LogHound
rnb-team/loghoundPost-Exploitation EVTX Analyzer for BloodHound Mapping
authenticationdigital-forensicsforensics+6
rnb-team/loghoundPost-Exploitation EVTX Analyzer for BloodHound Mapping
commando-x/vuln-bank-mobileA deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in…
parameciumzhang/tell-me-rootBatch scanner for CVE-2026-24061 Telnet authentication bypass, with port liveness checks and automated payload attempts for authorized penetration…
cesarbtakeda/cve-2025-31161Exploit for CVE-2025-31161 with Python and C implementations, allowing authorized penetration testers to manipulate user accounts on target hosts.
shoucheng3/apache__jspwiki_cve-2019-0225_2-11-0-m2Exploit module for Apache JSPWiki CVE-2019-0225, enabling remote code execution via crafted requests. Designed for penetration testing and…
redfox-security/digisol-dg-gr1321-s-password-policy-bypass-cve-2024-2257Exploit for CVE-2024-2257: bypasses password policy on Digisol DG-GR1321 routers via crafted HTTP request, enabling unauthorized access for…
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
dirkjanm/mitm6Exploits Windows IPv6 default configuration to spoof DNS via DHCPv6, redirecting victim traffic for credential relaying and man-in-the-middle attacks…
scorpioneslabs/mssqlpwnerAdvanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…
cube0x0/sharpmapexecWindows-native penetration testing swiss army knife for lateral movement, credential access, data exfiltration, and vulnerability scanning across…
syss-research/wirebugWireBug is a toolset for Voice-over-IP penetration testing
shac0x/wonkaWonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but for security…
logisek/evilmistEvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…
ajnik/joomla-bruteforcePython script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.
xsanflip/poc-cpanel-cve-2026-41940Multi-threaded security auditing tool that detects CVE-2026-41940, an authentication bypass in cPanel/WHM, using CRLF injection and dynamic port…
mostafasoliman/oracle-oam-padding-oracle-cve-2018-2879-exploitPadding oracle exploit for Oracle Access Manager (CVE-2018-2879) enabling decryption of encrypted cookies and encryption of arbitrary plaintext for…
zux0x3a/adflyactive directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about…
e-m-e-k-a/moniker-link-lab-setupPenetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking,…