Don't wait for a brute-force attack to find your weaknesses. Learn how to use Hashcat and John the Ripper on Linux to audit your password policies with real-world benchmarks.