A web interface for sharing a hashcat password cracking box among multiple users with user-friendly attack automation.
Wavecrack is a web-based interface for hashcat that allows multiple users to share a password cracking box. It simplifies launching asynchronous cracking jobs, automates attack sequences, and provides statistics and result segregation for team-based security assessments.
Security professionals, penetration testers, and red teams who need to collaborate on password cracking tasks using hashcat in a shared environment.
It offers a centralized, user-friendly web interface that abstracts hashcat's complexity, enables secure multi-user collaboration with LDAP integration, and automates attack workflows—saving time and reducing manual configuration.
Wavestone's web interface for password cracking with hashcat
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Enables launching hashcat cracks in the background, allowing users to queue multiple tasks without waiting, as highlighted in the asynchronous cracking feature.
Integrates LDAP or basic authentication with strict result segregation, ensuring users only see their own cracking outcomes for privacy, per the multi-user support description.
Configures and runs successive hashcat attack modes automatically based on duration settings, streamlining complex cracking workflows as described in the attack automation feature.
Provides statistics with graphs and CSV export for cracked passwords, aiding in reporting and analysis, as noted in the statistics and export capabilities.
Requires installation and configuration of multiple components like RabbitMQ, Celery, hashcat rules, and wordlists, making deployment time-consuming and error-prone.
The default Flask server is not suitable for production, necessitating additional setup with WSGI or supervisor, as admitted in the README's usage section.
Once a crack is stopped, it cannot be resumed, which could lead to lost progress if canceled accidentally, as warned in the README.
Tied exclusively to hashcat; does not support alternative password cracking tools, restricting its use to hashcat-centric environments without extensibility.