netxfly/x-crack

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1276 stars · 243 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

x-crack is a command-line weak password (credential brute-force) scanner written in Go that tests common username/password combinations against network services. It supports FTP, SSH, SNMP, MSSQL, MySQL, PostgreSQL, Redis, Elasticsearch, and MongoDB, and doubles as the example scanner from a Chinese white-hat security development tutorial.

Use cases

• brute force weak passwords on network services
• scan servers for default or common credentials
• test ssh and database logins with a password list
• audit weak passwords across mysql postgres redis and mongodb
• check ftp snmp and elasticsearch endpoints for weak auth
• pentest tool to crack service logins over the network

When to choose

• You need a small, fast Go CLI to test common credentials across many service types during an authorized penetration test or security audit
• You want readable source code to learn how credential brute-force scanners are implemented

When to avoid

• You need a full-featured, actively supported scanner with reporting and broad protocol coverage - tools like Hydra, Medusa, or Nuclei fit better
• You require a licensed, production-grade auditing product - this is an educational example with no license file and limited maintenance

Facets

cli-tool · maturity maintenance

security penetration-testing vulnerability-scanning cli security penetration-testing windows go cli cross-platform weak-password-scanner brute-force credential-auditing default-credentials ssh mysql redis mongodb postgresql ftp snmp elasticsearch security-tutorial pentest command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="netxfly/x-crack")