Tools

dhammon/hoteldruid-cve-2021-42949

Exploit for CVE-2021-42949 in HotelDruid v3.0.3, demonstrating predictable session token generation and authentication bypass via brute force.

sabir555s/insta_cyber

INSTA_CYBER is a Python-powered ethical hacking tool designed for educational and research purposes. Built by Muhammad Sabir Ali (INNO_CYBER), this…

yanncam/shucknt

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based…

nccgroup/jmxbf

A brute force program to test weak accounts configured to access a JMX Registry

jas502n/jwt_brute

JWT_Brute

dejanlevaja/wpbf

WPBF - a multithreaded WP brute forcer

emerinohdz/facebrute

Facebook brute forcer script

lanjelot/patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

trustedsec/ridenum

Rid_enum is a null session RID cycle attack for brute forcing domain controllers.

knavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

im10n/cve-2024-3183-poc

POC for CVE-2024-3183 (FreeIPA Rosting)

mavlevin/d-link-cve-2021-27342-exploit

Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)

noxurge/cve-2025-65900

DifuseHQ Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient…

pingport80/cve-2019-17240

This is the exploit of CVE-2019-17240.

jet-pentest/cve-2020-27747

Possible Account Takeover | Brute Force Ability

gregscharf/cve-2022-31007-python-poc

elabFTW < 4.1.0 - account lockout bypass and login brute force

brunosergi/bloodit

Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240

inflixim4be/cve-2020-15367

Exploit for CVE-2020-15367: brute-force authentication attack against Venki Supravizio BPM 10.1.2 login page, leveraging user enumeration to gain…