injectify

Injectify Perform advanced MiTM attacks on websites with ease. ✨ Support development on Patreon or one-time via Paypal Test it out | Installation | Docs | Trello | Discord View what's on the victims screen Ability to interact and click buttons Scrolling is synced two-way Data recording Database a...

PassBreaker

PassBreaker PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features Wordlist-based password cracking Brute force password cracking Support for multiple...

turkce-wordlist

This project does not contain any personal data such as email addresses, names, phone numbers. Passwords are listed only for academic purposes. It is not possible to associate passwords with real people. Turkish Wordlist This is a study conducted for the analysis of password choices of Turkish...

cerbrutus

Cerbrutus Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation:...

CVE-2020-1472

复现完了有点小BUG，重启后会卡在登录页面比较久。不知道是不是只有我会。谨慎在真实环境利用 实战中可以使用secretsdump.py 的 -use-vss和-history获取历史hash进行恢复. 第一步 pip3 install -r requirements.txt 查看hash secretsdump.py molecule-labs.com/administrator:[email protected] -just-dc-user 'AD$' 攻击 python3 CVE-2020-1472.py AD AD$ 192.168.175.132 查询域控hash...

bruteforce-wallet

bruteforce-wallet 本程序旨在尝试找出加密的 Peercoin（或 Bitcoin、Litecoin 等）钱包文件（即 wallet.dat）的密码。 它有两种使用方式： 根据给定字符集尝试所有可能的密码 尝试文件中包含的所有密码 有一个命令行选项可以指定要使用的线程数。 向正在运行的 bruteforce-wallet 进程发送 USR1 信号，它会打印进度并继续。 穷举模式...

ResetNightmare

ResetNightmare Herramienta de prueba de concepto POC para ResetNightmare CVE-2026-27912. ResetNightmare es una falla de validación en el protocolo Kerberos de cambio de contraseña que permite restablecer la contraseña de cualquier cuenta de usuario/equipo objetivo, sin conocer la actual. El ataqu...

WPForce

WPForce - Wordpress 攻击套件 关于： WPForce 是一套 Wordpress 攻击工具。目前包含2个脚本 - WPForce（通过 API 暴力破解登录）和 Yertle（在管理凭据找到后上传 Webshell）。Yertle 还包含一些后利用模块。 更多信息请访问博客文章： https://www.n00py.io/2017/03/squeezing-the-juice-out-of-a-compromised-wordpress-server/ 其他语言博客： 中文 - www.mottoin.com/100381.html 葡萄牙语 -...

CVE-2025-29705

CVE-2025-29705 CVE-2025-29705 简介 code-gen: 一款代码生成工具，可自定义模板生成不同的代码，支持MySQL、Oracle、SQL Server、PostgreSQL https://gitee.com/durcframework/code-gen 这个项目没有做权限控制，任何人都可以随意访问已经部署在公网的该类项目，导致数据库账号密码泄露 fofa资产搜集语法 fofa="chunk-libs.b1df3b78.js" 案例一 http://xxxx:8884/ 选择数据库-编辑 使用navicat尝试连接...

restic

Introducción restic es un programa de copias de seguridad rápido, eficiente y seguro. Es compatible con los tres sistemas operativos principales Linux, macOS, Windows y algunos otros más pequeños FreeBSD, OpenBSD. Para instrucciones detalladas de uso e instalación, consulta la documentación. Pued...

cheetah

English description | 中文说明 0x00 cheetah Cheetah is a dictionary-based brute force password webshell tool, running as fast as a cheetah hunt for prey. Cheetah's working principle is that it can submit a large number of detection passwords based on different web services at once, blasting efficienc...

keepass2-password-finder

CVE-2023-32784 - Volcador de contraseñas de KeePass 2.X Esta es una prueba de concepto para CVE-2023-32784, que reescribí en Python. El único requisito es un nombre de archivo. Uso: root@kitploit: ./cracker.py file...

pre2k

root@kitploit: /'\ /\ \ /\ /\ \ \ /'\ /\ '/'/'\ //// /\ \ , \ \ \L\ \ \ //\ //\ // /\ \ \ \\ \ \ ,/\ \\ \// // \ \ \ \ \ / // // // //// \ \ v3.0 // @unsignedsh0rt @Tw1sm Pre2k Pre2k es una herramienta para consultar la existencia de objetos de equipo pre-Windows 2000 que...

knowsmore

KnowsMore KnowsMore 官方支持 Python 3.8+。 主要特性 从 .ntds 输出文本文件（由 CrackMapExec 或 secretsdump.py 生成）导入 NTLM 哈希 从 NTDS.dit 和 SYSTEM 文件导入 NTLM 哈希 从 hashcat 输出文件导入已破解的 NTLM 哈希 导入 BloodHound ZIP 或 JSON 文件 BloodHound 导入器（将 JSON 导入 Neo4J，无需 BloodHound UI） 分析密码质量（长度、小写字母、大写字母、数字、特殊字符和拉丁字符） 分析密码与公司名称、用户名的相似度...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

winboxPOC

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Requisitos Python 3+ Este script NO se ejecutará con Python 2.x o inferior. Cómo Usar El script se usa de manera simple c...

SharpLAPS

SharpLAPS The attribute ms-mcs-AdmPwd stores the clear-text LAPS password. This executable is made to be executed within Cobalt Strike session using execute-assembly. It will retrieve the LAPS password from the Active Directory. Require either: Account with ExtendedRight or Generic All Rights...

nepstech-xpon-router-CVE-2024-40119

nepstech-xpon-router-CVE-2024-40119 作者： Subhodeep Baroi CVE-2024-40119：Nepstech无线路由器NTPL-XPON1GFEVN v1.0中的CSRF漏洞 描述 CVE-2024-40119 是Nepstech Wifi Router xpon NTPL-XPON1GFEVN v1.0固件v2.0.1中的一个跨站请求伪造（CSRF）漏洞。该漏洞允许远程攻击者在未经用户同意的情况下更改管理员密码，可能导致帐户被接管。 详细信息 漏洞类型： 跨站请求伪造（CSRF） 产品供应商： Nepstech 受影响产品代码库： Wi...

redteam-research

Red Team Research Collection of PoC and offensive techniques used by the BlackArrow Red Team License All the code included in this project is licensed under the terms of the MIT license...

Cr3dOv3r

Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...