
Spray365
Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…

CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit…

Password spraying and bruteforcing tool for Active Directory Domain Services

Username enumeration and password spraying tool aimed at Microsoft O365.

A Network Enumeration and Attack Toolset for Windows Active Directory Environments.

OSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…

A collection of custom security tools for quick needs.

Collection of PowerShell functions a Red Teamer may use in an engagement

Wordlists handcrafted (and automated) with ♥

Relational database brute force and post exploitation tool for MySQL and MSSQL

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.

The Offensive Manual Web Application Penetration Testing Framework.

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active…

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

Pure-Python toolkit for Kerberos-based attacks including ASREProast, SPNroast, and LDAP enumeration to identify and exploit vulnerable Active…

Curated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…

Finding all things on-prem Microsoft for password spraying and enumeration.