KeychainCracker - macOS keychain cracking tool

---

macOS keychain cracking tool. I wrote this software in order to help relatives of a deceased friend to recover data from his computer. Please enjoy it responsibly, and please do not hack/harm people.

keychain crack password cracking hacking brute-force wordlist security

express-rate-limit - Basic rate-limiting middleware for express

---

Basic rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset. Note: this module does not share state with other processes/servers by default. If you need a more robust solution, I recommend using an addon store or trying out one of the excelent competing options.

express-rate-limit express rate limit ratelimit rate-limit middleware ip auth authorization security brute force bruteforce brute-force attack

ForcePlot

---

Force plot is a user friendly graphing calculator which uses brute-force computing. It can plot difficult equations that many popular programs cannot plot.

brute-force calculator graph graphing plot

SharpCrack

---

Hash cracker written in managed code.

brute-force cracking cryptography hash parallel password-recovery

Silverlight Sudoku

---

This is a Silverlight 4 interactive Sudoku game, full source included.

brute-force game puzzle silverlight-4 silverlight-sudoku

MasterMind Solver

---

This Java project is a rough example of how to develop a brute force validation algorithm to make your computer look like "making guesses". It will take the role of a MasterMind player trying to solve the puzzle set by you.

brute-force master-mind mastermind solver

Mindless Setback

---

Setback is a card game popular in New England. This project uses a combination of brute force and Monte Carlo methods to play Setback. This is an experimental approach to playing cards and other games where incomplete information is available.

brute-force card cards console game monte-carlo

castle-ruby - Ruby gem for Castle

---

Castle adds real-time monitoring of your authentication stack, instantly notifying you and your users on potential account hijacks.Load and configure the library with your Castle API secret in an initializer or similar.

castle sdk login brute-force api authentication password

FileVaultCracker - macOS FileVault cracking tool

---

macOS FileVault cracking tool. I wrote this software in order to help relatives of a deceased friend to recover data from his computer. Please enjoy it responsibly, and please do not hack/harm people.

filevault corestorage crack password cracking hacking brute-force wordlist security

credential-plus - 🛡 Password hashing and verification made easy!

---

This package aim to provide secure, well configured and ready to use password hashing algorithms for your application.Currently the most vetted hashing algorithm providing most security is BCrypt. PBKDF2 isn't bad either, but if you can use BCrypt you should.

credential nodejs hash-functions security brute-force timing-attacks rainbow-table credential-plus password passwords hashing verification hash-function hash auth authorization authentication login sign-in salt rainbow brute attack stretching timining-attack pbkdf pbkdf2 bcrypt scrypt argon2

distributed-jwt-cracker - An experimental distributed JWT token cracker built using Node

---

An experimental distributed JWT token cracker built using Node.js and ZeroMQ. It can be used to discover the password (or "secret") of an unencrypted JWT token using a HS256 signature. Requires ZeroMq libraries to be already installed in your machine.

cracking-jwt-tokens jwt zeromq cracker node-tutorial distributed distributed-systems nodejs node tutorial article brute-force bruteforce brute-force-attacks token password hs256 secret break

indexed-string-variation - Experimental JavaScript module to generate all possible variations of strings over an alphabet using an n-ary virtual tree

---

Experimental JavaScript module to generate all possible variations of strings over an alphabet using an n-ary virtual tree. Generally useful to create distributed brute-force password recovery tools or other software that might require distributed generation of all possible strings on a given alphabet.

alphabet tree algorithm virtual characters nodejs node library variations duplicates strings string javascript-library variation variants generator generation brute-force cracker n-ary

jwt-cracker - Simple HS256 JWT token brute force cracker

---

Simple HS256 JWT token brute force cracker. Effective only to crack JWT tokens with weak secrets. Recommendation: Use strong long secrets or RS256 tokens.

jwt jwt-cracker secrets alphabet cracker brute-force bruteforce brute-force-attacks nodejs command-line command

cracker - Parallel password cracker

---

It tries to be more efficient by parallelizing the work performed on different character sets. For example, if the character set abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ is selected then one worker will work with abcdefghijklmnopqrstuvwxyz, another worker will work with ABCDEFGHIJKLMNOPQRSTUVWXYZ, and the last worker will work with abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ. While this tool does what it's supposed to, it has some major downfalls. For starters, it's using Python. I'm not saying Python is a bad language or anything like that. The issue is Python's GIL which prevents multiple threads from executing Python's bytecode at the same time. This means that I am unable to achieve parallelism with threads since only one character set would be worked on at a time. What needs to be done instead is splitting the work up across multiple processes and share data across those processes. This is less efficient than working with threads in general but is a necessary evil with Python.

ntlm md5 sha1 password-cracker brute-force parallel

brute_force_bip38 - A brute-force decoder of BIP38 encoded private keys for the CLI.

---

A brute-force decoder of BIP38 encoded private keys for the CLI. The application will now utilize all available CPUs to test each secret against your BIP38 encoded private key. Invalid secrets are logged out to invalid_secrets.json. If a valid secret has been found it will be logged out to valid_secret.json.

bip38 bitcoin paper-wallet brute-force

abrute - Multi-threaded AES Brute Force File Decryption

---

Abrute is a multi-threaded brute force file decryption tool. Many features have been added to this including a resume feature, a JSON endpoint, computer clustor workload splitting, character adjacency limitting, and custom CLI reporters. Abrute will decrypt the .aes and .zip extension files on any Linux compatible system. abrute needs the nightly build of Rust for the TryFrom trait.

decryption brute-force aes-encryption aes zipfile unzip

connect-bruteforce - A nodejs connect middleware to prevent bruteforce

---

A connect middleware to prevent brute force by delaying responses. Available as a npm package.

brute-force login

upash - 🔒 Unified APIs for Password Hashing Algorithms

---

🔒 Unified APIs for Password Hashing Algorithms Coded with ❤️ by Simone Primarosa. The upash (pronounced u-pash) project provides you a Unified API to implement secured and well-configured password hashing algorithms inside your application.

credential nodejs hash-functions security brute-force timing-attacks rainbow-table bcrypt pbkdf2 argon verification credentials password upash unified api universal cli secure hashing account accounts algorithm algorithms apis application argon2 attack attacks auth authentication authorization brute command cryptographically derivation easy force form function hash interface irreversible kdf key line login one one-way passwords pbkdf pbkdf1 pbkdf2-crypt plus programming protected rainbow resistance salt scrypt sign-in simple store stretching strong table time timining transform user users verify way