{ pkgs, config, lib, ... }:
let
  cfg = config.shiva.modules.passwords;
in
{
  options.shiva.modules.passwords = {
    enable = lib.mkEnableOption "Password cracking and brute-forcing related tools";
  };

  config = lib.mkIf cfg.enable {
    environment.systemPackages = with pkgs; [
      authoscope # Scriptable network authentication cracker
      bruteforce-luks # Cracks passwords of LUKS encrypted volumes
      brutespray # Tool to do brute-forcing from Nmap output
      crunch # Wordlist generator
      crowbar # A brute forcing tool that can be used during penetration tests
      chntpw # A utility to reset the password of any user that has a valid local account on a Windows system
      firefox_decrypt # A tool to extract passwords from profiles of Mozilla Firefox and derivates
      h8mail # Email OSINT & Password breach hunting tool
      hashcat # Fast password cracker
      hashcat-utils # Small utilities that are useful in advanced password cracking
      hashdeep # A set of cross-platform tools to compute hashes
      hcxtools # Tools for capturing wlan traffic and conversion to hashcat and John the Ripper formats
      john # John the Ripper password cracker
      legba # A multiprotocol credentials bruteforcer / password sprayer and enumerator
      medusa # A speedy, parallel, and modular, login brute-forcer
      nasty # Recover the passphrase of your PGP or GPG-key
      ncrack # Network authentication tool
      nth # Module and CLI for the identification of hashes
      phrasendrescher # A modular and multi processing pass phrase cracking tool
      python311Packages.patator # Multi-purpose brute-forcer
      thc-hydra # A very fast network logon cracker which support many different services
      truecrack # A brute-force password cracker for TrueCrypt volumes
    ];
  };
}