Password Attacks

n00py/outpacket

This cheatsheet maps common impacket workflows to their modern alternatives

mwr-cybersec/veeamdumper-bof

A credential extraction BOF for Veeam Backup and Replication and Veeam One

aabysszg/hashdump-bypassedr

Windows绕过EDR实现DumpHash

ibnaleem/rules

Curated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…

darkspacesecurity/runas-stealer

RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging

skelsec/adiskreader-secretsdump

Extract registry and NTDS secrets from local or remote disk images

ricardojoserf/nativebypasscredguard

Bypass Credential Guard by patching WDigest.dll using only NTAPI functions

xaitax/chrome-app-bound-encryption-decryption

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

wavvs/nanorobeus

COFF file (BOF) for managing Kerberos tickets.

andreiverse/gorilla

tool for generating wordlists or extending an existing one using mutations.

adarshthakur14777-cyber/cve-2026-60137

wpsqli full SQLi extractor + dumper for CVE-2026-60137

r3fr4kt/codify-tjnull-oscp-

Walkthrough for Codify (Linux - Easy). Exploits vm2 RCE (CVE-2023-30547), SQLite DB hash extraction, Bcrypt cracking with John, and Privilege…

manio/mtpass

MikroTik Password Recovery Tool

s3bap3/pmp-exploit

Password Manager Pro Exploit

ajinabraham/xenotix-python-keylogger

Xenotix Python Keylogger for Windows.

cldrn/nmap-nse-scripts

My collection of nmap NSE scripts

cerberusmrxi/cve-2025-48932-invision-community-sqli-exploit

CVE-2025-48932 - Unauthenticated SQL injection exploit for Invision Community ≤ 4.7.20. Fully automated exploitation with database enumeration,…