Password Attacks

cerbrutus-bruteforcer/cerbrutus

Network brute force tool, written in Python. Faster than other existing solutions (including the main leader in the network brute force market).

synacktiv/sccmsecrets

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.

voidsec/cve-2020-1472

Exploit Code for CVE-2020-1472 aka Zerologon

skelsec/aardwolf

Asynchronous RDP client for Python (headless)

dievus/oh365userfinder

Enumerates valid Microsoft 365 accounts and domains via response analysis, with password spraying support and throttling detection to avoid lockouts.

zyylhn/zscan

Zscan a scan blasting tool set

ustayready/sharphose

Asynchronous Password Spraying Tool in C# for Windows Environments

ccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

shutdownrepo/smartbrute

Password spraying and bruteforcing tool for Active Directory Domain Services

jimywork/shodanwave

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

aleksamcode/wifi-password-stealer

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

golem445/corporate_masks

8-14 character Hashcat masks based on analysis of 3.2 million NTLM hashes cracked while pentesting

semperis-community/resetnightmare

POC tool for ResetNightmare (CVE-2026-27912)

vectra-ai-research/maad-af

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

eng1ndes/northstarc2

Web Based Command Control Framework (C2) #C2 #PostExploitation #CommandControl #RedTeam #C2Framework #PHPC2 #.NETMalware #Malware #PHPMalware #CnC…

paradoxis/flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.