Openwall ORG

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

John the Ripper is an offline password-auditing tool that recovers original passwords from stored hashes, supporting hundreds of formats including Windows NTLM, ZIP, RAR, PDF, and Unix crypt.

GUI frontend to John the Ripper password cracker

Password-based key derivation function and password hashing scheme building upon scrypt

Community packages of John the Ripper, the auditing tool and advanced offline password cracker (Docker images, Windows PortableApp, Mac OS, Flatpak, and Ubuntu SNAP packages)

PHP mt_rand() seed cracker

TCP port scan detection tool

Password/passphrase strength checking and policy enforcement

A collection of samples for development and testing of John the Ripper and other password security auditing and password recovery tools

Proof-of-work scheme building upon yescrypt and scrypt

John the Ripper core - offline password cracker that's core to John the Ripper jumbo, which is "the real thing". So you probably want https://github.com/openwall/john instead of this repo.

Test Suite for John the Ripper

Go implementation of scrypt and yescrypt key derivation and password hashing functions

Legacy password hashing framework for PHP applications needing to support or having previously supported PHP below 5.5

Web interface to mailing list archives

Implementation of bcrypt password hashing scheme

Generate representative samples from Pwned Passwords (HIBP)

Alternative password shadowing scheme

Openwall GNU/*/Linux (Owl) is a small security-enhanced Linux distribution for servers. Owl has reached its end-of-life, but its legacy lives on in a few other distributions (most notably, ALT Linux) and upstream projects. This is an export of the Owl CVS repository into Git.

Single-user mode login program that supports having multiple root accounts on a system

Tiny POP3 daemon designed with security as the primary goal

A netstat-alike for Linux with restricted /proc

Provide per-user private directories under /tmp as part of PAM session or account management

Use PAM binary prompts to ask the application for username and password