#1Tools for recovering passwords from hashes, encrypted sources, or through brute-force/dictionary attacks.
Kitploit recommended
st1lly/dc-sonarAnalyzing AD domains for security risks related to user accounts
kimci86/bkcrackCrack legacy zip encryption with Biham and Kocher's known plaintext attack.
laokoon-security/cortex-xdr-config-extractorParses Cortex XDR agent database lock files to extract agent settings, uninstall password hash/salt, and security exclusions for red team assessments…
r4ulcl/wifi_dbScript to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…
ciscocxsecurity/creddump7Offline Windows credential extractor that dumps LM/NT hashes, cached domain passwords, and LSA secrets from registry hives without relying on system…
andromeda1957/linpwnInteractive post-exploitation tool for Linux privilege escalation, enumeration, file exfiltration, and credential harvesting via reverse shell.
thatcherclough/betterbackdoorA backdoor with a multitude of features.
joaovdonaton/hashcrackerPython-based hash cracker supporting SHA512, SHA256, SHA1, MD5, and more. Features auto-detection of hash type, bruteforce, and password list modes…
aaaguirrep/offensive-dockerOffensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
quantumcore/paradoxiaratParadoxiaRat : Native Windows Remote access Tool.
entry33/aes256_passwd_storeAES-256 encrypted password manager with scrypt/SHA256 key derivation, supporting create, edit, query, and master password change operations with…
n0kovo/danish_phone_wordlist_generatorGenerate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets.
n0kovo/danish-wordlistsCollection of danish base wordlists for cracking danish passwords (Hashcat, John the Ripper etc.)
stealthsploit/oneruletorulethemstillA revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
joelgmsec/leaksearchSearches and parses plaintext passwords from public breach databases (ProxyNova COMB) by keyword (user/domain/password), with proxy support and…
fundacio-i2cat/infohoundInfoHound is an OSINT to extract a large amount of data given a web domain name.
hackerinthehouse-official/passmuteCLI password mutation tool applying transformation rules (leet, reverse, case-swap) to generate password variants for security testing and…
tyki6/myjwtA cli for cracking, testing vulnerabilities on Json Web Token(JWT)
