Tools

cowrie/cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

maurosoria/dirsearch

Web path scanner

rustcrypto/hashes

Collection of cryptographic hash functions written in pure Rust

praetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

zerbea/hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

facebook/threatexchange

Trust & Safety tools for working together to fight digital harms.

nu11secur1ty/kousei

Python/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…

noraj/haiti

🔑 Hash type identifier (CLI & lib)

grepstrength/cve-2026-92680

Proof-of-concept decrypting Araxis Merge's DPAPI-protected server credentials (CVE-2026-92680), demonstrating insufficiently protected credential…

neo23x0/munin

Online hash checker for Virustotal and other services

trustedsec/hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

mishakorzik/allhackingtools

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

mycode83/godirb

Fast and easy-to-use directory brute-forcer written in Go.

pervinzahidli/cve-2026-77771

Advisory for CVE-2026-77771, a 2FA bypass in the miniOrange WordPress plugin via session-scoped OTP lockout, with impact analysis and remediation…

jm00nj/sha256-cdp

GPU-accelerated SHA-256 rainbow table implementation based on CDP (Cyclic Digit-sum Projection) structural analysis. AMD RX 9070 XT, OpenCL + Vulkan.

oalabs/hashdb

Assortment of hashing algorithms used in malware

zhairiazzeddine/exploit-cve-2023-6063-poc-vuln

Python PoC for CVE-2023-6063, an unauthenticated time-based blind SQL injection in WP Fastest Cache <=1.2.2, extracting WordPress password hashes and…