Zero-Day vs N-Day Exploits: The Real Story Behind GPU Password Cracking

What’s the difference between a zero-day and an N-day exploit, and why is everyone suddenly talking about GPU password cracking?

Here’s the quick version:

Zero-Day Exploits
This is where investigators get a true edge. A zero-day is a brand-new, undisclosed vulnerability. There is no patch, no fix, and no workaround. It is how you gain access to the toughest devices when time is critical, and evidence cannot wait.

N-Day Exploits
An N-day is different. It means the vulnerability is already public. The “N” just tells you how many days have passed since it was disclosed. If the device has not been updated yet, you might still have a window. But once it is patched, that door is closed.

Where does GPU password cracking fit in?
GPU password cracking is useful because it speeds up brute force attacks on passwords and PINs. Many vendors highlight this as a headline feature right now. The reality is that once a vulnerability is public, or you are working with encrypted data, tools like Hashcat, John the Ripper, or Passware are all good options. But they are not magic. They are simply faster ways to run the brute force you could already do. It is just another tool in the kit, not the whole solution.

What should you ask?
Whenever you compare tools, ask, “Is this based on a true zero-day exploit, or an N-day combined with brute force?”
Both have value, but they are not the same when it comes to speed, success rates, or how many locked doors you can really open.

How MSAB does it:
At MSAB, we believe investigators should have the complete toolbox: modern exploits, secure RAM capture, smart workflows, and yes, brute force options too. The real advantage is having access to unique methods that others do not, giving you the best chance to secure vital evidence, no matter the device. At MSAB, we’re proud to have the industry’s leading research and development team, dedicated to uncovering zero-day exploits that help you access the latest high-end devices

So next time you hear “GPU cracking,” remember it is just one piece of the puzzle. The real power is combining the right methods, at the right time, with the right support behind you. That is how you stay ahead. Remember to try #XRYFirst when that latest high-end device lands on your desk.

Alex Coley
Technical Specialist, MSAB

Alex is a seasoned digital forensic expert and accredited MCIIS member with 34 years in forensic science. With deep experience in mobile device analysis, vehicle forensics, and hardware investigations, he has provided expert testimony in court and spoken at leading conferences. Prior to joining MSAB, Alex trained police personnel across the UK and supported the College of Policing as an associate trainer.