Password Attacks

infosecmatter/minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

zzzteph/weakpass

Browser-based password cracking toolkit with hash lookup, wordlist generation, rule-based attack simulation, and client-side hash cracking for…

ralfhacker/kerbeus-bof

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

lkarlslund/ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

lightos/credmap

The Credential Mapper

shutdownrepo/targetedkerberoast

Python script for Kerberoasting with targeted ACL abuse: sets temporary SPNs on users without them, extracts Kerberos hashes, then removes the SPN.…

chiasmod0n/chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves…

vdohney/keepass-password-dumper

Original PoC for CVE-2023-32784

tobor88/powershell-red-team

Collection of PowerShell functions a Red Teamer may use in an engagement

coalfire-research/slackor

A Golang implant that uses Slack as a command and control server

entysec/rombuster

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

strozfriedberg/evilabigail

Automated Linux evil maid attack

hameda2/zydra

Multi-threaded password recovery tool for RAR, ZIP, PDF, and Linux shadow files using dictionary and brute-force methods with configurable character…

tw1sm/ritm

Roast in the Middle

adityatelange/evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

garrettfoster13/pre2k

A tool to query for the existence of pre-windows 2000 computer objects.