
<b>Wfuzz</b> is a tool designed for <i>bruteforcing Web Applications</i>, it can be  used for finding resources not linked (directories, servlets, scripts,  etc), bruteforce GET and POST parameters for checking different kind of  injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters  (User/Password), Fuzzing,etc. It performs multiple injection points capability with multiple dictionaries and post, headers, and authentication data brute forcing.</div>
<div style="text-align: justify;">
<b>Some features:</b> </div>
<div style="text-align: justify;">
<pre>* Multiple Injection points capability with multiple dictionaries 
  * Recursion (When doing directory bruteforce)
  * Post, headers and authentication data brute forcing
  * Output to HTML
  * Colored output
  * Hide results by return code, word numbers, line numbers, regex.
  * Cookies fuzzing
  * Multi threading
  * Proxy support
  * SOCK support
  * Time delays between requests
  * Authentication support (NTLM, Basic)
  * All parameters bruteforcing (POST and GET)
  * Multiple encoders per payload
  * Payload combinations with iterators
  * Baseline request (to filter results against)
  * Brute force HTTP methods
  * Multiple proxy support (each request through a different proxy)
  * HEAD scan (faster for resource discovery)
  * Dictionaries tailored for known applications (Weblogic, Iplanet, Tomcat, Domino, Oracle 9i,
    Vignette, Coldfusion and many more.</pre>
<pre> </pre>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZKszw17Dv-s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<pre> </pre>
<pre> </pre>
<b> Download Here :: </b><a href="http://wfuzz.googlecode.com/files/wfuzz-2.0.tgz" target="_blank">wfuzz 2.0.tgz</a><b>
</b>
<b> </b><br />
<b>Official Website :: </b>http://www.edge-security.com/</div>
</div>

Wfuzz (Bruteforcing Web Applications,) :: Tools

Wfuzz is a tool designed for bruteforcing Web Applications , it can be used for finding resources not linked (directories, servlets, s...

Ophcrack (Windows Pssword Cracker) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDAYWm_WglnjJFnZVut_JX_rjopWM4TRFFGEFjc2_0CJWrz49JbSIzUiIONl4eJlMfpnN-6L9tTcHBB14e9kxy9xV4uyCuq4qYAMvI93zXs6EPW3duiBvTV3p0jj-9vL41kjjf3Q-SJTb0/s1600/ophcrack-logo2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ophcrack Logo" border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDAYWm_WglnjJFnZVut_JX_rjopWM4TRFFGEFjc2_0CJWrz49JbSIzUiIONl4eJlMfpnN-6L9tTcHBB14e9kxy9xV4uyCuq4qYAMvI93zXs6EPW3duiBvTV3p0jj-9vL41kjjf3Q-SJTb0/s320/ophcrack-logo2.jpg" title="Ophcrack Logo" width="320" /></a></div>
<div style="text-align: justify;">
<b>Ophcrack</b> is a free <i>Windows password cracker</i> based on rainbow        tables. It is a very efficient implementation of rainbow tables        done by the inventors of the method. It comes with a         Graphical User Interface and runs on multiple platforms.       </div>
<h4 style="text-align: justify;">
<span style="font-weight: normal;"><b>Ophcrack </b>is a free rainbow-table based cracker for Windows passwords  (though the tool itself runs on Linux, Windows, and Mac).  Features  include LM and NTLM hash cracking, a GUI, the ability to load hashes  from encrypted SAM recovered from a Windows partition, and a Live CD  version. Some tables are provided as a free download but larger ones  have to be bought from Objectif Sécurité.</span></h4>
<h4>
Features:</h4>
<ul>
<li><span style="color: #8fc442;">»</span> Runs on Windows, Linux/Unix, Mac OS X, ...</li>
<li><span style="color: #8fc442;">»</span> Cracks LM and NTLM hashes.</li>
<li><span style="color: #8fc442;">»</span> Free tables available for Windows XP and Vista/7.</li>
<li><span style="color: #8fc442;">»</span> Brute-force module for simple passwords.</li>
<li><span style="color: #8fc442;">»</span> Audit mode and CSV export.</li>
<li><span style="color: #8fc442;">»</span> Real-time graphs to analyze the passwords.</li>
<li><span style="color: #8fc442;">»</span> LiveCD available to simplify the cracking.</li>
<li><span style="color: #8fc442;">»</span> Dumps and loads hashes from encrypted SAM recovered from a Windows partition.</li>
<li><span style="color: #8fc442;">»</span> Free and open source software (GPL).</li>
</ul>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/VKgVisjlkYM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br /></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b><span style="font-weight: normal;"><b>Download Here :: </b></span></b><a href="http://ophcrack.sourceforge.net/download.php?type=ophcrack" target="_blank"><span style="font-weight: normal;">Ophcrack All Platforms</span></a><b><span style="font-weight: normal;"><b><br /></b></span></b></div>
<div style="text-align: justify;">
<span style="font-weight: normal;"><b>Official Website ::</b> http://ophcrack.sourceforge.net/ </span></div>
</div>

Ophcrack (Windows Pssword Cracker) :: Tools

Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainb...

THC Hydra (Powerful Network Logon Cracker) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<h4 class="separator" style="clear: both; text-align: center;">
<img alt="THC Hydra logo" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh038D4wy1I8pJbRLopwrv2lMhXTfwrsR1LPk0CS7zmoBBauYPiu3u2NjJrIa9j5SkUGSxb13Wwig7nF_my-PGH7pr96qlwPn4y3lc9WixcxiKaROfEKIzS8ITN3y_Z9Dh2_u9x7FGIbYZ6/s320/THC+Hydra.png" title="THC Hydra logo" width="320" /></h4>
<div style="text-align: justify;">
<b>THC Hydra</b> is very powerful <b>network logon cracker tool</b> which support many different services. When you need to brute force crack a remote authentication service,  <b>Hydra</b> is often the tool of choice. It can perform rapid dictionary  attacks against more then 30 protocols, including telnet, ftp, http,  https, smb, several databases, and much more. Like THC Amap this release is from the fine folks at THC. Other online crackers are Medusa and Ncrack.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.thc.org/thc-hydra/hydra_pass.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="157" src="http://www.thc.org/thc-hydra/hydra_pass.jpg" width="200" /></a><a href="http://www.thc.org/thc-hydra/hydra_target.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="157" src="http://www.thc.org/thc-hydra/hydra_target.jpg" width="200" /></a></div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/DHPdR8RNX4o?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><br /></b>
<b>Download Here :: </b> <a href="http://www.thc.org/releases/hydra-7.5.tar.gz">hydra-7.5.tar.gz</a><br />
<b>Official Website ::</b> http://www.thc.org/</div>
<div style="text-align: center;">
</div>
</div>

THC Hydra (Powerful Network Logon Cracker) :: Tools

THC Hydra is very powerful network logon cracker tool which support many different services. When you need to brute force crack a remo...

John the Ripper (Password Cracker) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="John the Ripper logo" border="0" src="http://img830.imageshack.us/img830/9775/45275642.jpg" title="John the Ripper logo" /></div>
<br />
<div style="text-align: justify;">
<b>John the Ripper</b> is a most usable and famous fast <i>password cracker</i>, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows <i>LM hashes</i>, plus lots of other hashes and ciphers in the community-enhanced version. </div>
<div style="text-align: justify;">
<b>John the Ripper</b> is free and Open Source software, distributed primarily in source code form. If you would rather use a commercial product tailored for your specific operating system, please consider John the Ripper <i>Pro</i>, which is distributed primarily in the form of "native" packages for the target operating systems and in general is meant to be easier to install and use while delivering optimal performance. </div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ME4NP7JanXY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
<b>
</b></div>
<div style="text-align: left;">
<br />
<b>Download Here :: </b><a href="http://www.openwall.com/john/h/john179w2.zip" target="_blank">John the Ripper 1.7.9</a><b> (for Windows)</b></div>
<div style="text-align: left;">
                               <a href="http://www.openwall.com/john/j/john-1.8.0.tar.gz" target="_blank">John the Ripper 1.8.0</a><b> (for Unix)</b></div>
<div style="text-align: left;">
<b>Official Website ::</b> http://www.openwall.com/john/</div>
</div>

John the Ripper (Password Cracker) :: Tools

John the Ripper is a most usable and famous fast password cracker , currently available for many flavors of Unix, Windows, DOS, BeOS, ...

Cain & Abel (Password Recovery) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Cain & Abel" border="0" src="http://www.oxid.it/images/logooxid.png" title="Cain & Abel" /></div>
<br />
<div style="text-align: justify;">
<b>Cain & Abel</b> is a most usable <i>password recovery tool</i> for  <i>Microsoft Operating Systems</i>. <b>Cain & Abel</b> allows easy recovery of various kind of passwords by sniffing  the network,        cracking encrypted passwords using Dictionary, Brute-Force and  Cryptanalysis        attacks,  recording VoIP conversations, decoding scrambled  passwords, recovering wireless network keys, revealing password boxes,  uncovering        cached passwords and analyzing routing protocols. The program does  not exploit        any software vulnerabilities or bugs that could not be fixed with  little effort.        It covers some security aspects/weakness present in protocol's  standards, authentication        methods and caching mechanisms; its main purpose is the simplified  recovery        of passwords and credentials from various sources, however it also  ships some        "non standard" utilities for Microsoft Windows users.</div>
<div style="text-align: justify;">
<b>Cain & Abel</b> has been developed in the hope that it will be useful for          network administrators, teachers, security consultants/professionals, forensic          staff, security software vendors, professional penetration tester and everyone          else that plans to use it for ethical reasons. The author will not help or support          any illegal activity done with this program. Be warned that there is the possibility          that you will cause damages and/or loss of data using this software and that          in no events shall the author be liable for such damages or loss of data. Please          carefully read the License Agreement included in the program before using          it.</div>
<div style="text-align: justify;">
<span class="news_text">The latest version is faster and contains a lot of new features          like APR (Arp Poison Routing) which enables sniffing on switched LANs and Man-in-the-Middle          attacks.  The sniffer in this version can also </span>analyze<span class="news_text"> encrypted            protocols such as SSH-1 and HTTPS, and contains filters to capture credentials            from a wide range of authentication mechanisms. The new version also ships routing protocols authentication            monitors and routes extractors, dictionary and brute-force crackers for all common hashing algorithms and            for several specific authentications, password/hash calculators, cryptanalysis            attacks, password decoders and  some not so common utilities related to            network and system security.</span></div>
<div style="text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/7TFn6mNk1h8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: left;">
<br />
<span class="news_text"><b>Download Here ::</b> <a href="http://www.oxid.it/downloads/ca_setup.exe" target="_blank">Cain & Able v4.9.46</a></span></div>
<div style="text-align: left;">
<span class="news_text"><b>Official Website ::</b>  http://www.oxid.it/cain.html</span></div>
</div>

Cain & Abel (Password Recovery) :: Tools

Cain & Abel is a most usable password recovery tool for Microsoft Operating Systems . Cain & Abel allows easy recovery of v...

Subscribe to: Posts ( Atom )