password-attacks

havocframework/modules

Modules used by the Havoc Framework

byt3bl33d3r/pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

jseidl/usernamer

Pentest Tool to generate usernames/logins based on supplied names.

securityriskadvisors/msspray

Password attacks and MFA validation against various endpoints in Azure and Office 365

prisect/hichipreset

Hicip IP admin password reset script using CVE-2020-9529. This is made for educational purposes only of course.

chrisjd20/hikvision_cve-2017-7921_auth_bypass_config_decryptor

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.

st0pl/dvrfaultnet

.NET console application that exploits CVE-2018-9995 vulnerability

basucert/winboxpoc

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

badersz/cve-2017-2751

Mini-paper on CVE-2017-2751, HP EFI password extraction.

lc-at/f609-brute

Simple brute force tool for Telkom Indonesia's ZTE F609 routers

zux0x3a/0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and…

abacus-group-rto/legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

fadi002/unshackle

Open-source tool to bypass windows and linux passwords from bootable usb

dievus/lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

markoh17/spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…

optiv/talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

praetorian-inc/trident

automated password spraying tool

jaykali/lockphish

Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…