JKS private key cracker
Crack passwords of private key entries in Java Key Store (JKS) files using a GPU-accelerated hashcat implementation.
What is JKS private key cracker?
JKS-private-key-cracker-hashcat is a security tool designed to crack passwords protecting private key entries in Java Key Store (JKS) files. It exploits a cryptographic weakness in JKS's Password Based Encryption scheme, enabling efficient password recovery by targeting private key passwords directly while ignoring the keystore password. The tool integrates with hashcat for GPU-accelerated cracking, offering significantly higher speeds compared to traditional methods.
Penetration testers, security researchers, CTF (Capture The Flag) players, and developers auditing Java-based systems who need to recover lost passwords or assess the security of JKS files.
It is the first public tool to exploit this specific JKS weakness, offering compatibility with all JKS configurations and GPU-accelerated performance through hashcat integration, making it faster and more effective than existing alternatives like John the Ripper for this specific task.
Overview
Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
Use Cases
Best For
- Recovering lost passwords for private keys in JKS files during security audits
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.