go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

DPAT

Domain Password Audit Tool DPAT DPAT is a Python-based security tool that analyzes password hashes extracted from Active Directory domain controllers. It generates comprehensive HTML reports showing password usage statistics, policy violations, and security insights from both NTDS dumps and...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

lil-pwny

Lil Pwny Fast offline auditing of Active Directory passwords using Python. About Lil Pwny Lil Pwny is a Python application to perform an offline audit of NTLM hashes of users' passwords, recovered from Active Directory, against known compromised passwords from Have I Been Pwned. Results will be...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

EUVD-2025-211053

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2025-71428

Versions of Jivejdon through 5.0 are vulnerable to a SQL injection flaw in the AccountDaoSql.getAccountByNameLike() method. Authenticated users with the Admin role can exploit this by submitting crafted input to the /admin/user/userListAction endpoint via the username parameter . Successful explo...

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

silph

SILPH: Stealthy In-Memory Local Password Harvester SILPH is an open-source red team tool designed to dump LSA secrets, SAM hashes, and DCC2 credentials entirely in memory, without writing any files to disk. Unlike its upstream project go-secdump , SILPH is built to be integrated into the Orsted C...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

ranger

ranger 보안 전문가가 원격 Microsoft Windows 기반 시스템에 접근하고 상호작용할 수 있도록 지원하는 도구입니다. 이 프로젝트는 "우리가 활이나 화살을 발명한 것이 아니라, 더 효율적으로 사용하는 방법을 고안했다"는 생각에서 구상되었습니다. Ranger는 명령줄 기반의 공격 및 침투 테스트 도구로, 인스턴트화된 투석기 서버를 사용하여 Windows 시스템에 기능을 전달할 수 있습니다. 사용자가 자격 증명 세트나 해시 세트NTLM, LM, LM:NTLM를 가지고 있으면 트러스트에 속한 시스템에 접근할 수 있습니다...

john

John the Ripper 이것은 John the Ripper의 커뮤니티 강화 버전인 "jumbo" 버전입니다. jumbo 개발자와 사용자 커뮤니티가 기여한 많은 코드, 문서 및 데이터를 포함하고 있습니다. jumbo에 새로운 코드를 추가하는 것은 쉬우며, 품질 요구 사항은 낮지만, 최근에는 모든 기여에 대해 상당한 자동화된 테스트를 적용하기 시작했습니다. 즉, 반드시 "성숙한" 것은 아닌 많은 기능을 제공하며, 이는 이 코드에 버그가 있을 수 있음을 의미합니다. John the Ripper 홈페이지는 다음과 같습니다:...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

go-secdump

go-secdump 설명 go-secdump 패키지는 SAM 레지스트리 하이브에서 해시를 원격으로 추출하고, SECURITY 하이브에서 LSA 시크릿 및 캐시된 해시를 원격 에이전트 없이 디스크에 쓰지 않고 추출하도록 설계된 도구입니다. 이 도구는 go-smb 라이브러리 위에 구축되었으며, 이를 사용하여 Windows 원격 레지스트리와 통신하여 메모리에서 직접 레지스트리 키를 검색합니다. 이 도구는 학습 경험과 SAM 하이브에서 NT 해시, LSA 시크릿, 도메인 캐시 자격 증명을 레지스트리 하이브를 먼저 디스크에 저장한 후...

hexalocker-analysis

HexaLocker ランサムウェア解析 このリポジトリには、HexaLocker に対して行われた解析に関連するリソースが含まれており、このブログ記事で公開されています：https://www.synacktiv.com/publications/lapsus-is-dead-long-live-hexalocker.html。 他の HexaLocker サンプルを検出するための YARA ルール。 HexaLocker のハッシュとドメインのリスト。 著作権 2024 - Théo Letailleur, Synacktiv ライセンス このリポジトリの内容は AGPL ライセンス...