
mongoaudit
🔥 A powerful MongoDB auditing and pentesting tool 🔥

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

A fast enumeration tool for Windows Active Directory Pentesting written in Go

Advanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…

Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX +…

CVE-2026-27912 (ResetNightmare) — Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC

CVE-2020-27838 - KeyCloak - Information Exposure

Apache Superset - Authentication Bypass

CVE-2026-8181: Burst Statistics Auth Bypass → REST API takeover & admin creation. Python 2.7. Educational use only.

Oracle E-Business Suite <=12.2 - Authentication Bypass

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

A free, secure and open source app for Android to manage your 2-step verification tokens.

CVE-2025-5154: Proof-of-concept for unencrypted local storage of authentication tokens, PII, and KYC data in the PhonePe Android app, enabling…

The ultimate WinRM shell for hacking/pentesting

Dominate Active Directory with PowerShell.

Python3 tool to perform password spraying using RDP