Tools

assurancemaladiesec/ad-description-password-finder

Retrieve AD accounts description and search for password in it

garrettfoster13/pre2k

A tool to query for the existence of pre-windows 2000 computer objects.

trustedsec/cs-remote-ops-bof

Remote operations commands implemented using Beacon Object Files

almandin/ntdsdotsqlite

A small utility to translate NTDS.dit files to SQLite format.

leftp/dpapisnoop

A C# tool to output crackable DPAPI hashes from user MasterKeys

leftp/backupcreds

A C# implementation of dumping credentials from Windows Credential Manager

mzhmo/leakedwallpaper

Leak of any user's NetNTLM hash. Fixed in KB5040434

rweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

offensive-panda/lsassreflectdumping

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…

evilmog/ntlmv1-multi

NTLMv1 Multitool

adarshthakur14777-cyber/cve-2026-60137

wpsqli full SQLi extractor + dumper for CVE-2026-60137

cerberusmrxi/cve-2025-48932-invision-community-sqli-exploit

CVE-2025-48932 - Unauthenticated SQL injection exploit for Invision Community ≤ 4.7.20. Fully automated exploitation with database enumeration,…

paradoxis/flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

randomrobbiebf/grafana-bruteforce

Grafana Bruteforce tool

randomrobbiebf/postgres-bruteforcer

This tool takes a list of default creds and tests it against a postgresql server and logs any that work and the databases it has access to.

randomrobbiebf/wordpress-bf

Brute Force Wordpress Blogs.