
impacket
Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…

Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…

Local-first password manager with direct device-to-device sync

Collaborative Passwords Manager

CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment of compromised…

🦄 A curated list of privacy & security-focused software and services

Crawler (Bot) searching for credential leaks on paste sites.

Active Directory password filter featuring breached password checking and custom complexity rules

Correlates NTLM hashes, BloodHound data, and cracked passwords for Active Directory penetration testing. Imports NTDS.dit, syncs to Neo4j, analyzes…

Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving)


A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

A command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API.

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…

Python/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…

Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax

Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI +…

bash CLI trainer — 30 levels from ls to privilege escalation