Automic VaultAutomic Vault

brew

Install ophcrack with Homebrew, apt, dnf, MacPorts, Nix

Microsoft Windows password cracker using rainbow tables. Version 3.8.0 via Homebrew; verified 2026-06-22.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install ophcrack

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install ophcrack

MacPorts ports tree · security/ophcrack/Portfile · source: api.github.com

Linux

Debian aptverified · 92%
sudo apt install ophcrack

Debian stable package indexes · ophcrack · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install ophcrack

Fedora Rawhide package metadata · ophcrack · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#ophcrack

nixpkgs package indexes · pkgs/by-name/op/ophcrack/package.nix · source: api.github.com

overview

Package summary

Microsoft Windows password cracker using rainbow tables

Commands and aliases

  • ophcrack

history

Project history and usage

Ophcrack is a Windows password-auditing tool based on rainbow tables, packaged as both a GUI/CLI program and historically as bootable LiveCD images. It is best understood as the practical tool that carried Philippe Oechslin's rainbow-table time-memory tradeoff work into Windows LM and NT hash recovery workflows.

Project history

The official site describes Ophcrack as a free Windows password cracker based on rainbow tables and implemented by the inventors of the method. The SourceForge project credits Philippe Oechslin and Cedric Tissieres, and the GitLab README describes the maintained code as an evolution of the original Ophcrack 1.0 developed at EPFL.

Ophcrack's early strength was attacking Windows XP-era LM hashes with precomputed tables. Later versions and table sets added NT hash support for Windows Vista and Windows 7-era systems, where LM hashes may be disabled or insufficient.

The project moved source hosting from SourceForge-era infrastructure to GitLab by the 3.7.x line, while the SourceForge site remained the main public download and table-distribution page.

Adoption history

Ophcrack became a recognizable security-auditing package because it bundled an approachable GUI with the hard part of rainbow-table attacks: large precomputed table sets. The official table page documents free XP and Vista table families, including small demonstration-sized tables and multi-gigabyte sets with stated success rates.

Its use declined in many modern password-auditing scenarios as salted hashes, stronger Windows defaults, credential protections, and GPU-oriented crackers changed the threat model. The package remains historically important and still useful for authorized recovery or demonstrations against older Windows hash material.

How it is used

Users load Windows hashes from supported formats or recover them from a target system, then point Ophcrack at compatible rainbow tables. The tool can be run interactively through its GUI or from the command line, and LiveCD images automated the boot-and-recover workflow for older machines.

The package should be handled as a security-auditing and password-recovery tool: legitimate use requires authorization, and results depend heavily on hash type, password composition, and table coverage.

Why package nerds care

Ophcrack is notable because the package is only half the story; the data tables are the real payload. Packaging it raises the old security-tool question of whether a formula should provide the engine, the tables, the LiveCD workflow, or only pointers to external artifacts.

It also captures a specific era of password cracking, when precomputed rainbow tables were a practical answer to unsalted Windows hashes before commodity GPU cracking and better credential-storage practices shifted the balance.

Timeline

  • 2003: Philippe Oechslin publishes the rainbow-table time-memory tradeoff work that underpins Ophcrack.
  • 2000s: Ophcrack 1.0 emerges from EPFL-related work and becomes distributed through SourceForge.
  • 2010s: XP and Vista/7 table families and LiveCD images make Ophcrack a common Windows password-recovery tool.
  • 2017: The 3.7.x line reflects the source-hosting move to GitLab.
  • 2018-03-06: Ophcrack 3.8.0 is published as the release listed by the official download page.

Related projects

  • Ophcrack is related to rainbow tables, RainbowCrack, John the Ripper, Hashcat, Windows LM and NTLM hash formats, SliTaz-based LiveCD builds, and other password-auditing tools.

security posture

Risk level: red

escape, surveillance, or offensive capability signal.

Risk classifier

red risk · medium confidence · escape-surveillance-offensive

Why

  • escape, surveillance, or offensive capability signal

Signals

  • text:password cracker

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
ophcrackcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version3.8.0
manager updated2026-06-22
local dataok
upstreamnot checked
latest detectednot detected

https://ophcrack.sourceforge.io/

install metadata

Package metadata

Package keybrew:ophcrack
Version3.8.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/ophcrack
Homepagehttps://ophcrack.sourceforge.io/
Repositoryhttps://gitlab.com/objectifsecurite/ophcrack
Upstream docshttps://ophcrack.sourceforge.io/index.php
LicenseGPL-2.0-or-later WITH openvpn-openssl-exception
Source archivehttps://downloads.sourceforge.net/project/ophcrack/ophcrack/3.8.0/ophcrack-3.8.0.tar.bz2
Last updated2026-06-22T14:05:46-07:00
Pulseupdated
Dependenciesopenssl@4
Uses from macOSexpat
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameophcrack
Version Scheme0
Revision1
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

ophcrack 3.8.0-3+b3

Microsoft Windows password cracker using rainbow tables (gui)

http://ophcrack.sourceforge.net/

sudo apt install ophcrack
  • Section: admin
  • Architecture: amd64
  • Source Package: ophcrack
  • 10 dependencies
  • normalized package name match
  • Matched by: Ophcrack
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ophcrack from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

ophcrack-cli 3.8.0-3+b3

Microsoft Windows password cracker using rainbow tables (cmdline)

http://ophcrack.sourceforge.net/

sudo apt install ophcrack-cli
  • Section: admin
  • Architecture: amd64
  • Source Package: ophcrack
  • 3 dependencies
  • normalized package name match
  • Matched by: Ophcrack
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ophcrack-cli from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

ophcrack

nix profile install nixpkgs#ophcrack
  • normalized package name match
  • Matched by: Ophcrack
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/op/ophcrack/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

ophcrack 3.8.0-3build4

Microsoft Windows password cracker using rainbow tables (gui)

http://ophcrack.sourceforge.net/

sudo apt install ophcrack
  • Section: universe/admin
  • Architecture: amd64
  • 10 dependencies
  • normalized package name match
  • Matched by: Ophcrack
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ophcrack from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

ophcrack-cli 3.8.0-3build4

Microsoft Windows password cracker using rainbow tables (cmdline)

http://ophcrack.sourceforge.net/

sudo apt install ophcrack-cli
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: ophcrack
  • 3 dependencies
  • normalized package name match
  • Matched by: Ophcrack
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ophcrack-cli from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
dnf95%

ophcrack 3.8.0-21.fc44

Free Windows password cracker based on rainbow tables

https://ophcrack.sourceforge.io

sudo dnf install ophcrack
  • License: LicenseRef-Callaway-GPLv2+-with-exceptions
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: ophcrack
  • 11 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Ophcrack
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: ophcrack from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
MacPorts95%

ophcrack

sudo port install ophcrack
  • normalized package name match
  • Matched by: Ophcrack
MacPorts ports tree · api.github.com · MacPorts ports tree: security/ophcrack/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment