NativeBypassCredGuard

NativeBypassCredGuard NativeBypassCredGuard is a tool designed to bypass Credential Guard by patching WDigest.dll using only NTAPI functions exported by ntdll.dll. It is available in two flavours: C and C++. The tool locates the pattern "39 ?? ?? ?? ?? 00 8b ?? ?? ?? ?? 00" in the WDigest.dll fil...

sickrageWTF

Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...

CVE-2021-46366

CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery CSRF in order to brute force and exfiltrate users'...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

CVE-2021-27404

Authenticated Host Header Injection - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Header: Host Not tested in other model/version. Impact: An attacker could take advantege on that vulnerability to redirect user to a fake Login...

Outpacket

📦 Outpacket Tired of impacket? This cheatsheet maps common impacket workflows to their modern alternatives Index Auth Quick Reference 1. Remote Execution WMI Exec · wmiexec.py DCOM Exec · dcomexec.py Service-Based Exec · smbexec.py · psexec.py Scheduled Task Exec · atexec.py Bulk Execution ·...

Snaffler

Snaffler What is it for? Snaffler is a tool for pentesters and red teamers to help find delicious candy needles creds mostly, but it's flexible in a bunch of horrible boring haystacks a massive Windows/AD environment. It might also be useful for other people doing other stuff, but it is explicitl...

cameradar

Cameradar RTSP stream access tool Cameradar scans RTSP endpoints on authorized targets, and uses dictionary attacks to bruteforce their credentials and routes. What Cameradar does Detects open RTSP hosts on accessible targets. Detects the device model that streams the RTSP feed. Attempts...

CVE-2023-23752

CVE-2023-23752 This is a proof-of-concept code for the CVE-2023-23752 vulnerability. It allows an attacker to extract sensitive information such as usernames, passwords, and database names from a target application. Usage To use this code, you can follow these steps: 1. Clone this repository or...

LSTAR-EN

LSTAR - Aggressor Translated to English! By Google Translate and Deepl For the purpose of simplifying CS right-click and facilitating self-integration, refer to a large number of post-infiltration plugins Refactored and enriched host-related credential acquisition, multi-level intranet penetratio...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

CVE-2020-9758

CVE-2020-9758 Description An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

Invoke-WCMDump

Invoke-WCMDump PowerShell script to dump Windows credentials from the Credential Manager Invoke-WCMDump enumerates Windows credentials in the Credential Manager and then extracts available information about each one. Passwords are retrieved for "Generic" type credentials, but can not be retrived ...

PhaseHack

PhaseHack Get Phase botnet login information via blind SQL injection...

monsoon

monsoon A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time monsoon is a fast and flexible HTTP fuzzer that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. You ca...

aws-enumerator

AWS Service Enumeration Disclaimer The tool is in beta stage testing in progress, no destructive API Calls used read only actions . I hope, there will be no issues with the tool. If any issues encountered, please submit the ticket. Description The AWS Enumerator was created for service enumeratio...

Wordpress-XMLRPC-Brute-Force-Exploit

Wordpress XMLRPC System Multicall Brute Force Exploit by 1N3 Last Updated: 20170215 https://crowdshield.com ABOUT: This is an exploit for Wordpress xmlrpc.php System Multicall function affecting the most current version of Wordpress 3.5.1. The exploit works by sending 1,000+ auth attempts per...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? curl -sSL https://install.example-cli.dev | bash...

rusty-hog

Rusty Hog is a secret scanner built in Rust for performance, and based on TruffleHog which is written in Python. Rusty Hog provides the following binaries: Ankamali Hog: Scans for secrets in a Google doc. Berkshire Hog: Scans for secrets in an S3 bucket. Choctaw Hog: Scans for secrets in a Git...