离线口令审计

在线查询HASH

Professional Password Recovery & AuditOnline Hash Crack

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.crackstation.net

Decrypter et encrypter les hashs MD5 en lignemd5decrypt.net

Cmd5 - MD5 Online ,MD5 Decryption, MD5 Hash Decoderwww.cmd5.org

MD5 Online | Free MD5 Decryption, MD5 Hash Decoderwww.md5online.org

Reverse Hash Lookup - Reveal plaintext from MD5/SHA1 hashesreverse-hash-lookup.online-domain-tools.com

离线密码爆破

John工具

其破解基本思路

xxx2john a.xxx > xxx.hash
john xxx.hash --wordlist=xxx.txt

NTLM

john --wordlist=<pass.txt> --format=NT ntlm.hash
hashcat -a 0 -m 1000 --username ntlm.hashes <pass.txt> --potfile-path salida_NT.pot

PGP/GPG私钥

gpg2john private_pgp.key
john --wordlist=<pass.txt> hash

JWT token爆破

hashcat

hashcat -m 16500 -a 0 jwt.txt <pass.txt>

Jwtcrack

python crackjwt.py <J.W.T> <pass.txt>

John

john jwt.txt --wordlist=<pass.txt> --format=HMAC-SHA256

Jwt_tool

python3 jwt_tool.py -d <pass.txt> <J.W.T>

c-jwt-cracker

jwtcarck <J.W.T> 123456780 8