dnsmap

INTRODUCTION dnsmap was originally released back in 2006 and was inspired by the fictional story "The Thief No One Saw" by Paul Craig, which can be found in the book "Stealing the Network - How to 0wn the Box" dnsmap is mainly meant to be used by pentesters during the information...

DirDar

DirDar v1.0 Description 🏴‍☠️ bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have...

mssqli-duet

MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...

haklistgen

haklistgen Turns any junk text into a usable wordlist for brute-forcing. Installation go install github.com/hakluke/haklistgen@latest Usage Examples Scrape all words out of an HTTP response to build a directory bruteforce wordlist: curl https://wikipedia.org | haklistgen Pipe a list of subdomains...

MyJWT

MyJWT codebeat badge Introduction This cli is for pentesters, CTF players, or dev. You can modify your jwt, sign, inject ,etc... Check Documentation for more information. If you see problems or enhancement send an issue.I will respond as soon as possible. Enjoy : Documentation Documentation is...

brutto

brutto Easy brute forcing to whatever you want, Its magic increasing values and direct. Implementation Clone git clone https://github.com/jofpin/brutto.git Download the latest version Install with Python: python setup.py install So you import the library from bruttoeasy import Brutto How to use...

crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...

SSHBuster

SSHBuster SSHBuster is a powerful command-line SSH brute-forcing tool designed for ethical hacking and penetration testing. It performs dictionary-based attacks to find valid SSH login credentials efficiently. Features Brute-force SSH servers using different username and password combinations...

WordListGen

WordListGen Super Simple Python Word List Generator for Password Cracking Hashcat! I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script is fully...

NTLMRecon

Overview NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath AKA pwnfoo. NTLMRecon can be leveraged to perform brute forcing against a targeted webserver to identify common application endpoints supporting NTLM authentication. This includes endpoints such as t...

gobuster

Gobuster 💻 Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. ✨ Features 🚀...

SSH-Private-Key-Looting-Wordlists

LFI for Lateral Movement? Gain SSH Access? ?file=../../../../../../../../home/user/.ssh/idrsa ?file=../../../../../../../../home/user/.ssh/idrsa-cert SSH Private Key Looting Wordlists 🔒🗝️ This repository contains a collection of wordlists to aid in locating or brute-forcing SSH private key file...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

Blazy

Blazy blazy does login bruteforcing Usage python3 main.py -i url/file Credits Shamelessly stole form parser from guettli...

barrido

barrido Console utility to find web application paths. Still in alpha version. Examples Multiple URLs bruteforcing: $ cat urls.txt https://target.a.com https://target.b.com https://target.c.com $ barrido urls.txt wordlists/quickhits.txt -se | tee curiouspaths.txt https://target.c.com/manager/ 401...

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

SpringVulScan

SpringVulScan If you like it, give the author a star SpringVulScan -- Burp Suite Plugin Updates 1.1 1. Added custom root path scanning. 2. Right-click to send to SpringVulScan, custom dictionaries, etc. 3. Optimized detection logic. 4. Custom selection can be used not only for detecting route...

vbrute

vbrute Virtual hosts brute forcer. Specify file containing domains and file containing IPs and vbrute will attempt to connect to IP with specific domain. Usage: vbrute --domain-file --ip-file -d, --domain-file Specify file containing a list of domains you want to test -i, --ip-file Specify file...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Key Features of this Black-Box Exploit: 1. Credential Brute-Forcing: Tests 12+ common default username/password combinations Checks 5 common system databases Automatically detects valid credentials 2. Anonymous Access Attempt: Tries connecting without any credentials Tests...