Password cracker

Medusa v1.5 - Brute Forcing Tool

What is Medusa?
Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible.
The author considers following items as some of the key features of this application:
* Thread-based parallel testing. Brute-force testing can be performed against multiple hosts, users or passwords concurrently.
* Flexible user input. Target information (host/user/password) can be specified in a variety of ways. For example, each item can be either a single entry or a file containing multiple entries. Additionally, a combination file format allows the user to refine their target listing.
* Modular design. Each service module exists as an independent .mod file. This means that no modifications are necessary to the core application in order to extend the supported list of services for brute-forcing.

It currently has modules for the following services:
* AFP
* CVS
* FTP
* HTTP
* IMAP
* MS-SQL
* MySQL
* NCP (NetWare)
* NNTP
* PcAnywhere
* POP3
* PostgreSQL
* rexec
* rlogin
* rsh
* SMB
* SMTP (AUTH/VRFY)
* SNMP
* SSHv2
* SVN
* Telnet
* VmAuthd
* VNC

It also includes a basic web form module and a generic wrapper module for external scripts.

Download :
http://www.foofus.net/jmk/medusa/medusa.html

SniffPass v1.07

SniffPass is small freeware utility that listens to your network, capture the passwords that pass through your network adapter, and display them on the screen instantly.
SniffPass can capture the passwords of the following Protocols: POP3, IMAP4, SMTP, FTP, and HTTP (basic authentication passwords).
You can use this utility to recover lost Web/FTP/Email passwords.

Download :
http://www.nirsoft.net/utils/sniffpass.zip

More Info :
http://www.nirsoft.net/utils/password_sniffer.html

LCP 5.04

Overview :
Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003.
General features of this product:

* Accounts information import:
o import from local computer;
o import from remote computer;
o import from SAM file;
o import from .LC file;
o import from .LCS file;
o import from PwDump file;
o import from Sniff file;

* Passwords recovery:
o dictionary attack;
o hybrid of dictionary and brute force attacks;
o brute force attack;

* Brute force session distribution:
o sessions distribution;
o sessions combining;

* Hashes computing:
o LM and NT hashes computing by password;
o LM and NT response computing by password and server challenge.

SID&User program is SID and user names getting tool for Windows NT/2000/XP/2003.
General features of this product:

* SID getting for a given account name;
* Getting of an account name for single SID or account names for SID range.

Download :
http://www.lcpsoft.com/english/download.htm

Ophcrack - Windows Password Cracker

What is Ophcrack?
Ophcrack is a free Windows password cracker based on rainbow tables.
It is a very efficient implementation of rainbow tables done by the inventors of the method.
It comes with a Graphical User Interface and runs on multiple platforms.

Features :
* » Runs on Windows, Linux/Unix, Mac OS X, …
* » Cracks LM and NTLM hashes.
* » Free tables available for Windows XP and Vista.
* » Brute-force module for simple passwords.
* » LiveCD available to simplify the cracking.
* » Loads hashes from encrypted SAM recovered from a Windows partition, Vista included.
* » Free and open source software (GPL).

Latest Release : Ophcrack 3.1.0

Download :
http://ophcrack.sourceforge.net/download.php?type=ophcrack

Dell BIOS Password Killer 2008

This removes bios password from any Dell machine.
Burn this .ISO file to make Bootable CD, and then Boot through it.

Download :
http://w13.easy-share.com/1700300491.html
http://rapidshare.com/files/112149147/del-bioboot.rar

Brutus Password Cracker - Download brutus-aet2.zip AET2

If you don’t know, Brutus is one of the fastest, most flexible remote password crackers you can get your hands on - it’s also free.
It is available for Windows 9x, NT and 2000, there is no UNIX version available although it is a possibility at some point in the future.
Brutus was first made publicly available in October 1998.
Development continues so new releases will be available in the near future.

Features :
Brutus version AET2 is the current release and includes the following authentication types :
* HTTP (Basic Authentication)
* HTTP (HTML Form/CGI)
* POP3
* FTP
* SMB
* Telnet

Other types such as IMAP, NNTP, NetBus etc are freely downloadable from this site and simply imported into your copy of Brutus. You can create your own types or use other peoples.

The current release includes the following functionality :
* Multi-stage authentication engine
* 60 simultaneous target connections
* No username, single username and multiple username modes
* Password list, combo (user/password) list and configurable brute force modes
* Highly customizable authentication sequences
* Load and resume position
* Import and Export custom authentication types as BAD files seamlessly
* SOCKS proxy support for all authentication types
* User and password list generation and manipulation functionality
* HTML Form interpretation for HTML Form/CGI authentication types
* Error handling and recovery capability inc. resume after crash/failure.

Download :
http://www.hoobie.net/brutus/brutus-download.html
http://www.insecure.in/hacktools/brutus-aet2.zip