Blasting Dictionary 提供了一套精选的常用用户名和密码数据集,旨在用于审计身份验证强度和识别易受攻击的账户。它是一个凭据填充(Credential Stuffing)字典和密码攻击词库的集合,用于测试目标服务中是否存在弱密码或默认凭据。
rootphantomer/blasting_dictionary 的主要功能包括:Wordlists, Credential Stuffing, Password Attacks, Credential Vulnerability Assessments, Penetration Testing Resources, Security Testing Datasets, Credential Brute-Forcing, Credential Testing Tools。
rootphantomer/blasting_dictionary 的开源替代品包括: bitwise-01/instagram- — This project is a security auditing and penetration testing utility designed for automating password guessing,… thekingofduck/fuzzdicts — fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides… manisso/fsociety — fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits.… vanhauser-thc/thc-hydra — Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords… hashcat/hashcat — Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text… offensive-security/exploit-database — This project is a public exploit code archive and vulnerability database. It serves as a collection of documented…
fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides collections of strings and payloads used to discover hidden files, subdomains, and security vulnerabilities. The project includes specialized libraries for different security testing vectors, such as dictionaries for common request and cookie parameters, lists of common subdomain prefixes, and collections of passwords and default vendor credentials for brute-force testing. It also maintains a security payload library containing character sequences used to identify flaws like SQL i
This project is a security auditing and penetration testing utility designed for automating password guessing, credential stuffing, and account brute-forcing on Instagram. It functions as an account recovery auditor that simulates automated login attacks to test the strength of account passwords. The tool incorporates a proxy manager to handle the import and monitoring of proxy lists. This system routes requests through rotating IP addresses and monitors proxy health to prune unresponsive addresses and avoid rate limiting. The software provides capabilities for concurrent request execution a
fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram
Hydra is a network login password cracker and authentication tester designed to identify valid usernames and passwords through automated brute-force and dictionary attacks. It serves as a multi-protocol authentication tester capable of verifying credentials across a wide range of remote network services, including SSH, SMB, FTP, and various database listeners. The project is distinguished by its ability to execute parallelized password attacks against multiple servers and protocols simultaneously. It features a modular system for implementing diverse network authentication schemes, allowing f