> For the complete documentation index, see [llms.txt](https://zero-day-archives.gitbook.io/zero-day-archives/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zero-day-archives.gitbook.io/zero-day-archives/password-attacks-1/password-attacks.md).

# Password Attacks

Password attacks involve attempts to gain unauthorized access to a system by exploiting weak or poorly protected passwords. These attacks can include methods like **brute-force**, where every possible password is tried, or **dictionary attacks**, which use common word lists.

**Cracking** refers to the process of breaking a password hash (a scrambled version of a password) to reveal the original password. Since hashes are often used to store passwords securely, cracking them requires specialized tools and techniques, such as **hashcat** or **John the Ripper**. These tools work by trying various combinations or exploiting vulnerabilities in the hashing algorithm.

Overall, password attacks and cracking are key concerns in cybersecurity, highlighting the importance of strong password practices and secure hashing methods to protect sensitive information.