
kcmdump
Dump Kerberos tickets from the KCM database of SSSD

Dump Kerberos tickets from the KCM database of SSSD

Curated wordlists for brute-forcing SSH private key filenames, aiding penetration testers in locating keys via LFI or enumeration during lateral…

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

SSH man-in-the-middle tool

Modified dropbear server which acts as a client and allows authless login

Proof of conept to exploit vulnerable proxycommand configurations on ssh clients (CVE-2023-51385)

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

The SSH Multiplex Backdoor Tool

Exploit for CVE-2014-4210 targeting WebLogic deserialization, with post-exploitation features including ransomware deployment, C2 integration, and…

A compact guide to network pivoting for penetration testings / CTF challenges.

A WiFi Pineapple infecting worm.

SSH spreading made easy for red teams in a hurry

Multi-hop proxy tool for pentesters enabling traffic routing through multiple nodes, SOCKS5/SSH tunneling, port forwarding, remote shell, and…

🔒 Modern C2 Platform with Cloudflare Tunnel Integration | WinRM & SSH Remote Management | Real-time Terminal & Remote Desktop | Built with FastAPI &…

Chisel new generation, written in rust. SSH under WSS with some customization.

Single-script exploit for CVE-2026-44881 that chains .git credential leakage, Portainer Git-symlink injection, arbitrary host file read, and SSH…

Pentest completo sobre Metasploitable: recon con nmap, explotación con Metasploit (CVE-2007-2447), extracción y cracking de credenciales,…