
psudohash
Generates millions of keyword-based password mutations in seconds.
Password cracking, brute-force, wordlists, and credential testing tools.

Generates millions of keyword-based password mutations in seconds.

Injects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…

Low and slow password spraying tool, designed to spray on an interval over a long period of time

Windows Oracle Database Attack Toolkit

Fully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)

A simple super fast django reusable app that blocks people from brute forcing login attempts

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

Cross-platform framework for enumerating O365 accounts, password spraying, exfiltrating emails/Teams/OneDrive data, and backdooring EntraID accounts…

Multi-protocol port scanner with fingerprint recognition, service detection, and brute-force authentication testing. Supports 1200+ protocols, 10000+…

Brute-force attack framework targeting social media platforms (Facebook, Gmail, Instagram, Twitter) with automated credential testing and account…

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

This tool tests WordPress installations for XML-RPC authentication vulnerabilities.

Fake User Generator for Active Directory Environments

A Network Enumeration and Attack Toolset for Windows Active Directory Environments.

Let's Snatch The Admin Panel Of Any Website In Seconds.

Web Application Vulnerability Scanner

WITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…

A Framework meant for the exploitation of iOS devices.