# GoCrack | Password Cracking Tool For Security Professionals To Test Password Effectiveness

**URL:** <https://onehack.st/t/gocrack-password-cracking-tool-for-security-professionals-to-test-password-effectiveness/89060>\
**Category:** Tools & Scripts\
**Tags:** tools, cracking\
**Created:** [May 30, 2020, 12:49pm UTC](https://onehack.st/t/gocrack-password-cracking-tool-for-security-professionals-to-test-password-effectiveness/89060 "2020-05-30T12:49:10Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [May 30, 2020, 12:49pm UTC](https://onehack.st/t/gocrack-password-cracking-tool-for-security-professionals-to-test-password-effectiveness/89060/1 "2020-05-30T12:49:10Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/b/e/be36af9909d07a803211fc122547d1f6130cd673.jpeg)

Passwords are the basic way to keep our data secure, easy to guess passwords and re-use of the password will increase the risk of being compromised.

With the 2016’s most common passwords list, nearly 17 percent of people secured their account with password “ **123456** ” according to the survey by Darren Guccione from 10 million passwords collected from data breaches and public sources.

[FireEye](https://www.fireeye.com/blog/threat-research/2017/10/gocrack-managed-password-cracking-tool.html) team released a password cracking tool GoCrack which allows security professionals to manage their passwords across multiple servers with easy to use web interface.

 ![image](https://onehack.st/uploads/default/original/3X/e/a/ea0e98bbf29446db68d7b243e9b87f24bd5ba225.png)

The admin module needs to be deployed on the server where the worker on each GPU/CPU capable machine and the system will automatically distribute tasks over those GPU/CPU machines.

Password cracking tools help security professionals to audit current passwords and it’s effectiveness.They are used in internal auditing as well as offensive/defensive operations.

> ###### **We’re releasing GoCrack to provide another tool for distributed teams to have in their arsenal for managing password cracking and recovery tasks.said FireEye.**

GoCrack allows only the administrators to view the cracked passwords and for other sensitive actions and users are not privileged for it.It includes support of hashcat v3.6+, so it dosen’t require any external database connection.

Now it supports for LDAP and database backed authentication, in future they planned to enhance with MySQL and Postgres for huge deployments.

**GoCrack available to download from** Github repository.

## GitHub:

> **[GitHub - mandiant/gocrack: GoCrack is a management frontend for password...](https://github.com/mandiant/gocrack)**
>
> GoCrack is a management frontend for password cracking tools written in Go