Notice: Ncrack was written as a "Google Summer of Code" Project in 2009. While it was useful for some purposes, it is not fully developed or currently maintained. We have removed the release downloads due to code security issues. We recommend the brute force scripts included as part of Nmap's Scripting Engine (NSE). instead.
The source code remains accessible on GitHub strictly for educational and security research purposes. While the Nmap team is not actively developing Ncrack, we will review and merge community-submitted pull requests for critical security fixes.
Ncrack: Lightning-fast credential testing
Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts.
Ncrack's features include a very flexible interface granting the user full control of network operations, allowing for very sophisticated bruteforcing attacks, timing templates for ease of use, runtime interaction similar to Nmap's and many more. Protocols supported include SSH, RDP, FTP, Telnet, HTTP(S), Wordpress, POP3(S), IMAP, CVS, SMB, VNC, SIP, Redis, PostgreSQL, MQTT, MySQL, MSSQL, MongoDB, Cassandra, WinRM, OWA, and DICOM
Be sure to read the Ncrack man page to fully understand Ncrack usage. If you are a developer and want to write your own Ncrack modules, studying the Ncrack Developer's Guide would be the first step.
Current Development Version
The Ncrack Git repository is on Github so you can always get the latest development version by pulling from there.