A multi-platform distributed brute-force password cracking system for parallelizing dictionary and word generator attacks.
Kraken is a distributed brute-force password cracking system that enables parallelization of dictionary and word generator attacks across multiple machines. It solves the problem of limited computational power on single devices by distributing workloads, making large-scale password cracking more efficient and accessible. The system offers both a web-based interface and a portable desktop client for flexibility.
Security professionals, penetration testers, and ethical hackers who need to perform distributed password cracking for security assessments or research. It is also suitable for enthusiasts learning about offensive security and distributed computing.
Developers choose Kraken for its multi-platform support, ease of deployment via Docker, and fault-tolerant design. Its unique selling point is the combination of a web app and portable Electron client, allowing distributed cracking without complex setup.
Kraken: A multi-platform distributed brute-force password cracking system
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Offers both a web app and portable Electron client, running on Windows, Linux, and macOS, as highlighted in the installation notes for flexible deployment.
Parallelizes brute-force workloads across multiple machines to overcome single-device limitations, enabling faster password cracking for security assessments.
Uses Minio for S3-compliant storage and supports dynamic wordlist generation via crunch, simplifying large-scale dictionary attacks as shown in the wordlist addition guide.
Leverages hashcat for cracking with dependencies bundled for portable execution, providing a proven engine without manual setup on supported platforms.
The developer admits the React app is old, clunky, and needs a major rewrite, indicating current instability and technical debt that may affect reliability.
Requires Docker, Minio, and separate configuration for wordlists and hashcat dependencies, adding setup overhead compared to standalone cracking tools.
Minio uses default credentials (admin/password) that pose a security risk if not changed, as noted in the README, making it unsuitable for exposed deployments.