Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/adrianvollmer/crack-o-matic

Find and notify users in your Active Directory with weak passwords
https://github.com/adrianvollmer/crack-o-matic

active-directory blueteam cracking-hashes flask hashcat john-the-ripper

Last synced: 7 days ago
JSON representation

Find and notify users in your Active Directory with weak passwords

Host: GitHub
URL: https://github.com/adrianvollmer/crack-o-matic
Owner: AdrianVollmer
License: mit
Created: 2021-03-21T12:58:00.000Z (over 3 years ago)
Default Branch: main
Last Pushed: 2021-09-04T10:42:37.000Z (about 3 years ago)
Last Synced: 2024-07-06T19:43:29.108Z (4 months ago)
Topics: active-directory, blueteam, cracking-hashes, flask, hashcat, john-the-ripper
Language: Python
Homepage:
Size: 402 KB
Stars: 101
Watchers: 6
Forks: 3
Open Issues: 3
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE

Awesome Lists containing this project

README

Crack-O-Matic
=============

Find and notify users in your Active Directory with weak passwords.

Features:

* Linux-based
* Flask-based web app
* Hashcat or John cracker
* Automated e-mails
* Graphical reports
* Privacy preserving

[Read the docs](https://crack-o-matic.readthedocs.io) for more information.

Screenshots
-----------

![Report 1](https://github.com/AdrianVollmer/Crack-O-Matic/blob/main/doc/report1.png)

![Report 2](https://github.com/AdrianVollmer/Crack-O-Matic/blob/main/doc/report2.png)

Tests
-----

If you're a developer and want to run the tests, you need to edit
`tests/.env` and define the following variables according to your
environment:

```
# path to `john` binary
JOHN_PATH=/opt/john/run/john
# path to `hashcat` binary
HASHCAT_PATH=/usr/bin/hashcat
# FQDN of a test domain
DOMAIN=crack.local
# name of one of its domain admins
DOMAINUSER=Administrator
# domain admin password
DOMAINPASS=
# FQDN of a domain controller in the test domain
HOST=localdc.crack.local
```

If you don't have a test domain, you can use the docker-compose file in
`tests/docker` to run a Samba DC (`docker-compose run --service-ports dc`).
Inside the file you will find the values you need. You should also create an
entry for the FQDN in your `/etc/hosts`.

License and Copyright
---------------------

See LICENSE for the full license text.