pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

Password-Analysis

Password Analysis: Based on Entropy and Dictionaries of Weak Passwords Script in Go that analyzes a list of passwords. Download and Compilation You can download the binary directly from the releases. If you prefer to compile it manually, consider the following steps. root@kitploit: git clone...

siemframework

SIEMS FRAMEWORK MultiSIEM Modular Python3 Attack Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./siemsframework.py INTRODUCTION SIEMs are defensive tools increasingly used in the field of cybersecurity, especially by major companies and companies intended to monitor highly...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

ad-password-protection

Lithnet Password Protection for Active Directory LPP enhances the options available to an organization wanting to ensure that all their Active Directory accounts have strong passwords. LPP is a module that you install on your Active Directory servers that uses a password filter to inspect passwor...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

SharpDecryptPwd

SharpDecryptPwd Este proyecto ya no se actualiza, el proyecto de código fuente reconstruido es el siguiente https://github.com/RowTeam/SharpDecryptPwd Introducción Analiza los programas cuyas contraseñas se guardan en el sistema Windows, incluyendo: Navicat, TeamViewer, FileZilla, WinSCP, product...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

Wifi-Dumper

Wifi-Dumper This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements. Features Optio...

RemotePasswordWiFi

RemotePasswordWiFi 通过默认密码获取远程路由器密码。 支持的路由器： Thomson Thechnicolor 即将支持： bee cisco...

CVE-2025-29557

CVE-2025-29557 – ExaGrid MailConfiguration API 凭证泄露 📝 概述 漏洞标题 ：通过 MailConfiguration API 泄露 SMTP 凭证 产品 ：ExaGrid EX10 备份设备 受影响版本 ：6.3 – 7.0.1.P08 CVE ID ：CVE-2025-29557 严重性 ：高 攻击向量 ：远程（已验证身份） 影响 ：信息泄露 – 明文 SMTP 凭证 🧨 描述 ExaGrid EX10 设备的 MailConfiguration API 端点 存在一个严重的访问控制缺陷。具有 操作员级别权限...

Pwdlyser

Pwdlyser 公共发布的新仓库 Pwdlyser P assw ord -Analyser 是一款多功能分析工具，旨在为安全专业人员以及致力于提升安全态势的组织提供便捷的密码审查与分析能力，可针对 Active Directory 域账户、数据库等中的密码进行轻松审核。其次，它应能被安全顾问和渗透测试人员用于识别和定位关键账户密码（如域管理员）、最常见的 Hashcat 字符密码掩码，并输出列表中常见密码的估计熵值。...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...