SecLists
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…
curated-resourcesfuzzingpassword-cracking+3
73.0k
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…
hashcat/hashcatWorld's fastest and most advanced password recovery utility
necr00/credential-huntingCredsHunter - Credential Hunting scripts for Windows and Linux OS
s3cur3th1ssh1t/credsSome usefull Scripts and Executables for Pentest & Forensics
zzzteph/weakpassBrowser-based password cracking toolkit with hash lookup, wordlist generation, rule-based attack simulation, and client-side hash cracking for…
n0kovo/awesome-password-crackingA curated list of awesome tools, research, papers and other projects related to password cracking and password security.
mebus/cuppInteractive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
focused.hunts/the.vaultPrivacy-first password manager with local storage and bring-your-own-cloud sync across Google Drive, Microsoft OneDrive, and Dropbox. Your…
ibnaleem/rulesCurated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…
jenderal92/prepos-login-checkerPrepostseo Login Checker
blacklanternsecurity/trevorsprayModular password sprayer with SSH proxy rotation, MFA bypass, and domain recon. Supports O365, ADFS, OWA, Okta, Cisco VPN. Automates credential…
groppoxx/cve-2025-25198-pocPoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.
mananispiwpiw/cve-2025-58434-pocCVE-2025-58434 Proof of Concept
elizeuopain/cve-2019-9053-cms-made-simple-2.2.10---sql-injection-exploit
0xmrma/cve-2026-34828listmonk’s Session Persistence After Password Reset and Password Change
0xblarky/nextpassA tool which can be used to generate password list or dictionary from the details of the target
