#1Tools for recovering passwords from hashes, encrypted sources, or through brute-force/dictionary attacks.
Kitploit recommended

A command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API.
Python exploit for CVE-2026-89012, a Dolibarr SQL filter denylist bypass that uses a blind-boolean oracle to extract password hashes and API keys via…

Updated version of this weak password encryption script

Hidden AP with Deterministic Credentials

PDF Crack is a GUI tool used for cracking pdf passwords. includes 3 cracking options

SNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…

Study and exploit the vulnerability CVE-2022-21661 that allows SQL Injections through plugins POST requests to WordPress versions below 5.8.3.

Penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking,…

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

A lightweight CLI tool to interactively search and access your KeePassXC database entries using fzf. Fast, secure, and terminal-centric.

Remmina Password Decoder and scanner

-> Password List Generator for Brute Force.

Multi-module offensive security toolkit for SOCKS5 proxy chaining, port scanning, DNS enumeration, hash cracking, reverse shell generation,…

keys for ic

Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)

This project is part of a school work focusing on network security.

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…

CVE-2020-1472复现流程