Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication. This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing...
Spray A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf) Install Requirement All requirements come preinstalled on Kali Linux, to run on other flavors or Mac just make...
Password Attacks / Web Information Gathering / Web Vulnerability Analysis
by do son · Published May 19, 2019 · Last modified May 1, 2024
What is a CMS? A content management system (CMS) manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress,...
pydictor —— A useful hacker dictionary builder for a brute-force attack Q: Why I need to use pydictor? A: 1.it always can help you You can use pydictor to generate...
THC-Hydra is a very fast (multi-threaded) network logon cracker which supports many different services: AFP, Cisco, cisco-enable, CVS, Firebird, ftp, http-get, http-head, http-proxy, https-get, https-head, https-form-get, https-form-post, ICQ, IMAP, IMAP-NTLM,...
Kaboom is a bash script that automates the first two phases of a penetration test. All information collected is saved into a directory hierarchy very simple to the browser (also...
StegCracker Steganography brute-force utility to uncover hidden data inside files. Changelog v2.0.9 Made default wordlist handling more user-friendly, sould address issue #14 – If no wordlist is specified Kali Linuxes...
authoscope authoscope is a scriptable network authentication cracker. While the space for common service bruteforce is already very well saturated, you may still end up writing your own python scripts when testing...
John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), Windows, DOS, BeOS, and OpenVMS (the latter...
Password Attacks / Post Exploitation
by do son · Published April 5, 2019 · Last modified May 11, 2020
Enumdb is a brute force and post-exploitation tool for MySQL and MSSQL databases. When provided a list of usernames and/or passwords, it will cycle through each targeted host looking for...
Network Stress Test and Penetration Testing Toolkit Attack Vectors: DNS Spoof Module: DNS Spoof Attack Vector that allow you to force redirect network traffic. The Harvester: The Harvester is a...
Information Gathering / Network PenTest / Password Attacks / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published February 20, 2019 · Last modified November 4, 2024
SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time...
WebHashcat Hashcat web interface WebHashcat is a very simple but efficient web interface for hashcat password cracking tool. It hashes the following features: Distributed cracking sessions between multiple servers (you...
SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission...
hate_crack A tool for automating cracking methodologies through Hashcat from the TrustedSec team. Installation Get the latest hashcat binaries OSX Install mkdir -p hashcat/deps git clone https://github.com/KhronosGroup/OpenCL-Headers.git hashcat/deps/OpenCL cd hashcat/...
Support Securityonline.info site. Thanks!
