Security built into every system layer

Installation & Fast Credential Audit

Crackerjack is a lightweight, zero-dependency identity security and active cyber deception engine for enterprise infrastructure, CI/CD pipelines, and active directories.

# 1. Install via pip or standalone package
pip install crackerjack-audit

# 2. Audit credentials with NIST SP 800-63B policy enforcement
crackerjack audit hashes.txt --report audit.html --smart-mutations

# 3. Assess cryptographic KDF migration risks (MD5, NTLM -> Argon2id)
crackerjack hygiene /etc/shadow --output-json
            

Outputs include executive HTML reports with pure SVG vector donuts, broken password breakdown charts, and longitudinal drift tracking.

Active Cyber Deception & Honeywords

Juels-Ristenpart active honeywords generation with exact character-entropy pool matching, making decoy canaries mathematically indistinguishable to offline attackers.

# Generate 5 decoy honeywords matching legitimate password entropy
crackerjack honey generate --password "K9#mQ2$pL8v" --count 5

# Inject canaries into /etc/shadow or Windows Active Directory NTDS
crackerjack honey inject --format shadow --user svc_backup

# Tripwire verification: trigger instant SIEM alert on credential stuffing
crackerjack honey verify --attempted "K9#mQ2$pL8v" --canary-file canaries.json
            

Zero-Dependency Microservice API

Run the built-in ThreadingHTTPServer microservice to integrate real-time password policy scoring into identity providers and sign-up flows:

# Start the microservice on 0.0.0.0:8000
crackerjack serve --host 0.0.0.0 --port 8000

# Real-time registration validation check
curl -X POST http://localhost:8000/v1/validate \
  -H "Content-Type: application/json" \
  -d '{"password": "AcmeCorp2024!", "context": ["Acme", "Corp"]}'
            

Interactive Policy Playground

Test registration passwords against NIST SP 800-63B standards and context-specific organization tokens:

Test Password:

Target Context Terms (Company/Product/User):

Score: -- | Verdict: Evaluating...

Type above to evaluate.

Enterprise Compliance Mapping

NIST SP 800-63B: Eliminates arbitrary periodic resets; enforces minimum 8/12 character lengths, breach dictionary blacklists, and context term exclusion.
PCI-DSS v4.0 (Req 8.3): Mandates 12+ character lengths, multi-factor credential security, and cryptographic hygiene tracking.
SOC 2 Type II (CC6.1): Enforces logical access boundaries and immutable audit ledger tracking with drift analysis.

Crackerjack 3.3.0 Release Notes

Release: v3.3.0 (Continuous Identity Security & Active Deception)

Active Cyber Deception (`crackerjack honey generate|inject|verify`).
Continuous Compliance Drift Ledger (`crackerjack drift`) with pure SVG trendlines.
SIEM & ChatOps Webhooks (Slack Block Kit, Teams, Generic HMAC-SHA256).
Probabilistic Mutation Engine (`crackerjack mutate`) modeling human cognitive topology.
Cryptographic Hygiene Assessment (`crackerjack hygiene`) with 8x RTX 4090 GPU benchmarks and Argon2id migration blueprint.