brute forcing the web

===============================If you creds are encoded with base 64 ..Apache tomcat : 
>>> msfconsole 
>>> use auxiliary/scanner/http/tomcat_mgr_login
>>> set VERBOSE true 
>>> set RHOSTS $IP
>>> 	run

=============================Online hashes cracked : 
https://www.cmd5.org/
http://hashes.org
https://www.onlinehashcrack.com/
https://gpuhash.me/
https://crackstation.net/
https://crack.sh/
https://hash.help/
https://passwordrecovery.io/
http://cracker.offensive-security.com/
https://md5decrypt.net/en/Sha256/
https://weakpass.com/wordlists
https://hashes.com/en/decrypt/hash