Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
Repository Index
71,372 visible repositories in the index
121–144 of 271 · Most stars
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
- wlan
- wpa
- wpa2
- raspberry-pi
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
- authentication
- rest
- social-login
- django
netshell features all in version 2 powershell
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
- android
- frida
- certificate
- interception
Automatically brute force all services running on a target.
- brute-force
- bruteforce
- bruteforcing
- bruteforce-attacks
APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
- burp-extensions
- apisec
- api-security
- api-sec
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your dedicated or cloud server protected. Upgrade to IPBan Pro today and get a discount. Learn more at ↓
Small tool to capture packets from wlan devices.
- pcap
- wifi-security
- raspberry-pi
- pcapng
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
- blueteam
- active-directory
- activedirectory
- acl
Super timeline all the things
ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.
- phone-number
- trio
- snapchat
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
- poshc2
- c2
- redteam
- nettitude
Tool to scan for secret files on HTTP servers
- security
- websecurity
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library