Authentication

nccgroup/jmxbf

A brute force program to test weak accounts configured to access a JMX Registry

benjojo/totp-ssh-fluxer

Take security by obscurity to the next level (this is a bad idea, don't really use this please)

foxglovesec/potato

Windows local privilege escalation exploit using NBNS spoofing, fake WPAD proxy, and HTTP-to-SMB NTLM relay to gain NT AUTHORITY\SYSTEM access.

maaaaz/crackmapexecwin

The great CrackMapExec tool compiled for Windows

cinno/cve-2015-7755-poc

Proof-of-concept exploit for CVE-2015-7755 targeting Juniper ScreenOS backdoor authentication bypass via SSH with hardcoded root credentials.

alexoslabs/ipmitest

Shell script for testing the IPMI cipher type zero authentication bypass vulnerability (CVE-2013-4784)

1872892142/jboss-autopwn-1

JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation…

elevenpaths/latch-plugin-openvpn-as

Latch plugin for OpenVPN Access Server enabling two-factor authentication (2FA) to secure VPN connections with time-based one-time passwords (TOTP).

pr0x13/idict

PHP-based iCloud Apple ID dictionary attack tool that bypasses account lockout and secondary authentication to brute-force credentials.

bonsaiviking/nfspy

ID-spoofing NFS client

bugch3ck/imposter

Proof of concept for CVE-2015-0006. Fixed in MS15-005 https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-005 .

dejanlevaja/wpbf

WPBF - a multithreaded WP brute forcer

nccgroup/winauthlib

A Windows domain authentication library for testing credentials

madrisan/cisco7crack

Crypt and decrypt the cisco enable 7 passwords

urbanesec/zackattack

Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!

emerinohdz/facebrute

Facebook brute forcer script