HashCheck

PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...

munin

| | | | | \ | | | | | | \ \ | | | | \ \ /. | | | | | | | | | | | | | | | | | | | | /| || || || ||| || || || || || // / /'" " Online Hash Checker for Virustotal and Other Services Florian Roth What is Munin? Munin is a online hash checker utility that retrieves valuable information from various...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

NimExec

NimExec Basically, NimExec is a fileless remote command execution tool that uses The Service Control Manager Remote Protocol MS-SCMR. It changes the binary path of a random or given service run by LocalSystem to execute the given command on the target and restores it later via hand-crafted RPC...

Hashcat-Cheatsheet

Hashcat-Cheatsheet Hashcat Cheatsheet for OSCP https://hashcat.net/wiki/doku.php?id=hashcat Identify Hashes hash-identifier Example Hashes: https://hashcat.net/wiki/doku.php?id=examplehashes MAX POWER! I have found that I can squeeze some more power out of my hash cracking by adding these...

Name-That-Hash

➡️ Discord | Website ⬅️ The Modern Hash Identification System pip3 install name-that-hash && nth Web App with no install needed 🤔 What is this? Have you ever come across a hash such as 5f4dcc3b5aa765d61d8327deb882cf99 and wondered what type of hash that is? 🤔 Name-that-hash will name that hash...

Internal-Monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS Introduction Mimikatz, developed by Benjamin Delpy @gentilkiwi, is a well-regarded post-exploitation tool, which allows adversaries to extract plain text passwords, NTLM hashes and Kerberos tickets from memory, as well as...

ShadowSpray

ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of engagements I see in BloodHound that the group "Everyone" / "Authenticated Users" / "Domain Users" or...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

cve-2026-43512-poc

CVE-2026-43512 — Apache Tomcat DIGEST Authentication Bypass Exploitability analysis result: the root cause is confirmed. End-to-end exploitation is not reproducible against a standard UserDatabaseRealm deployment. See Analysis for details. Table of Contents Overview Affected Versions Root Cause...

Windows-Explorer-CVE-2025-24071

Windows-Explorer-CVE-2025-24071 Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as...

Email-exploit-Moniker-Link-CVE-2024-21413-

Email exploit Moniker Link-CVE-2024-21413-Module — Documentation Overview: A practical PoC demonstrating the use of a Moniker Link in an HTML email to trigger an SMB connection from Outlook, allowing capture of a victim's netNTLMv2 hash via Responder. This showcases practical skills in penetratio...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

osx-password-dumper

🍎 🔓 OSX Password Dumper Script Overview A bash script to retrieve user's .plist files on a macOS system and to convert the data inside it to a crackable hash format. to use with John The Ripper or Hashcat Useful for CTFs/Pentesting/Red Teaming on macOS systems. Prerequisites The script must be ru...

Doozer

Doozer Doozer is an extensible, automated hash cracking utility used to automate the parsing, cracking, and organization of password hashes. Currently, Doozer supports nt/lm, ntlmv1, and ntlmv2 hashes from Responder or SAM, but sports a modular architecture that allows other hash types to be...

HASH

HASH HTTP Agnostic Software Honeypot HASH is a framework for creating and launching low interactive honeypots. 🌟 Why HASH? The main philosophy of HASH is to be easy to configure and flexible to mimic any software running on HTTP/HTTPs. With the minimum footprint possible to avoid being detected a...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Weak Password Encryption CVE-2022-25012 Updated version of this weak password encryption script Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...