bloodyAD
cravaterouge/bloodyadLDAP-based Active Directory privilege escalation framework supporting pass-the-hash, pass-the-ticket, and certificate authentication for automated…
authenticationexploitationpenetration-testing+1
2.3k
cravaterouge/bloodyadLDAP-based Active Directory privilege escalation framework supporting pass-the-hash, pass-the-ticket, and certificate authentication for automated…
login-securite/donpapiAutomated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…
ricardojoserf/autopttAutomated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust, Golang, Nim…
jnqpblc/sharpsprayC# tool for automated password spraying attacks against Active Directory users via LDAP, with configurable delays and password lists, designed for…
oldboy21/ldap-password-hunterAutomated tool that hunts for world-readable passwords in Active Directory LDAP databases by leveraging Kerberos authentication and ldapsearch to…
secnigma/cve-2021-3560-polkit-privilege-esclationAutomated Bash PoC for CVE-2021-3560 polkit privilege escalation. Exploits dbus timing attack to inject a sudo user and gain root shell on vulnerable…
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.
jackofmosttrades/blueboxAutomated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049
portswigger/atorBurp Suite plugin for automated token extraction and replacement in HTTP requests, supporting JSON, XML, cookies, and URL parameters to streamline…
parameciumzhang/tell-me-rootBatch scanner for CVE-2026-24061 Telnet authentication bypass, with port liveness checks and automated payload attempts for authorized penetration…
imancybersecurity/cve-2023-27350-pocProof-of-concept exploit for CVE-2023-27350 targeting authentication bypass in PaperCut MF/NG print management software. Includes Shodan dorks for…
mandiant/vcsa-hardening-toolAutomated Zero Trust hardening and forensic auditing for VMware vCenter Server Appliance (VCSA)
jenderal92/cve-2026-41940Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded…
1beelze/cve-2026-5118Automated exploit and mass scanner for CVE-2026-5118, an unauthenticated privilege escalation in WordPress Divi Form Builder <=5.1.2, enabling admin…
grayxploit/cve-2026-0257Automated vulnerability scanner for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass) with TLS certificate enumeration, authentication…
lukasz-rybak/cve-2025-66204Proof-of-concept for CVE-2025-66204: brute-force protection bypass in WBCE CMS via spoofed X-Forwarded-For header, with automated Python exploit…
kaleth4/cve-2026-21858Automated exploit chain for n8n achieving unauthenticated arbitrary file read, admin token forgery, and sandbox bypass to remote code execution via…
nefhara/cve-2022-26923Automated CVE-2022-26923 Exploitation (Certifried)