bastillion-io/bastillionBastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
hashcat/hashcatWorld's fastest and most advanced password recovery utility
ibnaleem/rulesCurated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…
vanlam2001/csrf_casdoorProof-of-concept CSRF exploit for Casdoor's `/api/set-password` endpoint (CVE-2023-34927), enabling unauthorized password changes via cross-site POST…
nu11secur1ty/kouseiPython/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…
bandrel/hashcatrosettaHashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
r3vpwnx/cve-2025-58434Exploit chain for Flowise 3.0.5: unauthenticated account takeover via password-reset token disclosure (CVE-2025-58434) chained to CustomMCP…
n0kovo/awesome-password-crackingA curated list of awesome tools, research, papers and other projects related to password cracking and password security.
feartheploto/gitlab-cve-2023-7028Mock vulnerable GitLab instance reproducing CVE-2023-7028 password reset hijack. Demonstrates array-based email parameter exploitation and account…
focused.hunts/the.vaultPrivacy-first password manager with local storage and bring-your-own-cloud sync across Google Drive, Microsoft OneDrive, and Dropbox. Your…
eqstlab/cve-2026-72898Unauthenticated blind SQL injection exploit for Metabase, exploiting a raw SQL injection in the password reset endpoint to extract data via…
boreas37/cve-2026-43914-pocPoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python.
necr00/credential-huntingCredsHunter - Credential Hunting scripts for Windows and Linux OS
s3cur3th1ssh1t/credsSome usefull Scripts and Executables for Pentest & Forensics
zzzteph/weakpassBrowser-based password cracking toolkit with hash lookup, wordlist generation, rule-based attack simulation, and client-side hash cracking for…
mebus/cuppInteractive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…
jenderal92/prepos-login-checkerPrepostseo Login Checker
