Credential Reuse/Abuse Tools Recovering passwords: John the Ripper Hashcat Credential stuffing/brute force: THC Hydra