推荐一个实用的开源工具——hashcat。项目由hashcat开发维护，GitHub上获得了 26717 个Star。简单来说，它是一款全球最快、最先进的密码恢复实用程序，对于站长和开发者来说是个不错的工具。
工具功能介绍
hashcat is a highly optimized password recovery platform for GPUs, CPUs, and large distributed systems.
Features ###* World's fastest password cracker
- World's first and only in-kernel rule engine
- Free and open source, under the MIT license
- Multi-OS: Linux, Windows and macOS
- Multi-backend: CUDA, HIP, Metal and OpenCL
- Multi-device: several devices, and mixed device types, in one system
- Multi-hash: cracks large numbers of hashes at once
- Over 590 hash modes, each written with performance in mind
- 5 attack modes: wordlist, brute-force, PCFG, hybrid and association
- Assimilation bridge: add a hash mode in C, Python or Rust, without writing a kernel
- Brain: skips candidates an earlier session already tried
- Distributed cracking networks, using an overlay
- Reads candidates from a wordlist, from stdin, or from another program
- Markov chain keyspace ordering, so the likely candidates come first
- Automatic performance tuning per device
- Interactive pause and resume
- Named sessions, and restore after an interruption
- Built-in benchmark
- Integrated thermal watchdog
- Hex salt and hex charset, for hashes and character sets that are not text
- Encrypted plains: crack a hash for someone else without being able to read the password
- Keyboard layout mapping, for full disk encryption passwords typed on a non-US keyboard
License ###hashcat is licensed under the MIT license. See docs/license.txt.
Installation ###Download the latest release and unpack it where you want it. Use 7z x when unpacking from the command line, so the full file paths stay intact.Your platform may also provide packages.
Building ###Building from source is optional. The release package is the same program, and a binary you build yourself will not crack any faster. Build it if you want a change of your own, a fix that is in master but not yet released, or a platform we do not ship a binary for.See BUILD.md for how.Tests:Build | BSD | Rust
Usage and help ###Start with --help, also kept in the tree as docs/hashcat-help.md. One example hash per mode is in docs/hashcat-example-hashes.md.The wiki and the FAQ go further. The forum holds years of answered questions. If you still need help from a real human, come to Discord.
Documentation ###The docs directory covers each feature. The ones people ask about most:* Plugin development guide, for adding a hash mode
- Assimilation bridge, and its Python and Rust quickstarts
- Generic attack mode and PCFG
- Brain, slow candidates, encrypted plains
- Keyboard layout mapping
- Compression libraries, for reading gzip, xz and zstd files
- Release notes for v7.1.0, and the full changelog
Contributing ###Contributions are welcome. CONTRIBUTING.md has the code style, what a pull request needs, and how to test a change before you send it.
Security ###SECURITY.md has how to report a vulnerability, and what counts as one.
Happy Cracking!
总的来说，hashcat是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。