John the Ripper

Password Attackskali · parrot

Classic password cracker for offline hash attacks and format detection.

Install

sudo apt install john

john hashes.txt
john --wordlist=/usr/share/wordlists/rockyou.txt hashes.txt
john --show hashes.txt

Use only on systems you are authorized to test. Follow program scope.

Hashcat

World's fastest password cracker with GPU acceleration. Supports hundreds of hash types.

Hydra

Online password brute-forcer supporting many protocols (SSH, FTP, HTTP, etc.).

Medusa

Parallel, modular login brute-forcer similar to Hydra.