A red‑team researcher demonstrated that using zip2john, John the Ripper and the rockyou.txt wordlist can break a supposedly password‑protected ZIP archive in just a few seconds, exposing the inherent weaknesses of ZipCrypto encryption and the ease of known‑plaintext attacks.
Johnny is an open‑source, cross‑platform graphical front‑end for John the Ripper that simplifies password‑cracking with a visual interface, supports core and jumbo versions, offers multiple attack modes, session management, and provides easy installation on Linux, Windows, and macOS.
Patator is a Python‑based brute‑force framework preinstalled in Kali Linux that offers precise success/failure filtering via its -x action system, supports over 36 modules for protocols such as SSH, FTP, HTTP, SMB, and provides advanced features like rate limiting, resume, encoding, and proxy support, making it a powerful alternative to tools like Hydra and Medusa.
This article walks through a Python solution for testing each username against every password from two separate files, explains why a single nested loop suffices, provides the full code example, and shows the resulting output even when the files have mismatched line counts.
This article explains how to use Python's built‑in zipfile module and the third‑party rarfile library to brute‑force and decrypt encrypted zip archives, handle Chinese filename encoding issues, and generate password permutations efficiently with itertools for flexible password lengths.
Explore the most common Kali Linux penetration testing utilities—including Nmap, Metasploit, Hydra, Wireshark, and more—organized by categories such as information gathering, vulnerability exploitation, password cracking, and network monitoring, with brief usage commands and guidance for each tool.
This guide details comprehensive Linux security measures, including system account cleanup, password policies, command history limits, terminal auto‑logout, controlled use of the su command via PAM wheel module, PAM authentication fundamentals, sudo configuration, GRUB boot‑parameter protection, weak‑password detection with John the Ripper, and network port scanning techniques.
This article demonstrates how to build a Python GUI tool with Tkinter and the PyWiFi library to scan nearby Wi‑Fi networks, load a password dictionary, and perform brute‑force attempts to discover the correct Wi‑Fi password, including environment setup, code snippets, and execution results.
This guide walks through systematic techniques for locating passwords on a compromised Linux host—including searching file names, file contents, hidden directories, web configuration files, MySQL databases, backup folders, and encrypted archives—while demonstrating how to crack discovered hashes using Hashcat, John the Ripper, and LinPEAS.
This article presents a step‑by‑step guide to creating a Python‑based Wi‑Fi password cracking GUI using the pywifi library and Tkinter, explains environment setup, code implementation, and usage, while also containing promotional material for related AI services and community groups.
This guide lists the most common Kali Linux penetration testing utilities—including Nmap, Metasploit, Hydra, Wireshark, and many others—explaining their primary functions and providing concise command‑line examples for quick reference.
This article demonstrates how to use Python and the pywifi library to perform Wi‑Fi password brute‑force attacks, provides both command‑line and Tkinter‑based graphical tools, explains scanning nearby networks, handling password dictionaries, and discusses limitations such as the lack of multithreading.
WebCrack is an open‑source tool that automates the discovery of weak or universal passwords across a wide range of web‑based CMS back‑ends by automatically identifying login parameters, evaluating login success, applying dynamic dictionaries, and supporting custom rule files, all while handling diverse response patterns and WAF interference.
This article explains how to iterate through two files containing usernames and passwords using Python, demonstrating a straightforward double‑loop approach, providing sample code, output screenshots, and tips for handling mismatched line counts, helping readers efficiently test all credential combinations.
This article introduces Hashcat, the world’s fastest password‑recovery tool, outlines its extensive feature set, provides the project’s GitHub address, and explains how to download, install, and run basic commands with common options for various hash types and attack modes.
A network‑security enthusiast shows step‑by‑step how to use Kali's zip2john and John the Ripper to break a password‑protected Cain & Abel zip file, revealing the password "darknet123" after five hours of brute‑force cracking.
This article presents Python scripts for cracking ZIP file passwords, explains how to fix Chinese filename encoding issues, and provides single‑threaded, multithreaded, and dictionary‑based brute‑force methods with detailed code examples and usage instructions.
This article demonstrates how to build a Python‑based WiFi password brute‑force tool, first using a command‑line script that reads passwords from a dictionary and attempts connections, then enhancing it with scanning, flexible dictionary selection, and finally providing both a simple and an upgraded Tkinter graphical user interface for interactive cracking.
This tutorial walks through building both command‑line and Tkinter‑based Python tools that scan nearby Wi‑Fi networks, read password dictionaries, and perform brute‑force attacks using the pywifi library, while also showing how to package the script as an executable and discussing potential multithreading improvements.
This article demonstrates how to use Python and the pywifi library to scan nearby Wi‑Fi networks and perform a dictionary‑based brute‑force attack, then improves the tool with a command‑line version, a more flexible script, and two Tkinter graphical interfaces for easier operation.
This article demonstrates how to use Python's zipfile module to open and extract password‑protected ZIP archives, explains the required parameters, shows successful and failed extraction attempts, and provides a simple brute‑force script that iterates numeric passwords to recover the archive's contents.
This guide explains how to use Python to create custom brute‑force password dictionaries—covering simple numeric PIN lists, targeted web‑backend wordlists, and practical usage tips—for quickly cracking basic encrypted files.
Leah Neukirchen uncovered historic Unix passwords, cracked many using John the Ripper and hashcat, and after months of effort Nigel Williams finally revealed Ken Thompson’s long‑uncracked password, which turns out to be a clever chess‑notation hint.
This guide details systematic MySQL security testing, covering information gathering, version detection, credential extraction, webshell deployment, privilege escalation via MOF and UDF, and post‑exploitation cleanup, with concrete Metasploit, sqlmap, and nmap commands.
This article details comprehensive MySQL penetration techniques, covering information gathering, password cracking, webshell deployment, and multiple privilege‑escalation methods using tools such as Nmap, Metasploit, sqlmap, MOF, UDF and startup script exploits.
This guide walks through setting up Python 2.7 with the pywifi module, preparing a dictionary of common Wi‑Fi passwords, configuring a scanner, scanning nearby hotspots, testing each network, and recording results to identify vulnerable access points.
The author recounts how they infiltrated a neighbor's Wi‑Fi by cracking the WPA2 password, accessed the router’s web admin, harvested personal accounts and photos, even controlled a TV box, and concludes with practical security recommendations for everyday users.
