Awesome GitHub RepositoriesCredential Brute-Forcing

SecLists is a centralized library of security assessment data designed to support vulnerability discovery and penetration testing. It functions as a comprehensive repository of wordlists, payloads, and testing methodologies used to audit software, firmware, and internet-connected hardware for technical vulnerabilities. The project distinguishes itself through a standardized taxonomy and a language-agnostic data format, which allows security tools to predictably ingest and utilize its assets regardless of the underlying programming environment. By decoupling raw testing data from execution log

Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

Fscan is an automated penetration testing tool designed for internal network reconnaissance and vulnerability assessment. It functions as a comprehensive security framework that maps network infrastructure, identifies active hosts and services, and detects security weaknesses across internal environments. The tool distinguishes itself through a modular plugin architecture that allows for extensible security checks and a stateful asset tracking system that maintains an in-memory registry of discovered infrastructure. It incorporates a dedicated credential brute-force engine for testing passwor

RouterSploit is an embedded device exploitation framework and vulnerability scanner designed to identify and exploit security flaws in networked embedded hardware and firmware. It provides a centralized toolkit for scanning for known weaknesses and common misconfigurations to gain unauthorized system access. The framework includes an architecture-specific payload generator to create custom binary payloads tailored to the target hardware. It also features an automated brute force tool that uses dictionary-based credential guessing to bypass authentication on hardware devices. The tool covers

fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram

Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords through automated brute-force and dictionary attacks. It serves as a multi-protocol authentication tester capable of verifying credentials across a wide range of remote network services, including SSH, SMB, FTP, and various database listeners. The project is distinguished by its ability to execute parallelized password attacks against multiple servers and protocols simultaneously. It features a modular system for implementing diverse network authentication schemes, allowing f

Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate reconnaissance, vulnerability scanning, and exploit verification. It functions as a dockerized security toolkit that coordinates multiple tools into a unified automated pipeline to identify security flaws across network and web assets. The platform features an attack surface manager for discovering internet-facing assets through OSINT, DNS enumeration, and certificate transparency. It distinguishes itself with an AI-powered security analyzer that uses large language models to summarize scan

This repository contains the source code for a C-based network botnet designed to compromise Internet of Things devices. It serves as a functional implementation of malware used for security research, behavioral analysis, and the development of threat detection signatures. The project includes a command and control server architecture that manages infected devices via a custom binary protocol and TCP-based command distribution. It employs a cross-compilation toolchain to build and deliver architecture-specific binary payloads across multiple hardware platforms. The codebase covers capabiliti

fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides collections of strings and payloads used to discover hidden files, subdomains, and security vulnerabilities. The project includes specialized libraries for different security testing vectors, such as dictionaries for common request and cookie parameters, lists of common subdomain prefixes, and collections of passwords and default vendor credentials for brute-force testing. It also maintains a security payload library containing character sequences used to identify flaws like SQL i

Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover hidden resources, parameters, and vulnerabilities. It functions as a content discovery scanner, a brute-force tool for credential guessing, and a plugin-based vulnerability scanner, all within a single modular system. The tool distinguishes itself through its plugin-based extensibility, allowing custom Python modules to add new payload sources, output printers, or scanning logic without modifying core code. It supports concurrent request dispatch using thread-based parallelism

Bjorn is a penetration testing framework that automates network scanning, credential brute-forcing, vulnerability assessment, and data exfiltration, all coordinated through an event-driven task pipeline and controlled via a web-based dashboard. Its modular plugin architecture allows independent security modules to be loaded and chained together, with an asynchronous network scanner discovering live hosts and open ports without blocking the main execution flow. The framework distinguishes itself by integrating a credential brute-force engine that systematically attempts login combinations agai

Ladon 是一款内网渗透扫描器和漏洞评估工具，旨在识别跨网段的高风险安全漏洞和资产。它作为一款无文件安全扫描器，直接在内存中执行引擎和模块，从而避免在目标系统上留下磁盘痕迹。 该项目的特色在于作为 Cobalt Strike 框架中命令信标（Beacon）的插件集成。这实现了内存驻留的网络发现和漏洞检测。它还通过载荷和脚本混淆，以及绕过终端检测与响应（EDR）系统的技术，支持隐蔽操作。 该工具提供了一套全面的后渗透功能，包括凭据审计、提取，以及用于域渗透的 Kerberos 攻击执行。它通过多协议扫描和服务指纹识别来处理资产发现，以识别操作系统和 Web 技术。此外，它还支持横向移动自动化、权限提升以及远程代码执行载荷的部署。 该框架通过插件架构实现扩展，允许动态加载外部程序集或脚本，以添加自定义扫描模块和概念验证（PoC）。

Nettacker 是一个自动化渗透测试框架，旨在编排侦察、端口扫描和漏洞检测。它作为一个网络侦察工具和漏洞扫描器，能够识别开放端口、指纹识别服务，并根据已知安全漏洞数据库检查系统。 该框架的独特之处在于结合了用于通过模糊测试发现隐藏路径的 Web 应用爬虫，以及一个将扫描结果持久化到数据库以跟踪历史评估的漏洞管理系统。它还包含子域名枚举、凭据暴力破解以及通过代理路由流量以实现匿名化的专业功能。 该系统涵盖了广泛的安全能力，包括网络资产发现、多协议服务审计和配置审计。它支持跨 IP 范围和 CIDR 块的多目标扫描，并提供多种格式的安全报告生成工具。 通过基于 REST 的接口可实现程序化控制，从而将该框架集成到安全流水线和自动化流程中。

Blasting Dictionary 提供了一套精选的常用用户名和密码数据集，旨在用于审计身份验证强度和识别易受攻击的账户。它是一个凭据填充（Credential Stuffing）字典和密码攻击词库的集合，用于测试目标服务中是否存在弱密码或默认凭据。 该项目通过提供模拟暴力破解和凭据填充攻击所需的数据集，促进了安全渗透测试和漏洞评估。这些资源可用于评估身份验证系统的安全性，并识别易受未经授权访问的服务。 该工具集涵盖了通过自动化测试进行的凭据审计，并提供攻击词库以识别目标服务上的不安全登录凭据。

AllHackingTools is a security tool orchestrator and suite designed to install, update, and manage a wide array of third-party hacking and security utilities from a single command interface. It functions as a centralized hub for network analysis, open source intelligence, penetration testing, and social engineering tools. The project provides specialized frameworks for gathering open source intelligence and searching for user profiles across social platforms. It includes toolkits for network reconnaissance, vulnerability scanning, and the execution of security exploits, as well as a social eng

Cameradar is a network scanning tool designed to discover publicly accessible IP cameras. It identifies active Real Time Streaming Protocol services by scanning IP ranges and using device fingerprints to determine specific hardware models. The tool performs security auditing through dictionary-based probing and brute force attacks to uncover valid streaming paths and authentication credentials. It validates discovered streams by verifying the receipt of real-time transport protocol data packets to eliminate false positives. The system supports a multi-stage discovery pipeline and can export

该项目是一个安全审计和渗透测试工具，旨在自动化 Instagram 上的密码猜测、撞库和账户暴力破解。它充当账户恢复审计员，模拟自动化登录攻击以测试账户密码的强度。 该工具包含一个代理管理器，用于处理代理列表的导入和监控。该系统通过轮换 IP 地址路由请求，并监控代理健康状况以剔除无响应的地址并避免速率限制。 该软件提供了并发请求执行和自动化会话处理的功能，以模拟真实的浏览器请求。它支持候选密码的迭代测试，并使用字典攻击来评估账户漏洞。

Rubeus is a comprehensive Kerberos attack toolkit for Active Directory environments, written in C#. It provides a full suite of operations for manipulating Kerberos tickets, exploiting delegation configurations, and performing credential attacks against Windows domains. The toolkit enables ticket extraction from logon sessions and memory, with real-time monitoring via Event Tracing for Windows. It supports forging golden and silver tickets with arbitrary privileges, as well as the creation of forged delegation contexts. Delegation attacks include abuse of constrained and unconstrained delegat

CDK 是一套专门用于容器安全审计、容器逃逸利用和云基础设施渗透测试的工具集。它提供了一系列脚本和工具，旨在识别和利用容器运行时的漏洞，以突破隔离环境并在底层主机操作系统上执行命令。 该项目具有专门的 Docker 运行时利用套件，用于滥用 Docker API、procfs 和 cgroups 以获得未经授权的主机级访问。它包括通过 LXCFS、用户命名空间利用和主机磁盘挂载绕过隔离的特定技术，以及用于提取云元数据和审计服务帐户权限以在集群环境中提升权限的功能。 该工具包涵盖了广泛的安全审计功能，包括用于机密泄露和策略分析的 Kubernetes 集群审计、敏感文件和服务扫描，以及主机网络共享的检测。它还提供了用于建立反向 shell、在受限环境中部署有效载荷以及在最小容器内安装系统管理工具的实用程序。

Pikachu 是一个 Web 安全培训平台和易受攻击的 Web 应用沙盒。它提供了一个容器化的实验环境，旨在练习渗透测试和识别常见的安全漏洞。 该项目作为 OWASP Top 10 练习实验室，提供了一套针对关键风险的模拟套件。它包括用于练习 SQL 注入、跨站脚本 (XSS)、远程代码执行和失效的访问控制等漏洞利用的具体场景。 该环境涵盖了广泛的安全测试模拟，包括目录遍历、服务端请求伪造 (SSRF)、不安全的文件上传和 XML 外部实体 (XXE) 攻击。它还具有一个管理后台，用于管理钓鱼模拟并监控捕获的会话负载。 整个平台通过容器化镜像部署，该镜像会自动初始化数据库模式并使用种子数据填充环境。