Tools

ignis-sec/pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

quahac/azure-ad-password-checker

Azure AD Password Checker

s3cur3th1ssh1t/creds

Some usefull Scripts and Executables for Pentest & Forensics

fin3ss3g0d/secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

ibnaleem/rules

Curated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…

wavvs/nanorobeus

COFF file (BOF) for managing Kerberos tickets.

schierlm/javapayload

JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not…

randomrobbiebf/grafana-bruteforce

Grafana Bruteforce tool

randomrobbiebf/postgres-bruteforcer

This tool takes a list of default creds and tests it against a postgresql server and logs any that work and the databases it has access to.

mirchr/security-research

Security Research

spaze/hashes

Magic hashes – PHP hash "collisions"

synacktiv/rulesfinder

Machine-learn password mangling rules

jenderal92/prepos-login-checker

Prepostseo Login Checker

0xmrma/cve-2026-34828

listmonk’s Session Persistence After Password Reset and Password Change

dsahen/cve-2023-22515-exp

cve-2023-22515的python利用脚本

dejanlevaja/wpbf

WPBF - a multithreaded WP brute forcer

emerinohdz/facebrute

Facebook brute forcer script