Large hashcat rulesets generated from real-world compromised passwords to improve password cracking effectiveness.
Pantagrule is a series of large rulesets for the hashcat password cracker, generated from hundreds of millions of real-world compromised passwords using automated rule generation algorithms. It solves the problem of inefficient password cracking by providing data-driven rules that significantly increase success rates, especially for difficult or exotic password patterns that standard rules miss.
Security professionals, penetration testers, red teamers, and password cracking researchers who need advanced, high-performance rulesets for hashcat to crack hashes in real-world engagements.
Developers choose Pantagrule because it offers rules derived from massive, real-world password datasets, resulting in higher cracking percentages than many existing rulesets. Its optimized variants and complementary nature to other rules make it a powerful tool for tackling challenging password hashes.
large hashcat rulesets generated from real-world compromised passwords
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Rules are derived from hundreds of millions of compromised passwords, including public sets like hashes.org and Pwned Passwords, ensuring relevance to actual cracking scenarios.
Optimized types like 'popular', 'random', and 'hybrid' are calibrated against validation data, discarding poor performers to maximize cracking success rates.
Shows low overlap with major rulesets like OneRuleToRuleThemAll, making it effective when used in combination for broader password pattern coverage.
The hashorg.v6 variants use fully public data sources, allowing reproducibility and trust in the rule generation methodology.
The gargantuan rulesets significantly increase search space and processing time, making them inefficient for quick or resource-limited cracking jobs, as noted in the performance tables.
The project is marked as completed, with no new features or updates unless for bugs, risking obsolescence with future hashcat versions or new password trends.
Some variants, like the original rules, use proprietary password corpora, reducing transparency and reproducibility compared to fully public alternatives.
Rules may not perform optimally on datasets different from the training data; for example, Pantagrule V2 underperforms on Pwned Passwords V5 compared to v5-calibrated rules.