#!/bin/bash
# Phase 8 — Passwords & Credentials
source "$(dirname "$0")/lib.sh"

phase_header "PHASE 8 — Password Attacks & Credential Access"

section "Hash Cracking"
chk "hashcat"           hashcat
chk "john"              john
chk_opt "ophcrack"      ophcrack   # not in Kali rolling repos

section "Online Brute Force"
chk "hydra"             hydra
chk "medusa"            medusa
chk "ncrack"            ncrack
chk_py "patator"        patator

section "Spray"
chk "kerbrute"          kerbrute
chk "netexec"           netexec

section "Wordlist Generation"
chk "cewl"              cewl
chk "crunch"            crunch
chk "cupp"              cupp
chk_opt "mentalist"     mentalist

section "Kerberos"
chk "impacket-GetUserSPNs"  impacket-GetUserSPNs
chk "impacket-GetNPUsers"   impacket-GetNPUsers
chk "impacket-ticketer"     impacket-ticketer
chk "impacket-getST"        impacket-getST

section "LSASS / Memory"
chk_py "pypykatz"       pypykatz
chk_dir "DonPAPI"       /opt/DonPAPI

section "Windows Credential Stores"
chk "impacket-secretsdump"  impacket-secretsdump
chk "impacket-samrdump"     impacket-samrdump

section "Wordlists"
chk_dir "SecLists"      /opt/SecLists
chk_file "rockyou.txt"  /opt/SecLists/Passwords/Leaked-Databases/rockyou.txt

section "Crypto / Hashing"
chk_py "pycryptodome"   Crypto
chk_py "hashpumpy"      hashpumpy
chk_py "sympy"          sympy
chk_py "gmpy2"          gmpy2
chk_py "ecdsa"          ecdsa

phase_summary
