Password Attacks

outflanknl/c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

wiire-a/pixiewps

An offline Wi-Fi Protected Setup brute-force utility

evilsocket/legba

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

knavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

quentinhardy/odat

Penetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…

cobbr/sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

adrmxr/kithack

Hacking tools pack & backdoors generator.

xaitax/chrome-app-bound-encryption-decryption

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

spyboy-productions/camxploit

Security reconnaissance and assessment tool for identifying potentially exposed IP cameras by analyzing open ports, service configurations, and…

silentghostx/ht-wps-breaker

HT-WPS Breaker (High Touch WPS Breaker)

darkcodersc/win-brute-logon

Crack any Microsoft Windows users password without any privilege (Guest account included)

aniqfakhrul/powerview.py

Powerview on steroids

jasonxtn/kraken

All-in-One Toolkit for BruteForce Attacks

s0ld13rr/pentestcode

Autonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…

galkan/crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by…

dafthack/msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a…