l0phtcrack is now open source.
Utilities for cracking encrypted zip files that use weak encryption. CUDA enabled.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. Some of this stuff can be used to prime discovery operations.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team. Optimizes dictionaries, acts as an interactive shell for hashcrack.
Password wordlist / dictionary generator using song lyrics for targeted bruteforce audits / attacks. Easy to use - you give it an artist, you get back a text file with all of their lyrics to use for cracking passwords. Requires Python2.
Script to fetch, install, update and search wordlist archives from websites offering wordlists with more than 1800 wordlists available.
Maybe I could use these as password cracking dictionaries?
World's fastest and most advanced password recovery utility
A framework used by penetration testers for building custom exploits for infiltrating systems. Written in Ruby. Comes with a large library of payloads and other nifty and fascinating tools. It's worth learning to use if you're serious about penetration testing or exploit development. Also, the cutting edge of attack technologies winds up coming out of the Metasploit project.
A Windows password cracker that uses rainbow tables. A LiveCD is also available.
Password hashes that may be freely downloaded to stage memory/time tradeoff attacks.
Cult of the Dead Cow.
A massive online database of default passwords for networking hardware, embedded devices, and operating systems.
A handy cheatsheet for crafting SQL injection attacks against web apps backed by Oracle.
Phantom Access: Possibly the first icebreaker in history, written by Lord Digital of the Legion of Doom back in the 1980's. This is a real piece of history, folks... you can't use it for anything these days, but it demonstrates nicely how things used to be.
A utility used to extract user credentials and other secrets from the Windows registry hives offline.
A free utility for Windows that extracts your wireless keys in case you forget them.