
hcxtools
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment of compromised…

🦄 A curated list of privacy & security-focused software and services

Crawler (Bot) searching for credential leaks on paste sites.

Wi-Fi Security Audit & WPA2 Password Testing Guide 2026: Master Monitor Mode

tool for generating wordlists or extending an existing one using mutations.

Rust-based GUI tool for WiFi security auditing: captures traffic, discovers clients, performs deauthentication attacks, captures handshakes, and…

Correlates NTLM hashes, BloodHound data, and cracked passwords for Active Directory penetration testing. Imports NTDS.dit, syncs to Neo4j, analyzes…

Audit Wi-Fi security on Linux with monitor mode, handshake capture, and offline WPA/WPA2 password testing in one guided GUI

Complete suite for WiFi network security auditing, including packet capture, injection attacks, deauthentication, fake AP creation, and WEP/WPA PSK…

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

FortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-scrambled…

Penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking,…

Bash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…

Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…