10 dépôts
Collections of character sequences and dictionaries used for testing password strength and brute-force resilience.
Explore 10 awesome GitHub repositories matching security & cryptography · Password Cracking Wordlists. Refine with filters or upvote what's useful.
Ce projet sert de dépôt centralisé de connaissances techniques et de ressources administratives piloté par la communauté. Il fournit une taxonomie structurée qui agrège des informations disparates dans un cadre consultable, soutenant l'apprentissage continu et la résolution rapide de problèmes pour les administrateurs système et les praticiens de la cybersécurité. En cartographiant les ressources à travers la sécurité offensive, la gestion de l'infrastructure et le développement logiciel, il offre un chemin unifié pour l'acquisition de compétences et la référence professionnelle. Le projet est défini par une philosophie de conception axée sur la ligne de commande, privilégiant les utilitaires basés sur le terminal et les interfaces scriptables pour faciliter une administration système efficace et des flux de travail de sécurité répétables. Il se distingue par une approche agnostique de la plateforme, maintenant une documentation et des guides opérationnels qui restent applicables à travers divers environnements de type Unix et basés sur le cloud. Cette intégration modulaire de la chaîne d'outils permet aux utilisateurs de composer des environnements personnalisés adaptés à des tâches administratives ou de sécurité spécifiques. Le dépôt couvre une large surface de capacités, notamment des boîtes à outils complètes pour l'audit système, la gestion réseau et le durcissement de l'infrastructure. Il fournit des parcours d'apprentissage structurés pour le développement des compétences en cybersécurité, allant des laboratoires de piratage éthique et des normes de test d'intrusion à l'évaluation des vulnérabilités et aux meilleures pratiques de configuration système. La collection englobe également un large éventail d'outils de productivité, d'utilitaires de diagnostic et de supports pédagogiques conçus pour rationaliser la maintenance de routine et améliorer la posture de sécurité globale.
Manage extensive wordlists for brute-force testing to evaluate password strength and system resilience.
Hacker Roadmap is a community-driven repository that functions as a structured learning path and resource directory for cybersecurity and ethical hacking. It organizes complex security concepts into sequential modules, guiding users from fundamental knowledge to advanced technical exploitation skills through a curated collection of educational materials and professional development resources. The project distinguishes itself by acting as a centralized index that maps specialized third-party security software and isolated training environments to specific operational use cases. By aggregating
Automates credential recovery and wordlist generation to test authentication strength against brute force attempts.
This project is a WPA Wi-Fi cracking toolkit designed for capturing authentication handshakes and recovering WPA/WPA2 passwords. It provides specialized utilities for scanning wireless networks, obfuscating hardware addresses, and generating password lists to facilitate security audits. The toolkit differentiates itself through a focused workflow that combines handshake capture tools with a password wordlist generator. It enables the interception of the four-way authentication process between wireless clients and access points and utilizes these captured credentials for recovery via dictionar
Creates custom password lists based on specific patterns to facilitate brute-force recovery attacks.
Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords through automated brute-force and dictionary attacks. It serves as a multi-protocol authentication tester capable of verifying credentials across a wide range of remote network services, including SSH, SMB, FTP, and various database listeners. The project is distinguished by its ability to execute parallelized password attacks against multiple servers and protocols simultaneously. It features a modular system for implementing diverse network authentication schemes, allowing f
Generates sequences of passwords based on specified lengths and character sets for brute-force attacks.
Probable-Wordlists is a collection of curated data resources providing password frequency lists, character masks, and common identity identifiers for security research. These resources serve as credential analysis tools to identify popular password trends and support the creation of secure credentials. The project provides password frequency wordlists and security research wordlists, including common usernames and top-level domains. It includes password recovery datasets featuring character masks and rule sets designed to analyze vulnerability patterns. The repository covers a broad range of
Provides real-world credential lists used to test the resilience of passwords against brute-force attacks.
CUPP is a suite of tools for extracting default credentials from aggregated databases, generating password dictionaries from personal data, profiling targets interactively, and expanding wordlists from dictionary sources. It functions as a password dictionary generator and target profiling tool that collects personal details through interactive questions to build custom password lists for security testing. The project distinguishes itself through a modular command pipeline architecture that chains independent subcommands for downloading remote wordlists, parsing structured credential database
Builds custom wordlists from personal details about a target for password cracking.
Patator est un outil de force brute polyvalent et un framework de sécurité modulaire utilisé pour tester les identifiants, découvrir les services réseau et fuzzing les protocoles réseau via la livraison automatisée de charges utiles. Il fonctionne comme un framework d'épuisement des identifiants et un fuzzer de protocole réseau. Le projet fournit des utilitaires spécifiques pour récupérer des mots de passe à partir d'archives ZIP chiffrées, énumérer les zones DNS via des requêtes directes et inverses, et identifier des noms d'utilisateur et mots de passe valides à travers les protocoles réseau courants. Ses capacités plus larges incluent le fuzzing d'endpoints web, le sondage de services réseau et l'énumération d'utilisateurs en analysant les réponses aux protocoles, les messages d'erreur ou les délais de temporisation.
Recovers passwords from encrypted ZIP archives by testing a series of payload combinations.
Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe
Extracts text from social feeds to create custom password cracking dictionaries.
This project is a steganography analysis toolkit and digital forensics suite designed to detect, extract, and embed hidden data within image and audio files. It provides a dockerized security environment that bundles various analysis tools into a containerized workspace, including a media spectrogram visualizer for revealing visually hidden patterns. The toolkit features a dedicated brute force system for recovering password-protected messages using automated wordlists and candidate password testing. It distinguishes itself by providing rule-based wordlist generation that uses expansion patte
Implements rule-based generation, expansion patterns, and scraping to create custom wordlists for password recovery.
This project is a wireless network security toolkit designed for monitoring wireless traffic and exploiting vulnerabilities in network authentication protocols. It provides a suite of tools for scanning networks, capturing authentication handshakes, and testing the security of wireless access points. The toolkit includes a password wordlist generator to create custom lists for offline key recovery and a handshake cracker to recover encrypted keys using brute-force methods. It also features a vulnerability scanner specifically for testing the security of the Wireless Protected Setup pin system
Creates custom lists of potential password candidates for network key recovery.