Tools

n00py/getfgpp

Get Fine Grained Password Policy

quahac/azure-ad-password-checker

Azure AD Password Checker

nccgroup/cisco-snmp-enumeration

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

synacktiv/eipp

Entra ID Password Protection Banned Password Lists

jas502n/database-spring-enc

sprint encode (plan text) get enc password

owasp/open-sammy

Web-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.

secware-ru/cve-2022-43959

Bitrix Vulnerability CVE-2022-43959

spring-io/cve-2022-22976-bcrypt-skips-salt

CLI tool to detect and update BCrypt password hashes with vulnerable work factor 31, integrating with Spring Security databases for CVE-2022-xxxx…

areebashoaib42/keepass-cve-2023-32784-exploitation-and-defense

Exploitation and defense-in-depth mitigation strategies for the KeePass memory leakage vulnerability (CVE-2023-32784).

0xblackash/cve-2026-45585

CVE-2026-45585

secforce/snmp-brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

ncsa/ssh-auditor

The best way to scan for weak ssh passwords on your network

lithnet/ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules

skotizo/mirai-spray

Mirai Loader Scanner

rm1984/imaplogintester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…

laokoon-security/cortex-xdr-config-extractor

Parses Cortex XDR agent database lock files to extract agent settings, uninstall password hash/salt, and security exclusions for red team assessments…

k4yt3x/defense-matrix

Express security essentials deployment for Linux Servers