Password cracking, brute-force, wordlists, and credential testing tools.
wattocyber/offensive-one-liners110 offensive security one-liners for authorized testing and CTFs, organized in one markdown notebook by category and kill-chain step. Dual-use…
nel-droid/cve-2026-71205-pocPoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)
h4zaz/cve-2026-8793Technical CVE write-up detailing missing brute-force protection in a web admin login form, with PoC reproduction, attack-chain context, and…
sabir555s/insta_cyberPerforms dictionary-based brute-force login attacks against Instagram accounts using Python, with optional Tor support for anonymized authorized…
oxstussz-eng/kerberos-cve-2026-27912PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…
ghostpack/deeppassHunting for passwords with deep learning
adepts-of-0xcc/vba-macro-experimentsCollection of VBA macro published in our twitter / blog
assurancemaladiesec/ad-description-password-finderRetrieve AD accounts description and search for password in it
olivierlaflamme/cheatsheet-godPenetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
0xsyr0/vx-underground-wordlistWordlist to crack .zip-file password
jbaines-r7/cisco_asa_researchCisco ASA Software and ASDM Security Research
dozernz/bugstropicsSupporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
garrettfoster13/pre2kA tool to query for the existence of pre-windows 2000 computer objects.
mihat2/resetnightmare-impacketCVE-2026-27912 (ResetNightmare) — Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC
saisathvik1/windows-privilege-escalation-notesMy handbook for Windows Privilege Escalation concepts. Do Check out my Playlist, link: https://www.youtube.com/playlist?list=PLlrnAg4kKF3puXLI0JyltbNJ…
aniqfakhrul/powerview.pyEnumerate and attack Active Directory with LDAP session persistence, ACL abuse, Kerberoasting/ASREProasting, shadow credentials, RBCD, and NTLM relay.
reverseclabs/physmem2profitPhysmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely
