Back to Toolkit

Credential Access

Credential Access is a reference category for Red Team work. Select an upstream project only after confirming scope, authorization, license, and maintenance status.

10 published reference entries · reviewed catalogue metadata is shown on every card.

Reference only: these are upstream references; VectrionX does not execute tools or host payloads. Use only in authorized environments and follow the project license and documentation.
Worked interpretation example: if an upstream reference reports an exposed service, record the source and timestamp first; treat it as an observation, validate it against an authoritative source, and only then assign severity or an owner.

Ophcrack

Password Attacks

A free Windows password cracker based on rainbow tables.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
CrackingRainbow TablesWindows+1

Medusa

Password Attacks

A speedy, parallel, and modular, login brute-forcer for network services.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
CrackingBruteforceNetwork+1

Ncrack

Password Attacks

High-speed network authentication cracking tool. (Used defensively for authentication exposure analysis).

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
NmapAuthenticationAuditing+1

Hydra

Password Attacks

A very fast network logon cracker which support many different services.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
CrackingBruteforceNetwork

John the Ripper

Password Attacks

An open source password security auditing and password recovery tool available for many operating systems.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
CrackingPasswordsCPU

Hashcat

Password Attacks

World's fastest and most advanced password recovery utility.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
CrackingPasswordsGPU

Mimikatz

Post-Exploitation

A well-known tool to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
CredentialsWindowsMemory

Rubeus

Kerberos Attacks

A C# toolset for raw Kerberos interaction and abuses, primarily used for Active Directory security testing.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
Active DirectoryKerberosWindows+1

CeWL

Wordlist Generation

A Custom Word List generator that spiders a given URL to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
WordlistOSINTReconnaissance+1

Crunch

Wordlist Generation

A wordlist generator where you can specify a standard character set or a character set you specify.

Provenance
upstream repository
Upstream status
maintenance uncertain
Reviewed
2026-09-10
Safe-use note
Reference only: use in authorized environments, follow the upstream license and documentation, and do not use against systems without explicit permission.
WordlistGeneratorCLI+1