#1Password cracking, brute-force, wordlists, and credential testing tools.
Kitploit recommended
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
olivierlaflamme/cheatsheet-godPenetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
ullaakut/cameradarCameradar hacks its way into RTSP videosurveillance cameras
flangvik/sharpcollectionNightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
urbanadventurer/android-pin-bruteforceUnlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android…
berzerk0/probable-wordlistsVersion 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
gwen001/pentest-toolsA collection of custom security tools for quick needs.
guardicore/monkeyInfection Monkey - An open-source adversary emulation platform
yogsec/hacking-toolsA curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other…
duo-labs/cloudmapperCloudMapper helps you analyze your Amazon Web Services (AWS) environments.
k8gege/ladonLadon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32…
ignis-sec/pwdb-publicA collection of all the data i could extract from 1 billion leaked credentials from internet.
moham3driahi/th3inspectorTh3Inspector 🕵️ Best Tool For Information Gathering 🔎
cldrn/nmap-nse-scriptsMy collection of nmap NSE scripts
cyb0r9/socialboxBrute-force attack framework targeting social media platforms (Facebook, Gmail, Instagram, Twitter) with automated credential testing and account…
