Password Attacks
Cracking captured hashes offline, brute-forcing live login services, and the wordlists both depend on.
| Tool | Source | Notes |
|---|---|---|
| john | official | John the Ripper |
| hydra | official | Network login brute-forcer |
| hashcat | official | GPU-accelerated password cracking |
| wordlists | aur | Common wordlist collection |
| rockyou | aur | rockyou.txt |
| seclists | aur | SecLists collection |
John and hashcat each ship with dozens of format-specific helper scripts
(*2john, *2hashcat) for converting captured files into crackable hash
formats — those aren’t listed individually here, they come with the base
package.