#1Password cracking, brute-force, wordlists, and credential testing tools.
Kitploit recommended

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a…

Python and Powershell internal penetration testing framework

WPScan rewritten in Python + some WPSeku ideas

Modified version of the passing-the-hash tool collection made to work straight out of the box

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and…

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been…

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

Modules used by the Havoc Framework

Password attacks and MFA validation against various endpoints in Azure and Office 365

NebulousAD automated credential auditing tool.

automated password spraying tool

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.