A plug-and-play script to crack password hashes using pre-configured, empirically-tuned hashcat attacks.
Naive Hashcat is a Bash script that simplifies password hash cracking by providing pre-configured attack parameters for the hashcat tool. It allows users to recover plaintext passwords from cryptographic hashes using a sequence of dictionary, combinator, rule-based, and mask attacks without needing to understand hashcat's intricate settings. The project is designed for educational use to demonstrate password vulnerability and security testing.
Security researchers, penetration testers, and students learning about cryptography and password security who need a straightforward way to run hashcat attacks without deep configuration.
It removes the steep learning curve of hashcat by offering a ready-to-run script with empirically-tuned parameters, enabling users to start cracking hashes immediately while still leveraging hashcat's powerful GPU-accelerated engine.
Crack password hashes without the fuss :cat2:
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Runs a sequence of empirically-tested dictionary, combinator, rule-based, and mask attacks automatically, saving users from configuring hashcat's complex options as noted in the README.
After cloning the repo and downloading the rockyou dictionary, users can start cracking with a single command, making it accessible for quick experiments without deep hashcat knowledge.
Leverages hashcat's OpenCL support to automatically use available GPU hardware for faster cracking, as mentioned in the GPU Cracking section.
Includes match-creds.py to easily associate cracked passwords with usernames from leaked data files, streamlining the post-cracking workflow described in the usage guide.
The README admits it only cracks about 60% of hashes in the example file, making it unreliable for comprehensive password recovery against secure hashes.
Uses fixed attack parameters with no built-in way to adjust rules, masks, or dictionaries without modifying the source code, reducing flexibility for specific scenarios.
Requires downloading external files like rockyou.txt and building hashcat on macOS; references to hashcat-3.6.0 suggest it may not be updated for newer hashcat versions or hash types.