It also has numerous methods of generating password guesses (dictionary, brute force, etc). In some cases it can sniff the hashes off the wire. L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. L0phtcrack :- Windows password auditing and recovery application It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. THC Hydra :- A Fast network authentication cracker which support many different services. Several other hash types are added with contributed patches. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Its primary purpose is to detect weak Unix passwords. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.

This Windows-only password recovery tool handles an enormous variety of tasks. Cain and Abel :- The top password recovery tool for Windows.

John the ripper 1.7.2 download