Kaonashi Project: RootedCON 2019 This repository contains several directories: Sorted Masks for hashcat Advanced Rules for hashcat Links to download the Kaonishi’s Wordlists Slides used in our talk I know your p4$$w0rd (and if I don’t, I will guess it… at RootedCON (2019)...
pwnedOrNot pwnedOrNot is a python script which checks if the email account has been compromised in a data breach if the email account is compromised it proceeds to find passwords for the compromised account. It uses haveibeenpwned v2...
Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication. This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the Heimdal Kerberos...
Spray A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf) Install Requirement All requirements come preinstalled on Kali Linux, to run on other flavors or Mac just make sure curl(owa & Lync)...
Password Attacks / Web Information Gathering / Web Vulnerability Analysis
by do son · Published May 19, 2019 · Last modified October 25, 2022
What is a CMS? A content management system (CMS) manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Functions...
pydictor —— A useful hacker dictionary builder for a brute-force attack Q: Why I need to use pydictor? A: 1.it always can help you You can use pydictor to generate a general blast wordlist,...
THC-Hydra is a very fast (multi-threaded) network logon cracker which supports many different services: AFP, Cisco, cisco-enable, CVS, Firebird, ftp, http-get, http-head, http-proxy, https-get, https-head, https-form-get, https-form-post, ICQ, IMAP, IMAP-NTLM, ldap2, ldap3, MySQL, mysql,...
Kaboom is a bash script that automates the first two phases of a penetration test. All information collected is saved into a directory hierarchy very simple to the browser (also in the case of...
StegCracker Steganography brute-force utility to uncover hidden data inside files. Changelog v2.0.9 Made default wordlist handling more user-friendly, sould address issue #14 – If no wordlist is specified Kali Linuxes rockyou.txt will be used...
authoscope authoscope is a scriptable network authentication cracker. While the space for common service bruteforce is already very well saturated, you may still end up writing your own python scripts when testing credentials for web applications....
John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), Windows, DOS, BeOS, and OpenVMS (the latter requires a contributed patch)....
Password Attacks / Post Exploitation
by do son · Published April 5, 2019 · Last modified May 11, 2020
Enumdb is a brute force and post-exploitation tool for MySQL and MSSQL databases. When provided a list of usernames and/or passwords, it will cycle through each targeted host looking for valid credentials. By default,...
Network Stress Test and Penetration Testing Toolkit Attack Vectors: DNS Spoof Module: DNS Spoof Attack Vector that allow you to force redirect network traffic. The Harvester: The Harvester is a tool for gathering e-mail...
Information Gathering / Network PenTest / Password Attacks / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published February 20, 2019
SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time by having point-and-click access...
WebHashcat Hashcat web interface WebHashcat is a very simple but efficient web interface for hashcat password cracking tool. It hashes the following features: Distributed cracking sessions between multiple servers (you only need to install...
Secure Your Connection
