credential-cracking

What problem does it solve?

This Skill automates the process of cracking password hashes and encrypted files that have been recovered during an engagement, helping to recover credentials and access sensitive data.

Core Features & Use Cases

• Hash Identification: Automatically identifies common hash types (NTLM, Kerberos, SHA, etc.).
• File Decryption: Extracts hashes from password-protected files like ZIP, Office documents, PDFs, and KeePass databases using specialized tools.
• Cracking Execution: Leverages hashcat or john with wordlists and rules for offline brute-force attacks.
• Use Case: After recovering an NTLM hash from a Windows machine, you can use this skill to attempt to crack the password using a wordlist, potentially gaining access to the compromised system or other systems using the same credentials.

Quick Start

Use the credential-cracking skill to attempt to crack the provided NTLM hash using the rockyou.txt wordlist.