# galkan/crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

Repository: https://github.com/galkan/crowbar
Canonical: https://ross.abutalabs.com/products/crowbar
Language: Python
License: MIT
License Family: permissive
Last push: 2023-12-19T20:57:36+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 4355, "days_push": 988, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1531, forks 320 (observed 2026-08-28T04:04:59.352448+00:00)

## What it is
Crowbar is a Python-based brute forcing tool for penetration testing that supports protocols often missing from other brute force tools, such as SSH private key authentication, OpenVPN, RDP with NLA, and VNC key authentication. It is a command-line utility that can scan target ranges with nmap before attempting credential attacks.

## Use cases
- brute force SSH servers using obtained private keys
- crack RDP passwords with NLA support
- brute force OpenVPN credentials
- attack VNC servers with key authentication
- discover open ports on an IP range before brute forcing
- find valid logins during a penetration test

## When to choose
- you need to brute force protocols like sshkey, openvpn, rdp, or vnckey that thc-hydra does not support
- you have private keys from a pentest and want to test them against other SSH servers
- you work in Kali Linux and want an apt-installable brute forcing tool

## When to avoid
- you need brute forcing for common protocols like HTTP forms or FTP better served by thc-hydra
- you need a GUI-based password auditing tool
- you require ongoing feature development or frequent updates

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: penetration-testing, security, cli
- domain: security, penetration-testing
- platform: python, cli
- tags: brute-force, ssh-key, rdp, openvpn, vnc, password-cracking, kali-linux, command-line, linux

## Member repositories
- galkan/crowbar (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:59.352448+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:31:22.594121+00:00, confidence not recorded.
  - readme: https://github.com/galkan/crowbar (fetched 2026-08-28T04:04:59.352448+00:00, sha 1ac2b751c006)
- Data as of 2026-08-30T08:39:29.467469+00:00.