NPK
A serverless distributed hash-cracking platform built on AWS, offering pay-as-you-go GPU power with an intuitive UI.
What is NPK?
NPK is a distributed hash-cracking platform built on serverless AWS components that provides on-demand GPU power for password recovery and security testing. It solves the problem of expensive upfront hardware and electricity costs by offering a pay-as-you-go model, allowing users to scale cracking power as needed while minimizing idle expenses.
Security professionals, penetration testers, and red teams who need efficient, scalable hash-cracking capabilities without investing in physical hardware.
Developers choose NPK for its cost-effective, serverless architecture that eliminates hardware management, its intuitive UI that simplifies complex cracking campaigns, and built-in safeguards against runaway cloud costs.
Overview
A mostly-serverless distributed hash cracking platform
Use Cases
Best For
- Conducting password audits and security assessments with scalable GPU power
- Running hash-cracking campaigns without maintaining physical cracking rigs
- Teams needing multi-user hash-cracking with data separation and SAML SSO
- Budget-conscious security testing with precise cost control and estimates
- Quick deployment of hash-cracking infrastructure via AWS CloudShell
- Automated cleanup of hashfiles and results to manage storage lifecycle
Not Ideal For
- Organizations with data sovereignty requirements that prohibit using AWS cloud services.
- Individual hobbyists who only need to crack a few hashes occasionally and prefer local tools like Hashcat.
- Teams already invested in alternative cloud providers and unwilling to manage separate AWS accounts.
- Projects requiring complete offline or air-gapped hash-cracking capabilities.
Pros & Cons
Pros
Deploy with a single command in AWS CloudShell, as shown with the one-liner installation, making setup quick and accessible even for non-experts.
Intuitive UI simplifies creating complex hash-cracking campaigns with a few clicks, reducing the need for deep Hashcat expertise, as highlighted in the features.
Provides pre-execution cost and coverage estimates, and enforces maximum price limits with runaway instance protection, ensuring predictable budgeting and safety.
Supports multi-tenancy with strict data separation and optional SAML SSO, enabling secure team use as described in the multi-user administration section.
Cons
Built entirely on AWS serverless components like Cognito and DynamoDB, making migration to other clouds or on-premises difficult and creating dependency risks.
Strongly recommends deployment in a new AWS account, which can be inconvenient for organizations with existing infrastructure and adds management overhead.
Advanced settings and configurations are linked to an external wiki, potentially leading to less integrated or outdated information compared to in-repo docs.
Frequently Asked Questions
Related Projects
Penglab🐧 Abuse of Google Colab for cracking hashes.
CloudtopolisZero Infrastructure Password Cracking
RookA tool to Terraform and automate password cracking on AWS.
Cloud_crackCrack passwords using Terraform and AWS
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.