Tools

loseys/oblivion

Data leak checker & OSINT Tool

shinthink/cve-2025-32044

Moodle 4.5.0-4.5.2 Unauthenticated REST API User Data Exposure via Stack Trace Args Leak | CVSS 7.5

ricardojoserf/wifi-pentesting-guide

WiFi Penetration Testing Guide

saladandonionrings/cve-2019-6693

An authorized remote user with access or knowledge of the standard encryption key can gain access and decrypt the FortiOS backup files and all…

byrek/cve-2019-9053

Improved code of Daniele Scanu SQL Injection exploit

nuid/nebulousad

NebulousAD automated credential auditing tool.

x3rx3ssec/cve-2025-2011

Exploit for CVE-2025-2011

sinfocol/vboxdie-cracker

VirtualBox Disk Image Encryption password cracker

okymi-x/cve-2021-43798

Python toolkit for authorized testing of CVE-2021-43798 Grafana path traversal, with arbitrary file read PoC, secret decryption, and user hash export…

mebus/cupp

Interactive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…

moscowchill/lstar-en

LSTAR - CobaltStrike Translated to EN

strikoder-premium/grafana-password-decryptor

Python toolkit for decrypting AES-256 and cracking PBKDF2 passwords from Grafana databases usually paired with (CVE-2021-43798)

securenetexpert/cve-2024-21413-moniker-link-writeup

Technical write-up on CVE-2024-21413 (Moniker Link vulnerability)

d4vinci/elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

sevagas/swap_digger

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…

maikneysm/autopwn-titanic.htb

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

nccgroup/nlahoney

NLA Honeypot Associated Research

leftp/dpapisnoop

A C# tool to output crackable DPAPI hashes from user MasterKeys