BruteX

BruteX ABOUT: Automatically brute force all services running on a target Open ports Usernames Passwords INSTALL: ./install.sh USAGE: brutex target DOCKER: docker build -t brutex . docker run -it brutex target LICENSE: You may modify and re-distribute this software as long as the project name...

xmlrpc-brute

WordPress XML-RPC Bruteforce Tool A tool designed to test WordPress sites for XML-RPC vulnerabilities by attempting to brute force user credentials through the XML-RPC interface. Description This tool tests WordPress installations for XML-RPC authentication vulnerabilities. It can perform standar...

SSH-KILLv2

What about SSH-KILLv2 Script Attack iPhone if ssh service open, many users use "Open SSH" in jailbroken devices to transfer files between laptop / PC & iPhone to make their life easier but the issue here "Open SSH " tweak use the default password "alpine" and many users don't change it if they...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. git clone https://github.com/maurosoria/dirsearch.git...

fscan

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

ScrapPY

🐕 ScrapPY: PDF Scraping Made Easy ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate targeted wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, and dictionary attacks. ScrapPY performs word frequency,...

python-pentesting

Python for Pentesters Overview Getting started with Python for pentesting and red team engagements is fairly easy! This repo is just a small collection of random scripts to help get you started. Brought to you by: Examples: by Mike Felch @ustayready and Joff Thyer @joffthyer This code is provided...

jwt-cracker

jwt-cracker Simple HS256, HS384 & HS512 JWT token brute force cracker. Effective only to crack JWT tokens with weak secrets. Recommendation : Use strong long secrets or RS256 tokens. Install With npm: npm install --global jwt-cracker Usage From command line: jwt-cracker -t -a --max -d -f Where:...

Instagram-Brute-Force-2024

Instagram-Brute-Force-2024 Instagram Brute Force CPU/GPU Supported 2024 Use option 2 while running the script. Option 1 is on development Chrome should be downloaded in device. Compatible and Tested GUI Supported Operating Systems Only Python 3.13 x64 bit Unix / Linux / Mac / Windows 8.1 and high...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

Brute_Force

BruteForce install : sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize Usage: BruteForce Gmail Attack python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle BruteForce Hotmail Attack python3...

pentest-machine

pentest-machine Automates some pentesting work via an nmap XML file. As soon as each command finishes it writes its output to the terminal and the files in output-by-service/ and output-by-host/. Runs fast-returning commands first. Please send me protocols/commands/options that you would like to...

RedLogin

RedLogin Red Login: SSH Brute-force Tools Features: High speed and precision CLI Console based Run the arbitrary command after the attack is successful Default 'Uname -a' Telegram messanger support for sending reports via bot API Usage: Redlogin.exe Optional —telegram == List of targets ip list =...

cerbrutus

Cerbrutus Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation: cd /op...

kerbrute

kerbrute An script to perform kerberos bruteforcing by using the Impacket library. When is executed, as input it receives a user or list of users and a password or list of password. Then is performs a brute-force attack to enumerate: Valid username/passwords pairs Valid usernames Usernames withou...

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

hate_crack

/ | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that fails on purpose...