Tools

r4ulcl/wifi_db

Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…

edoardottt/longtongue

Generate customized Password/Passphrase wordlist based on target information

stiffies/airscout

A nice tool that automates network hash capturing and has a nice GUI. Read README.md for more information and NEVER use this without explicit…

abdelrahman0sayed/cve-2025-24071

This is a python PoC scripts for CVE-2025-24071 which is a vulnerability in Windows File Explorer that allows unauthorized access to sensitive…

mrtuxx/socialpwned

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…

0x09al/iis-raid

A native backdoor module for Microsoft IIS (Internet Information Services)

ctxis/crackerjack

CrackerJack / Hashcat Web Interface / Context Information Security

duy-31/cve-2024-21413

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

r00tb1t/cve-2024-21413-poc

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - CVE-2024-21413 POC

themalwareguardian/cve-2018-14847

Analysis and PoC for CVE-2018-14847, MikroTik RouterOS Winbox information disclosure vulnerability allowing unauthenticated read access to the…

pelock/total-commander-ftp-password-recovery-tool-python

Total Commander FTP Password Recovery Tool for Python allows you to decrypt the FTP account password information for all Total Commander versions…

noxurge/cve-2025-65900

DifuseHQ Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient…

ishaklaz/hash-eye

**HashEye** is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats,…

pointedsec/cve-2024-44541

This repository details a SQL Injection vulnerability in Inventio Lite v4's, including exploitation steps and a Python script to automate the attack.…

ffffffff0x/digital-privacy

Information Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

woj-ciech/pepe

Collect information about email addresses from Pastebin

ritvikb99/dark-fantasy-hack-tool

DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of…

peewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager