awesome-repositories.com
博客
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目关于排名机制媒体报道MCP 服务器
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
rootphantomer avatar

rootphantomer/Blasting_dictionary

0
View on GitHub↗
5,273 星标·2,847 分支·Python·1 次浏览

Blasting Dictionary

Blasting Dictionary 提供了一套精选的常用用户名和密码数据集,旨在用于审计身份验证强度和识别易受攻击的账户。它是一个凭据填充(Credential Stuffing)字典和密码攻击词库的集合,用于测试目标服务中是否存在弱密码或默认凭据。

该项目通过提供模拟暴力破解和凭据填充攻击所需的数据集,促进了安全渗透测试和漏洞评估。这些资源可用于评估身份验证系统的安全性,并识别易受未经授权访问的服务。

该工具集涵盖了通过自动化测试进行的凭据审计,并提供攻击词库以识别目标服务上的不安全登录凭据。

Features

  • Wordlists - Supplies curated collections of common usernames and passwords used for automated authentication testing.
  • Credential Stuffing - Provides the necessary datasets to simulate credential stuffing attacks against target services.
  • Password Attacks - Provides curated dictionaries of strings designed for automated brute force and dictionary attacks.
  • Credential Vulnerability Assessments - Identifies services vulnerable to unauthorized access by testing for easily guessable login credentials.
  • Penetration Testing Resources - Provides curated wordlists and datasets essential for conducting authentication-focused penetration testing.
  • Security Testing Datasets - Provides datasets of known vulnerable credentials for auditing login system strength.
  • Credential Brute-Forcing - Facilitates automated testing of login portals by attempting numerous password combinations to find weak credentials.
  • Credential Testing Tools - Enables the use of automated scripts to test target services against password lists to identify vulnerable credentials.
  • Dictionary Attack Authenticators - Implements a dictionary attack mechanism that iterates through a list of keys to test authentication endpoints.

Star 历史

rootphantomer/blasting_dictionary 的 Star 历史图表rootphantomer/blasting_dictionary 的 Star 历史图表

AI 搜索

探索更多 awesome 仓库

用简单的语言描述您的需求 —— AI 将根据相关性为您从数千个精选开源项目中进行排序。

Start searching with AI

常见问题解答

rootphantomer/blasting_dictionary 是做什么的?

Blasting Dictionary 提供了一套精选的常用用户名和密码数据集,旨在用于审计身份验证强度和识别易受攻击的账户。它是一个凭据填充(Credential Stuffing)字典和密码攻击词库的集合,用于测试目标服务中是否存在弱密码或默认凭据。

rootphantomer/blasting_dictionary 的主要功能有哪些?

rootphantomer/blasting_dictionary 的主要功能包括:Wordlists, Credential Stuffing, Password Attacks, Credential Vulnerability Assessments, Penetration Testing Resources, Security Testing Datasets, Credential Brute-Forcing, Credential Testing Tools。

rootphantomer/blasting_dictionary 有哪些开源替代品?

rootphantomer/blasting_dictionary 的开源替代品包括: bitwise-01/instagram- — This project is a security auditing and penetration testing utility designed for automating password guessing,… thekingofduck/fuzzdicts — fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides… manisso/fsociety — fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits.… vanhauser-thc/thc-hydra — Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords… hashcat/hashcat — Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text… offensive-security/exploit-database — This project is a public exploit code archive and vulnerability database. It serves as a collection of documented…

Blasting Dictionary 的开源替代方案

相似的开源项目,按与 Blasting Dictionary 的功能重合度排序。
  • thekingofduck/fuzzdictsTheKingOfDuck 的头像

    TheKingOfDuck/fuzzDicts

    8,355在 GitHub 上查看↗

    fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides collections of strings and payloads used to discover hidden files, subdomains, and security vulnerabilities. The project includes specialized libraries for different security testing vectors, such as dictionaries for common request and cookie parameters, lists of common subdomain prefixes, and collections of passwords and default vendor credentials for brute-force testing. It also maintains a security payload library containing character sequences used to identify flaws like SQL i

    Pythondirectoryfuzz-testingfuzzer
    在 GitHub 上查看↗8,355
  • bitwise-01/instagram-Bitwise-01 的头像

    Bitwise-01/Instagram-

    4,968在 GitHub 上查看↗

    This project is a security auditing and penetration testing utility designed for automating password guessing, credential stuffing, and account brute-forcing on Instagram. It functions as an account recovery auditor that simulates automated login attacks to test the strength of account passwords. The tool incorporates a proxy manager to handle the import and monitoring of proxy lists. This system routes requests through rotating IP addresses and monitors proxy health to prune unresponsive addresses and avoid rate limiting. The software provides capabilities for concurrent request execution a

    Pythonbruteforcehackinstagram
    在 GitHub 上查看↗4,968
  • manisso/fsocietyManisso 的头像

    Manisso/fsociety

    12,136在 GitHub 上查看↗

    fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram

    Pythonbrute-force-attacksdesktopexploitation
    在 GitHub 上查看↗12,136
  • vanhauser-thc/thc-hydravanhauser-thc 的头像

    vanhauser-thc/thc-hydra

    11,943在 GitHub 上查看↗

    Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords through automated brute-force and dictionary attacks. It serves as a multi-protocol authentication tester capable of verifying credentials across a wide range of remote network services, including SSH, SMB, FTP, and various database listeners. The project is distinguished by its ability to execute parallelized password attacks against multiple servers and protocols simultaneously. It features a modular system for implementing diverse network authentication schemes, allowing f

    C
    在 GitHub 上查看↗11,943
  • 查看 Blasting Dictionary 的所有 30 个替代方案→