Cinnasole

For the full list of prompt commands with one-line descriptions, see the About page. This page walks through a few commands in more depth, with real example input and output.

crack — recovering a password

crack tries a built-in list of common passwords against a zip or PDF file you've forgotten the password to. If the password isn't in the default list, point it at a bigger wordlist file with --wordlist:

cinnasole> crack myfile.zip
Trying 35 candidate passwords against 'myfile.zip'...
No password found among the candidates tried.
Try a larger wordlist with: crack <file> --wordlist <path>

cinnasole> crack myfile.zip --wordlist bigger-list.txt
Loaded 3000 candidate passwords from 'bigger-list.txt'.
Trying 3000 candidate passwords against 'myfile.zip'...
Password found: correcthorsebatterystaple

If the file turns out not to be password-protected at all, crack says so directly rather than reporting a false match:

cinnasole> crack myfile.zip
Trying 35 candidate passwords against 'myfile.zip'...
This zip file doesn't appear to be password-protected.

subnet — reading the output

Give subnet a CIDR block and it breaks down the network:

cinnasole> subnet 192.168.1.0/24
Network address: 192.168.1.0
Broadcast address: 192.168.1.255
Netmask: 255.255.255.0
Total addresses: 256
Usable host range: 192.168.1.1 - 192.168.1.254
Usable hosts: 254

Total addresses includes the network and broadcast addresses; usable hosts is the number actually assignable to a device. Small blocks like a /30 or /31 still work — the usable range just shrinks accordingly.

sslcheck — reading the expiry line

sslcheck connects to a domain, reads its live TLS certificate, and reports how long it's valid for:

cinnasole> sslcheck example.com
Domain: example.com
Subject CN: example.com
Issuer: Example CA
Valid from: Jan 1 00:00:00 2026 GMT
Valid until: Apr 1 00:00:00 2026 GMT
Status: Valid (62 days left)

If fewer than 14 days remain, the status line calls that out specifically so it's easy to notice at a glance rather than buried in a date you'd have to do the math on yourself.

pgen — generating a password

pgen takes an optional length (default 16) and always includes at least one lowercase letter, uppercase letter, digit, and symbol — never leaves that to chance:

cinnasole> pgen
xR4$mK9pL!qZ2vNw

cinnasole> pgen 24 --no-symbols
aB3dE7fG1hJ5kL9mN2pQ6rS8tU

nmap and the local-network boundary

nmap only scans localhost and private network ranges. A public address is refused outright, regardless of what it resolves from:

cinnasole> nmap 8.8.8.8
Refused: '8.8.8.8' is not localhost or a private network address.

cinnasole> nmap 192.168.1.1
Running nmap against 192.168.1.1...
(real scan output for your own router/network)