Awesome GitHub RepositoriesPassword Cracking Wordlists

该项目作为一个中心化的、社区驱动的技术知识和管理资源仓库。它提供了一个结构化的分类体系，将分散的信息聚合到一个可搜索的框架中，支持系统管理员和网络安全从业者的持续学习和快速问题解决。通过映射跨越进攻性安全、基础设施管理和软件开发的资源，它为技能获取和专业参考提供了统一路径。 该项目由命令行优先的设计理念定义，优先考虑基于终端的实用程序和可脚本化的接口，以促进高效的系统管理和可重复的安全工作流。它通过平台无关的方法脱颖而出，维护在不同类 Unix 和云环境中保持适用的文档和操作指南。这种模块化的工具链集成允许用户组合针对特定管理或安全任务定制的自定义环境。 该仓库涵盖了广泛的能力领域，包括用于系统审计、网络管理和基础设施加固的综合工具包。它为网络安全技能发展提供了结构化的学习路径，范围从道德黑客实验室和渗透测试标准到漏洞评估和系统配置最佳实践。该集合还包含广泛的生产力工具、诊断实用程序和教育材料，旨在简化日常维护并增强整体安全态势。

Hacker Roadmap is a community-driven repository that functions as a structured learning path and resource directory for cybersecurity and ethical hacking. It organizes complex security concepts into sequential modules, guiding users from fundamental knowledge to advanced technical exploitation skills through a curated collection of educational materials and professional development resources. The project distinguishes itself by acting as a centralized index that maps specialized third-party security software and isolated training environments to specific operational use cases. By aggregating

This project is a WPA Wi-Fi cracking toolkit designed for capturing authentication handshakes and recovering WPA/WPA2 passwords. It provides specialized utilities for scanning wireless networks, obfuscating hardware addresses, and generating password lists to facilitate security audits. The toolkit differentiates itself through a focused workflow that combines handshake capture tools with a password wordlist generator. It enables the interception of the four-way authentication process between wireless clients and access points and utilizes these captured credentials for recovery via dictionar

Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords through automated brute-force and dictionary attacks. It serves as a multi-protocol authentication tester capable of verifying credentials across a wide range of remote network services, including SSH, SMB, FTP, and various database listeners. The project is distinguished by its ability to execute parallelized password attacks against multiple servers and protocols simultaneously. It features a modular system for implementing diverse network authentication schemes, allowing f

Probable-Wordlists is a collection of curated data resources providing password frequency lists, character masks, and common identity identifiers for security research. These resources serve as credential analysis tools to identify popular password trends and support the creation of secure credentials. The project provides password frequency wordlists and security research wordlists, including common usernames and top-level domains. It includes password recovery datasets featuring character masks and rule sets designed to analyze vulnerability patterns. The repository covers a broad range of

CUPP is a suite of tools for extracting default credentials from aggregated databases, generating password dictionaries from personal data, profiling targets interactively, and expanding wordlists from dictionary sources. It functions as a password dictionary generator and target profiling tool that collects personal details through interactive questions to build custom password lists for security testing. The project distinguishes itself through a modular command pipeline architecture that chains independent subcommands for downloading remote wordlists, parsing structured credential database

Patator 是一个多用途暴力破解工具和模块化安全框架，用于通过自动化有效载荷交付来测试凭据、发现网络服务和模糊测试网络协议。它作为一个凭据穷举框架和网络协议模糊测试器。 该项目提供了用于从加密的 ZIP 存档中恢复密码、通过正向和反向查询枚举 DNS 区域，以及识别跨常见网络协议的有效用户名和密码的特定工具。 其更广泛的功能包括 Web 端点模糊测试、网络服务探测，以及通过分析协议响应、错误消息或计时延迟来进行用户枚举。

Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe

This project is a steganography analysis toolkit and digital forensics suite designed to detect, extract, and embed hidden data within image and audio files. It provides a dockerized security environment that bundles various analysis tools into a containerized workspace, including a media spectrogram visualizer for revealing visually hidden patterns. The toolkit features a dedicated brute force system for recovering password-protected messages using automated wordlists and candidate password testing. It distinguishes itself by providing rule-based wordlist generation that uses expansion patte

This project is a wireless network security toolkit designed for monitoring wireless traffic and exploiting vulnerabilities in network authentication protocols. It provides a suite of tools for scanning networks, capturing authentication handshakes, and testing the security of wireless access points. The toolkit includes a password wordlist generator to create custom lists for offline key recovery and a handshake cracker to recover encrypted keys using brute-force methods. It also features a vulnerability scanner specifically for testing the security of the Wireless Protected Setup pin system