#1Tools for recovering passwords from hashes, encrypted sources, or through brute-force/dictionary attacks.
Kitploit recommended
shauryarathore357-hub/thm-moniker-link-cve-2024-21413-writeupTryHackMe room walkthrough of CVE-2024-21413, covering the Outlook Moniker Link Protected View bypass, NTLM hash leaking, and credential capture with…
pugazhendii22/keepass-exfil-forensicsNetwork forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…
r3fr4kt/devvortexHackTheBox Devvortex walkthrough covering subdomain fuzzing, Joomla API enumeration, template-based web shell, bcrypt hash cracking, and Apport-CLI…
incommatose/cve-2023-6063-pocA Proof on Concept for CVE-2023-6063, a time-based blind SQL injection vulnerability in WP Fastest Cache ≤1.2.2.
al1ex/gpocrackActive Directory Group Policy Preferences cpassword cracker/decrypter.
0xcccc666/cve-2020-1472_tool-collectioncve-2020-1472_Tool collection
stiffies/airscoutA nice tool that automates network hash capturing and has a nice GUI. Read README.md for more information and NEVER use this without explicit…
focused.hunts/the.vaultPrivacy-first password manager with local storage and bring-your-own-cloud sync across Google Drive, Microsoft OneDrive, and Dropbox. Your…
x3rx3ssec/cve-2022-0169CVE-2022-0169 - WordPress Photo Gallery SQLi PoC
azrenom/cms-made-simple-2.2.9-cve-2019-9053Exploit for CVE-2019-9053, an unauthenticated SQL injection in CMS Made Simple 2.2.9, that extracts admin credentials and optionally cracks the…
0xsazzad/grafana-cve-2021-43798Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with…
xfox64x/cve-2016-5639Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules
untouchable17/cve-2025-24054Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure
rayferrufino/make-and-breakBuilt a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux machine
folks-iwd/cve-2025-68999-pocPoC exploit for CVE-2025-68999 - Second-Order SQL Injection in Happy Addons for Elementor <= 3.20.4
ayham-megdadi/zero-day-legacyA vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS,…
synacktiv/lehack-2026-challengeSources of Synacktiv's challenge for leHack 2026
brodsbytes/cyberpupA free, open-source cybersecurity app for non techy people.
