Tools

quahac/azure-ad-password-checker

Azure AD Password Checker

ibnaleem/rules

Curated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…

joshuamart/pwnedpasswordschecker

Search (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)

frizb/wordlistgen

Super Simple Python Word List Generator for Fuzzing and Brute Forcing in Python

pyn3rd/cve-2019-2618

Weblogic Unrestricted File Upload

joaovdonaton/hashcracker

Python-based hash cracker supporting SHA512, SHA256, SHA1, MD5, and more. Features auto-detection of hash type, bruteforce, and password list modes…

rek7/descrypt-cpu-collision-cracker

DEScrypt CPU Collision Cracker

erpscanteam/cve-2018-2380

PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM

n0kovo/danish-wordlists

Collection of danish base wordlists for cracking danish passwords (Hashcat, John the Ripper etc.)

rek7/ddoor

DDoor - cross platform backdoor using dns txt records

groppoxx/cve-2025-25198-poc

PoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.

r3dxpl0it/secrep

SecRep Is a Repository That Contain Useful Intrusion, Penetration and Hacking Archive Including Tools List, Cheetsheet and Payloads

e-renna/cve-2019-9053

CVE-2019-9053 Exploit for Python 3

alexkaos32/hunterscrape

Python script that uses the hunter.io API to scrape email addresses from a target domain, generating a target list for password spraying attacks.

0xblarky/nextpass

A tool which can be used to generate password list or dictionary from the details of the target

tismayil/password-generator

-> Password List Generator for Brute Force.

dejanlevaja/wpbf

WPBF - a multithreaded WP brute forcer