Tools

desireeontrial76/yellowkey-bitlocker

Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.

wkovacs64/pwned

CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment of compromised…

hashcat/hashcat

World's fastest and most advanced password recovery utility

danielmiessler/seclists

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

insider77circle/ai-password-testing-agent

An intelligent agent for testing password strength, identifying vulnerabilities, and exploring patterns in password creation.

hahwul/jwt-hack

JSON Web Token Hack Toolkit

zerkereod/krakenhashes

Distributed password cracking platform coordinating GPU/CPU agents via Hashcat for high-speed hash recovery, with real-time job management,…

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

frankwxu/digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

pentoo/pentoo-overlay

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

hacktricks-wiki/hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

pennyw0rth/netexec

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

zerbea/hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

nikaiw/vmkatz

Extract Windows credentials directly from VM memory snapshots and virtual disks

fortra/impacket

Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…

nu11secur1ty/kousei

Python/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…

lefayjey/linwinpwn

Bash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…

openwall/john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems,…