boon-rekcah/cms-made-simple-2.2.9-cve-2019-9053Python 3 exploit for CVE-2019-9053, an unauthenticated SQL injection in CMS Made Simple 2.2.9, that extracts admin credentials and optionally cracks…
kayes817/cve-2022-1257Proof-of-concept exploit for CVE-2022-1257 that extracts and decrypts stored credentials from the McAfee Agent database (ma.db) using PowerShell.
ilk-toolkit/ilk-toolkitA ToolKit that automatically installs & configures all the Tools needed to turn your Daily Driver Linux Distro into a Pentesting Machine
am0nt31r0/password-analysisScript in Go that analyzes a list of passwords based on in its entropy and weak passwords from a dictionary. Useful for penetration tests and…
hf3cyber/cms-made-simple-2.2.9-unauthenticated-sql-injection-exploit-cve-2019-9053-Time-based blind SQL injection exploit for CMS Made Simple <= 2.2.9 (CVE-2019-9053) that extracts username, email, password hash, and salt, with…
mrtuxx/socialpwnedSocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…
screetsec/brutesploitBruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a…
zzzteph/krakerKraker is a distributed password brute-force system that focused on easy use.
jxlil/pwndbTor-based leaked credential search tool that queries the pwndb2 hidden service to find emails and passwords exposed in data breaches, with wildcard…
optiv/talonA password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
alone/mutatorGenerate mutations over a wordlist
foospidy/payloadsGit All the Payloads! A collection of web attack payloads.
lefayjey/linwinpwnBash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…
danmcinerney/icebreakerGets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
darkcodersc/win-brute-logonCrack any Microsoft Windows users password without any privilege (Guest account included)
clr2of8/dpatDomain Password Audit Tool for Pentesters
garagehq/nightcrawlerLocal AI powered red teamer on a phone
