{"id":13530828,"url":"https://github.com/arcaneiceman/kraken","last_synced_at":"2025-04-01T19:30:44.399Z","repository":{"id":37405857,"uuid":"222283812","full_name":"arcaneiceman/kraken","owner":"arcaneiceman","description":"Kraken: A multi-platform distributed brute-force password cracking system","archived":false,"fork":false,"pushed_at":"2023-06-02T18:06:06.000Z","size":4738,"stargazers_count":297,"open_issues_count":9,"forks_count":45,"subscribers_count":14,"default_branch":"master","last_synced_at":"2024-11-02T17:36:34.486Z","etag":null,"topics":["bruteforce-password-cracker","hashcat","kraken","kraken-client","password-cracker","security","security-tools","wpa2-cracking"],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/arcaneiceman.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-11-17T17:15:10.000Z","updated_at":"2024-10-29T02:55:05.000Z","dependencies_parsed_at":"2024-01-07T13:08:17.372Z","dependency_job_id":"4e5e67c3-812b-4843-85bd-2b25cf7bf908","html_url":"https://github.com/arcaneiceman/kraken","commit_stats":null,"previous_names":[],"tags_count":11,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arcaneiceman%2Fkraken","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arcaneiceman%2Fkraken/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arcaneiceman%2Fkraken/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arcaneiceman%2Fkraken/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/arcaneiceman","download_url":"https://codeload.github.com/arcaneiceman/kraken/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246700083,"owners_count":20819823,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bruteforce-password-cracker","hashcat","kraken","kraken-client","password-cracker","security","security-tools","wpa2-cracking"],"created_at":"2024-08-01T07:00:56.052Z","updated_at":"2025-04-01T19:30:42.396Z","avatar_url":"https://github.com/arcaneiceman.png","language":"JavaScript","funding_links":[],"categories":["Hashcat","JavaScript"],"sub_categories":["Distributed cracking"],"readme":"\n---\n\u003e **Warning**\n\nI have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement (the server needs some work too). In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel free to continue using this as is, if you have any trouble please continue to raise issues and provide feedback! Thanks!\n\n---\n\n\u003cp align=\"center\"\u003e\n  \u003cimg width=\"200\" src=\"https://github.com/arcaneiceman/kraken/blob/master/kraken-client/src/assets/kraken-logo.png\"/\u003e\n\u003c/p\u003e\n\n## Kraken: A multi-platform distributed brute-force password cracking system\n\n\u003cdiv id=\"{'introduction'}\"\u003e\n\n### What is Kraken\n\n\u003c/div\u003e\n\nKraken is an online distributed brute force password cracking tool. It allows you to parallelize dictionaries and crunch word generator based cracking across multiple machines both as a web app in a web browser and as a standalone electron based client. Kraken aims to be easy to use, fault tolerant and scalable.\n\nI wrote Kraken because I wanted to learn more about offensive security and to write an easy solution to overcome the limitation of using a single device when attempting distribute brute force workloads.\n\n\u003cdiv id=\"{'installation'}\"\u003e\n\n### Installation\n\n\u003c/div\u003e\n\n##### Server and Browser Client\nKraken is a dockerized application using \u003cstrong\u003edocker-compose\u003c/strong\u003e which will launch the \u003cstrong\u003edb\u003c/strong\u003e (Postgres), \u003cstrong\u003es3 compliant file storage\u003c/strong\u003e (Minio),\nthe \u003cstrong\u003eserver\u003c/strong\u003e and the \u003cstrong\u003ebrowser client\u003c/strong\u003e. You can find the docker-compose file at the root directory of the repository. You can deploy it using the following command:\n\n```\ndocker-compose up\n```\nKraken's Browser Client should be accessible at:\n  - HTTP : \u003ca href=http://localhost:8080\u003elocalhost:8080\u003c/a\u003e (use server url \u003ca href=\" http://localhost:5000/api\"\u003ehttp://localhost:5000/api\u003c/a\u003e [default])\n  - HTTPS : \u003ca href=\"https://localhost:8443\"\u003ehttps://localhost:8443\u003c/a\u003e (use server url \u003ca href=\"https://localhost:8443/api\"\u003ehttps://localhost:8443/api\u003c/a\u003e)\n\n\u003cstrong\u003eNote\u003c/strong\u003e: To run the Browser Client from a remote machine, you \u003cstrong\u003eMUST\u003c/strong\u003e use HTTPS for both server url and browser url.\nEg. If you are hosting the server on 192.168.1.2, then browser client will be available at https://192.168.1.2:8443\nand the server url should be https://192.168.1.2:8443/api\n\nTo upload password lists or dictionaries, upload them to Minio Console at \u003ca href=http://localhost:9001\u003elocalhost:9001\u003c/a\u003e. View steps below for a detailed guide\nOtherwise, you can generate word lists dynamically using crunch. See crunch options and how to use them here:  \u003ca href=\"http://manpages.ubuntu.com/manpages/bionic/man1/crunch.1.html\"\u003ecrunch man page\u003c/a\u003e\n\nKraken's server runs on \u003ca href=http://localhost:5000\u003elocalhost:5000\u003c/a\u003e and also hosts swagger documentation at \u003ca href=http://localhost:5000/swagger\u003elocalhost:5000/swagger\u003c/a\u003e.\n\n##### Portable Desktop Client\n\nThe desktop client is an electron based portable application and can be run on Mac, Windows and Linux. Due to sensitive permissions required to function, it is highly recommended that you compile and it yourself by cloning the repo and using : \n\n```\ncd kraken-client\nnpm install\nnpm run electron-start\n```\n\n###### Windows\n\u003cstrong\u003eNote\u003c/strong\u003e: Window EXE portable client needs to run in the folder with its hashcat dependencies. Hashcat files can be dowloaded from their home page or [here](https://hashcat.net/files/hashcat-5.1.0.7z).\nIve included a compressed zip file with the portable executable and required hashcat files. They can be downloaded:\n  - \u003ca href=\"https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client.1.2.0.exe\"\u003ePortable Exe\u003c/a\u003e\n  - \u003ca href=\"https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client-with-dependencies.zip\"\u003eCompressed Zip\u003c/a\u003e\n\n###### Linux\n\nReleases include a Linux **AppImage** which only requires hashcat to be installed. \n\n  - \u003ca href=\"https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client-1.2.0.AppImage\"\u003eAppImage\u003c/a\u003e\n\nInstall hashcat:\n```\nsudo apt-get install hashcat\n```\nYou will have to give AppImage permission via properties to execute. \n\n### Adding WordLists to Kraken\n\nTo add your wordlists to minio, here are the steps:\n1. [UI way] Access your minio console at http://localhost:9001/. Should land you here:\n\n![image](https://user-images.githubusercontent.com/4005494/164892721-a2d58af4-b569-4646-a24f-06aa851a1665.png)\n\n2. Log in with u:admin p:password (default; can be changed). A 'kraken' bucket should be present like so:\n\n![image](https://user-images.githubusercontent.com/4005494/164892791-5be36a85-bb72-40ae-a52f-0a2d2802cb0b.png)\n\n3. Hit 'Browse' to see what files are available and add the wordlists you with 'Upload'\n\n![image](https://user-images.githubusercontent.com/4005494/164893024-b55b4a17-1e83-46c3-8363-ffaae5257f77.png)\n\n4. Either wait up to 5 minutes for the server to pick it up or restart the server. You'll know the server has picked up the list when via log. Note: Large lists take a while to index.\n\n![image](https://user-images.githubusercontent.com/4005494/164893050-41ecf42c-c40c-4bde-81eb-dac5eb4b5c74.png)\n\n5. The wordlist should show up when creating the request\n\n![image](https://user-images.githubusercontent.com/4005494/164893097-0b990b97-cae5-4ccd-9474-73d9a9ae31ba.png)\n\n### Note\n\nThis guide is on-going but please feel free to raise an issue or contact me for any help required.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farcaneiceman%2Fkraken","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Farcaneiceman%2Fkraken","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farcaneiceman%2Fkraken/lists"}