(c) 2025 by byt3n33dl3 <https://github.com/byt3n33dl3/thc-jennifer>
Advanced KeePass Password Cracker, 2.1.0
Licensed under BSD-2.0
Jennifer du' Casse is the most Advanced KeePass .kdbx cracking software. Support cracking KDBX3 (KeePass 2.x) and KDBX4. Designed to handle all versions of KeePass database files (.kdbx), including the newer 2.36+ versions that use the KDBX4 format.
Please do not use in military or secret service organizations, or for illegal purposes. (This is the wish of the author and non-binding. Many people working in these organizations do not care for laws and ethics anyways. You are not one of the "good" ones if you ignore this.)
- Supports all KeePass versions (including >=2.36)
- Works with both AES-KDF and Argon2 key derivation
- Multi-threaded for maximum performance
- Includes default wordlist for quick testing
- Progress tracking with accurate ETA
- Simple command-line interface
Jennifer Operates by directly parsing the KDBX file structure to extract cryptographic parameters such as:
- Master seed
- Transform seed (KDBX3)
- Encryption IV
- Stream start bytes
- KDF parameters (including Argon2 parameters for KDBX4)
- Parses the KDBX header to determine version and encryption parameters
- Loads the wordlist into memory for efficient processing
- Spawns multiple worker threads to attempt passwords in parallel
- Uses cryptographic operations to verify each password against the database
- Provides real-time statistics on cracking progress
- Immediately reports when a password is successfully found
Your pull request should fully describe the functionality you are adding/removing or the problem you are solving. Regardless of whether your patch modifies one line or one thousand lines, you must describe what has prompted and/or motivated the change.
If you're adding four new features, you need to make four separate pull requests.
For more, come to my collections of write-ups for real-world use cases and write-ups here if there's any security concern, please contact me at me@byt3.guru