Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Repository Index
61,121 visible repositories in the index
1–24 of 36 · Most stars
Web path scanner
An open-source post-exploitation framework for students, researchers and developers.
- encrypted-connections
- platform-independent
- no-dependencies
- reverse-shells
Defeating Windows User Account Control
- uac-bypass
- uac
- dll-hijack
- bypass-uac
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Modlishka. Reverse Proxy.
- penetration-testing-tools
- mitm
- reverse-proxy
- security-tools
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
A powerful and useful hacker dictionary builder for a brute-force attack
- password-generator
- wordlist-generator
- social-engineering-attacks
- password-wordlist
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)
- dsh-plugin
- cordis
- deepseek-harness
- dsh
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
dll injection tool that implements various methods
tool for generating wordlists or extending an existing one using mutations.
Various wordlists FR & EN - Cracking French passwords
- wordlists
- hashcat
- french
- cracking-hashes
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
A USB proxy based on raw-gadget and libusb
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force