Like others said, hashcat. Doing pentest/red team stuff, you quite often stumble across password hashes that can do some pretty cool stuff if you can crack them

Like others said, hashcat. Doing pentest/red team stuff, you quite often stumble across password hashes that can do some pretty cool stuff if you can crack them. Did you know that if you're on a Windows network, random machines all around you will just try to authenticate to you, and disclose the hash of the user on the system? Plug in on a Ethernet jack in the lobby, or conference room, get onto the wifi, compromise any machine on the network and run responder or inveigh, and you just get dumps of user passwords, and if you can crack any of them, its a pretty quick path up to Domain Admin on the network, which then can dump everyone's hashes.