
CredMaster
Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

IP spoofing and SNMP community string brute-forcing tool to bypass ACLs on Cisco IOS devices, exfiltrate configuration files via TFTP.

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

Exploit tool for CVE-2017-8225 targeting IP cameras. Scans for vulnerable devices and performs credential brute-forcing to gain unauthorized access.

Modular Python3 attack framework for automating exploitation of SIEM platforms (Splunk, Graylog, OSSIM, QRadar, McAfee) via credential theft, payload…

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

Exploit tool for CVE-2018-9995 that extracts credentials from vulnerable DVR devices via Google dorking and direct IP access.

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, recovering user credentials from weakly encrypted…

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.

Leverage WindowsApp createdump tool to obtain an lsass dump

Modified version of the passing-the-hash tool collection made to work straight out of the box

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

A C# implementation of dumping credentials from Windows Credential Manager

Hook PasswordChangeNotify

A PoC exploit for CVE-2017-8225 - GoAhead System.ini Leak

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Security reconnaissance and assessment tool for identifying potentially exposed IP cameras by analyzing open ports, service configurations, and…

A tool for retrieving login credentials from Netwave IP cameras using a memory dump vulnerability (CVE-2018-17240)