CredsLeaker

CredsLeaker v4.x A big shoutout to @ApSecDev who took this project to the next level! Kudos! This script used to display a powershell credentials box asked the user for credentials. However, That was highly noticeable. Now it's time to utilize Windows Security popup! Features AD domain...

Kraken

A Python-based tool to centralize and streamline BruteForce Attacks About The Project Kraken is a powerful, Python-based tool designed to centralize and streamline various brute-forcing tasks. Kraken provides a suite of tools for cybersecurity professionals to efficiently perform brute-force...

zerobox

Zerobox Python SDK Python SDK for zerobox. Sandbox any command with file, network, and credential controls. pip install zerobox Installing the wheel drops the zerobox CLI into your environment's bin/ and exposes a Python SDK. For CLI usage, secrets concepts, the full flag reference, performance...

DumpGuard

DumpGuard DumpGuard is a credential dumping and protocol research tool for modern Windows systems. It abuses the Remote Credential Guard protocol to recover credential material even when Credential Guard is enabled, and also includes a Microsoft v1 authentication package path for session-oriented...

CVE-2021-21975

CVE-2021-21975 SSRF-POC - ssrf to cred leak First configure pd client. Now run ./pd deploy http-new-requests now replace the pipedream http request ex: Randomstring.m.pipedream.net in the script run this in a seperate terminal - ./pd logs new-requests | tee -a req.txt and now run this in another...

ARP-poisoning-packet-sniffer

ARP Poisoning - Packet Sniffer Two scripts written to perform ARP poisoning on target computers on the same network and to monitor network traffic. The arpspoofy.py script is used to perform ARP poisoning on a target computer on the same network. While the arpspoofy.py script performs ARP poisoni...

mimikittenz

mimikittenz mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

Impost3r

Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache Targets versions ≤2.7.5 vulnerable to CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...

CVE-2026-103820

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...

SharpSecDump

SharpSecDump .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py. By default runs in the context of the current user. Please only use in environments you own or have permission to test against : Usage SharpSecDump.exe -target=192.168.1.15 -u=admin...

ssb

SSB S ecure S hell B ruteforcer — A faster & simpler way to bruteforce SSH server. Installation from Binary Download a pre-built binary from releases page, unpack and run! Or: ▶ sudo curl -sSfL 'https://git.io/kitabisa-ssb' | sh -s -- -b /usr/local/bin from Source Need go1.14+ compiler installed...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: $ curl...

Internal-Monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS Introduction Mimikatz, developed by Benjamin Delpy @gentilkiwi, is a well-regarded post-exploitation tool, which allows adversaries to extract plain text passwords, NTLM hashes and Kerberos tickets from memory, as well as...

ibrute

UPDATE If you are concerned about cloud storage security, please read What if I was a cloud? and leave your feedback please. Thank you. The end of fun, Apple have just patched Here is appleID password bruteforce pOc. It's only p0c, so there is no MultiThreading feature Save-State-On-Exception...

LSTAR

LSTAR - Aggressor A plugin from initial access to domain takeover, enabling intranet traversal With the goal of simplifying CS right-click operations and facilitating integration, referencing a large number of post-exploitation plugins Restructured and enriched host credential acquisition,...

CVE-2026-78628

The Okta Credential Provider for Windows contains an improper input validation vulnerability. The software fails to validate the buffer size and packed string offsets of a serialized credential buffer before interpreting it as a Kerberos logon structure . Processing a malformed buffer can cause t...

o365spray

o365spray o365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 O365. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments. For educational, authorized and/or research purpose...