To encrypt password databases, KeePass supports passwords, keyfiles or a password-keyfile combo. A platform independent implementation could be done by simply porting crypto-ms.c to e.g. Mod0keecrack is plain C and has no 3rd party library dependencies on Windows, as it's using the Microsoft Cryptographic (CNG) Framework. Using wordlists is recommended, as dumb incremental brute-force may take a too long time due to the crypto-algorithms that are used by KeePass databases (SHA256 and many AES key-transformation rounds). You can also use text-files with a wordlist on the command-line. For example, you could use the john password cracker to generate wordlists and feed them directly into mod0keecrack via stdin. To use mod0keecrack, you need to generate own wordlists or supply a wordlist via pipe/stdin.

Mod0keecrack handles KeePass 2 databases that are encrypted with password-only, or with password and key-file.Ĭurrently, there is no incremental or template-based bruteforce algorithm for passphrase generation implemented yet. The only purpose of mod0keecrack is the brute-forcing of a KeePass 2 database password. mod0keecrack only handles the encrypted file format and is not able to parse the resulting plaintext database. kdbx files, as well as decryption routines to verify if a supplied password is correct. It implements a KeePass 2 Database file parser for. Mod0keecrack is a simple tool to crack/bruteforce passwords of KeePass 2 databases. You can put all your passwords in one database, which is locked with one master key or a key file. KeePass is a free open source password manager, which helps you to manage your passwords in a secure way.

Kdbx database