📄️ HashCat
HashCat is a GPU-accelerated password recovery tool that supports hundreds of hash types. It uses a numeric hash mode to identify the algorithm, a wordlist or mask for the candidate generation, and rule engines to mutate guesses. It is widely used in penetration testing to crack dumped hashes such as NTLM, NetNTLMv2, Kerberos tickets, and Unix password hashes.
📄️ John The Ripper
John the Ripper (JtR) is a CPU-based password cracking tool that detects hash types automatically and works with a wide range of formats. It ships with a set of *2john scripts that extract hashes from files, plus built-in wordlist, rules, and incremental (brute-force) modes. It is commonly used in penetration testing to crack NTLM, NetNTLMv2, Kerberos tickets, and Unix shadow hashes.