Tools

x90skysn3k/brutespray

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+…

evilsocket/legba

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

alihzsec/cve-2024-28000

Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a…

vanhauser-thc/thc-hydra

hydra

noptrix/lulzbuster

A multithreaded, very fast and smart HTTP(S) directory and file bruteforcer written in C on top of libcurl

emrekybs/pikachu-smtp

Simple python script for brute force attack to smtp users

d3mondev/puredns

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

kavishgr/xmlrpc-bruteforcer

An XMLRPC brute forcer targeting Wordpress written in Python 3. (DISCONTINUED)

theopaid/cve-2023-27163-request-baskets-local-ports-bruteforcer

PoC and internal port brute-forcer for CVE-2023-27163

lanjelot/patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

realbatuhan/jwt-bruteforcer

Jwt Bruteforcer with CVE-2018-1000531 Test

lkarlslund/ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

h-rat/evilcrowrf_custom_firmware_cc1101_flipperzero

This firmware is an alternative to the EvilCrowRF default firmware. Module: CC1101 - Compatible Flipper Zero file.

syedshehzadgillani/bruteconda

A Directory Bruteforcing Tool That Makes Your Life Easier!

s0md3v/blazy

Intelligent login bruteforcer.

pwnesia/ssb

Secure Shell Bruteforcer — A faster & simpler way to bruteforce SSH server

koutto/web-brutator

Fast Modular Web Interfaces Bruteforcer