NotSoSecure/password_cracking_rules resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1629 stars · 295 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A consolidated password cracking rules file for hashcat and John the Ripper, aggregating rules from sources like Hob0Rules, KoreLogic, NSAKEY, and hashcat. It is a supporting artifact for NotSoSecure's 'One Rule to Rule Them All' blog post on rule-based password attacks.

Use cases

• crack password hashes with hashcat using a comprehensive rule set
• run rule-based dictionary attacks in penetration tests
• audit password strength of an organization
• recover forgotten passwords from hashes
• combine best-known cracking rules into one file

When to choose

• you want a single well-tested rules file instead of assembling rules from multiple sources
• you are doing an authorized password audit or CTF and need broad rule coverage
• you want a good starting point for hashcat rule-based attacks

When to avoid

• you need highly optimized, minimal rules for time-constrained attacks
• you need actively maintained rules with recent updates
• you are looking for a cracking tool itself rather than a rules file

Facets

dataset · maturity maintenance

security penetration-testing security penetration-testing cli cross-platform password-cracking hashcat rule-based-attacks wordlist-rules john-the-ripper

Member repositories

For agents

markdown · JSON · MCP: product_card(name="NotSoSecure/password_cracking_rules")