Using local password-attack tools