2 مستودعات
Credential cracking targeting directory servers via LDAP.
Distinct from Password Attacks: Targets directory-specific LDAP authentication, unlike general password attacks.
Explore 2 awesome GitHub repositories matching part of an awesome list · LDAP Authentication Attacks. Refine with filters or upvote what's useful.
Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords through automated brute-force and dictionary attacks. It serves as a multi-protocol authentication tester capable of verifying credentials across a wide range of remote network services, including SSH, SMB, FTP, and various database listeners. The project is distinguished by its ability to execute parallelized password attacks against multiple servers and protocols simultaneously. It features a modular system for implementing diverse network authentication schemes, allowing f
Verifies username and password combinations against directory servers using multiple LDAP authentication mechanisms.
Responder is a network penetration testing tool that intercepts and spoofs link-local name resolution queries, including LLMNR, NBT-NS, and mDNS, to redirect traffic to an attacker-controlled host. It hosts rogue protocol servers for over 15 protocols, capturing authentication credentials during challenge-response handshakes, and stores captured hashes and cleartext credentials in a SQLite database for structured offline analysis. The tool distinguishes itself through its ability to relay captured NTLM authentication challenges to target services for lateral movement without cracking the hash
Intercepts LDAP and LDAPS authentication attempts, logging both plaintext passwords and NetNTLMv2 hashes.