Tools

xfreed0m/adfspray

Python3 tool to perform password spraying against Microsoft Online service using various methods

0xzdh/o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

antoniococo/remotepotato0

Windows Privilege Escalation from User to Domain Admin.

ghostpack/rubeus

Trying to tame the three-headed dog.

rishuranjanofficial/jwtweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

checkymander/sharp-smbexec

C# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…

jnqpblc/sharpspray

C# tool for automated password spraying attacks against Active Directory users via LDAP, with configurable delays and password lists, designed for…

dirkjanm/mitm6

Exploits Windows IPv6 default configuration to spoof DNS via DHCPv6, redirecting victim traffic for credential relaying and man-in-the-middle attacks…

synwall/synwall

Linux kernel module implementing a zero-configuration, OTP-based firewall for IoT devices. Transparently authenticates network traffic using a…

skelsec/msldap

Python library for auditing Microsoft Active Directory via LDAP, supporting NTLM, Kerberos, SSPI authentication, channel binding, encryption, and…

ricardojoserf/adfsbrute

A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

sinologicnet/sipcheck

Monitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…

secdev02/easytokens

Kali365 - EvilTokens Replica

devnw/zig/hsm

Zig Hardware Security Module library for PIV, CAC, and YubiKey tokens via PC/SC. Supports certificates, PIN management, signing, and decryption.

kit-lang/packages/kit-oauth

OAuth 2.0 client library for Kit applications supporting authorization code, PKCE, client credentials, and refresh token flows with built-in provider…

roxanne_ardary/publicsafe

Client-side browser extension providing AES-256-GCM encryption, X25519 key exchange, Ed25519 signatures, and zero-knowledge key management for secure…

kit-lang/packages/kit-jwt

JSON Web Token (JWT) encoding and decoding for Kit

libssh/libssh-mirror

C library implementing the SSH protocol for secure remote access, authentication, and encrypted communication. Includes fuzzing support via OSS-Fuzz…