Library

Top 5 Tools for Brute-Force Attacks

Tools for Brute-force Attacks
Written by Michael Katz

Speaking in laymen terms, a brute force attack typically is a hit-and-try attacking method. A set of predefined values is matched against data generated from attacking a target. The attack succeeds when a match between the two data sets is struck. Where most other sophisticated attacking and breaking techniques might fail, brute-force is something that will always give you a result.

The feasibility of using this, however, varies according to the predefined values that you use to test for a match, as well as the data set that is matched. If the data is too large or too complex, it is not feasible to use a brute-force attack since the computation time would be too large. Although many modern techniques have looked to usurp it, brute-force attacks still remain a basic method of attack.

Popular Tools for Brute-force Attacks

Although brute force attacks are still primarily being used for password breaking, they have other applications in revealing hidden content and web pages in web applications. It is the most generic and successful password cracking tool at one’s disposal, but the issue is the computation overhead that comes along with. Nevertheless, here is a list of the popular tools for brute-force attacks that are available today:

  1. John the Ripper

John the Ripper is one of the most widely use brute force attack tool. It was originally developed for Unix systems but now supports over 15 platforms. It performs a brute force attack by combining all the text and numerical patterns to look for a match. It can even crack encrypted passwords as it can detect the hashing used in the encryption.

  1. Rainbow Crack

Rainbow Crack is an efficient tool for brute force attacks. It looks to minimize the time taken to search for a matching hash value when decrypting hashed passwords. It does so by using a rainbow table, which is a pre-computed table with the reverse hash values for the passwords. This means that the tool need not calculate the hash value at each attempt as it simply needs to refer to the rainbow table. Many organizations have provided pre-computed rainbow tables which can be downloaded from the internet. However, there is the drawback of the table using a lot more space than any other brute-force tool.

  1. Cain and Abel

Cain and Abel is another brute force attack tool worth mentioning here. It is quite popular as it has different approaches to cracking a password like brute-force approach, dictionary attack, and Cryptanalysis attack. Dictionary attacks match the targeted password with all the known passwords while cryptanalysis attacks use the Rainbow table.

  1. Aircrack-ng

This is one of the best wireless password cracking tools and is available free of cost. The approach use by Aircrack-ng is performing a dictionary attack against a wireless network for guessing the password. The feasibility again depends on the password dictionary used, and it supports Windows, Linux, iOS and Android platforms.

  1. Ophcrack

This is an open source, free tool used to crack windows passwords. It does so using LM hashes via the rainbow tables. It comes with a rainbow table that can be used to crack passwords containing alpha-numeric characters and which are less than 14 characters in length.

Conclusion

Despite other techniques that aim to decrease the computation time for successful password cracking, brute-force still remains a popular technique. It can be used on any sort of passwords, with only its computation time and efficiency being hampered by the complexity of the passwords.

It is also a great technique to test against weak passwords as the time taken for a successful brute-force attack against a password can give information about its strength. This list provides you some of the most popular tools for brute-force attacks.

Featured Image By Per Erik Strandberg sv:User:PER9000 (Own work) [CC BY-SA 2.5], via Wikimedia Commons

About the author

Michael Katz

Michael Katz is a technology and security writer who grew up around technology. From a very early age, he has been in love with computers and follows many of the companies that produce them, hoping to learn more about what makes them tick. When not writing about technology and internet security, he can be found on the pitch with his friends playing a friendly game of football.

32 Comments

  • I am extremely impressed with your writing skills and also with the layout on your blog.
    Is this a paid theme or did you modify it yourself?
    Either way keep up the nice quality writing, it’s rare to see a great blog like this one today.

  • Hey! I just wanted to ask if you ever have any issues with hackers?
    My last blog (wordpress) was hacked and I ended up losing
    several weeks of hard work due to no back up. Do you have any solutions to
    prevent hackers?

  • I precisely needed to thank you so much again. I am not
    sure the things that I would have undertaken in the absence of those solutions revealed by you over that area.
    Certainly was a real terrifying concern for me personally,
    however , viewing a new specialized fashion you managed it made me to leap over contentment.
    I will be thankful for the advice as well as believe you really know what
    an amazing job you’re carrying out educating most people all through your webpage.

    Most probably you’ve never come across any of us.

  • Hello! I could have sworn I’ve been to this blog before but after going
    through a few of the posts I realized it’s new to me.
    Nonetheless, I’m certainly pleased I stumbled upon it and I’ll be bookmarking it and checking back
    frequently!

  • I’m really enjoying the theme/design of your blog.

    Do you ever run into any web browser compatibility issues?
    A handful of my blog audience have complained about my website not working correctly in Explorer
    but looks great in Firefox. Do you have any recommendations to help fix this issue?

  • Hey there would you mind stating which blog platform you’re
    working with? I’m looking to start my own blog soon but I’m having a hard time making a decision between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your layout seems different then most blogs and I’m looking for something completely
    unique. P.S My apologies for being off-topic but I had to ask!

  • Wonderful blog! I found it while searching on Yahoo News.
    Do you have any tips on how to get listed in Yahoo News?
    I’ve been trying for a while but I never seem to get there!
    Appreciate it

  • Definitely believe that which you said. Your favorite reason appeared
    to be on the internet the easiest thing to be aware of. I say
    to you, I definitely get annoyed while people consider worries that they plainly don’t know
    about. You managed to hit the nail upon the
    top as well as defined out the whole thing without having side effect , people
    can take a signal. Will probably be back to get more.

    Thanks

  • We stumbled over here by a different website and thought I might check things out.
    I like what I see so now i’m following you. Look
    forward to exploring your web page again.

  • Please let me know if you’re looking for a article author for your blog.
    You have some really great posts and I feel I would be a good asset.
    If you ever want to take some of the load off, I’d really
    like to write some material for your blog in exchange for a
    link back to mine. Please send me an email if interested.
    Thank you!

  • I just want to tell you that I am very new to blogging and site-building and certainly savored this blog. More than likely I’m want to bookmark your blog post . You surely come with very good article content. Bless you for sharing your webpage.

  • Greetings, I think your blog may be having web browser compatibility problems.
    Whenever I take a look at your site in Safari, it
    looks fine but when opening in Internet Explorer, it has some overlapping issues.

    I merely wanted to provide you with a quick heads up!
    Apart from that, excellent blog!

  • Hey there! I’m at work browsing your blog from my new
    iphone 4! Just wanted to say I love reading through your
    blog and look forward to all your posts!
    Keep up the great work!

  • Hey there! I realize this is sort of off-topic however I needed to ask.
    Does managing a well-established website like yours take a large amount of work?
    I’m brand new to writing a blog but I do write in my diary
    everyday. I’d like to start a blog so I will be able to share my own experience and views online.
    Please let me know if you have any kind of ideas or tips for new aspiring bloggers.
    Thankyou!

  • Oh my goodness! Awesome article dude! Many thanks, However I am experiencing
    troubles with your RSS. I don’t understand the reason why I am unable to join it.
    Is there anyone else getting the same RSS issues?
    Anyone that knows the answer will you kindly respond? Thanks!!

  • I do accept as true with all of the concepts you have offered on your post.
    They’re really convincing and can definitely work.
    Still, the posts are very short for starters. Could you please
    extend them a bit from next time? Thanks for the post.

Leave a Comment