galkan/crowbar

Health v2 · maintenance only

Adoption not part of the score

1531 stars · 320 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Crowbar is a Python-based brute forcing tool for penetration testing that supports protocols often missing from other brute force tools, such as SSH private key authentication, OpenVPN, RDP with NLA, and VNC key authentication. It is a command-line utility that can scan target ranges with nmap before attempting credential attacks.

Use cases

• brute force SSH servers using obtained private keys
• crack RDP passwords with NLA support
• brute force OpenVPN credentials
• attack VNC servers with key authentication
• discover open ports on an IP range before brute forcing
• find valid logins during a penetration test

When to choose

• you need to brute force protocols like sshkey, openvpn, rdp, or vnckey that thc-hydra does not support
• you have private keys from a pentest and want to test them against other SSH servers
• you work in Kali Linux and want an apt-installable brute forcing tool

When to avoid

• you need brute forcing for common protocols like HTTP forms or FTP better served by thc-hydra
• you need a GUI-based password auditing tool
• you require ongoing feature development or frequent updates

Facets

cli-tool · maturity maintenance

penetration-testing security cli security penetration-testing python cli brute-force ssh-key rdp openvpn vnc password-cracking kali-linux command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="galkan/crowbar")