: These tools may actually recover the password by exploiting known vulnerabilities (like CVE-2022-2003), but they simultaneously infect the host computer.