TGViewer
APT APT @apt_notes Β· 16.7K subscribers
Post #966 24.4K
πŸ” Crack.sh is dead, Long Live Shuck.sh

Recently, many of you might've noticed that Crack.sh is currently unavailable. While it's been an invaluable tool in our arsenal, the landscape is ever-changing, and we need to pivot. Meet Shuck.sh, an emerging service that offers similar capabilities, leveraging the extensive Have I Been Pwned (HIBP) database.

πŸš€ Key Features:

β€” Shuck It: Instantly shuck NetNTLMv1, PPTP VPN, and WPA-Enterprise MSCHAPv2 challenges against HIBP's NT-hash database.
β€” Tech Insight: Efficient binary search for DES-keys collisions from a subset of the HIBP database.
β€” Fast & Free: Got around 100 NetNTLMv1 challenges? Extract their corresponding NT-Hashes in roughly 10 seconds.

One significant advantage of Shuck.sh over other tools is its ability to be deployed locally. For those concerned about security and privacy, you can set up Shuck.sh on your own environment using its script from the GitHub repository.

πŸ”— Shuck.sh
πŸ”— GitHub Repository
πŸ”— Pwned Passwords Version 8 (Torrent)

#ntlmv1 #des #mschapv2 #bruteforce
  • πŸ”₯ 6
  • πŸ‘ 4
More from @apt_notes
  1. Sep 1, 2026πŸ”’ Certi-Bhai β€” IIS AppPool β†’ NT AUTHORITY\SYSTEM via AD CS RPC A webshell under IIS AppPo…
  2. Aug 17, 2026πŸ”’ Citrix NetScaler Pre-Auth RCE (CVE-2026-8452) Unauthenticated heap overflow in SAML sig…
  3. Aug 11, 2026Post #1201
  4. Aug 7, 2026ResetNightmare ResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change…
  5. Jul 24, 2026πŸ”’ Certighost (CVE-2026-54121) β€” AD CS Domain Controller Impersonation Low-privileged doma…
  6. Jul 9, 2026πŸ’‰ PΒ³ β€” Shellcode Loader: Process Parameter Poisoning This loader implements a code inject…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook β†’Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 β†’