Password cracking, brute-force, wordlists, and credential testing tools.
oxstussz-eng/kerberos-cve-2026-27912PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…
sabir555s/insta_cyberPerforms dictionary-based brute-force login attacks against Instagram accounts using Python, with optional Tor support for anonymized authorized…
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
berzerk0/probable-wordlistsVersion 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
derv82/wifite2Rewrite of the popular wireless network auditor, "wifite"
v1s1t0r1sh3r3/airgeddonThis is a multi-use bash script for Linux systems to audit wireless networks.
guardicore/monkeyInfection Monkey - An open-source adversary emulation platform
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
mebus/cuppInteractive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…
mishakorzik/allhackingtoolsAll-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
olivierlaflamme/cheatsheet-godPenetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
k8gege/ladonLadon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32…
spiderlabs/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
arismelachroinos/lscriptThe LAZY script will make your life easier, and of course faster.
lcvvvv/kscanMulti-protocol port scanner with fingerprint recognition, service detection, and brute-force authentication testing. Supports 1200+ protocols, 10000+…
