Tools

joaovdonaton/hashcracker

Python-based hash cracker supporting SHA512, SHA256, SHA1, MD5, and more. Features auto-detection of hash type, bruteforce, and password list modes…

tismayil/password-generator

-> Password List Generator for Brute Force.

0xblarky/nextpass

A tool which can be used to generate password list or dictionary from the details of the target

focused.hunts/the.vault

Privacy-first password manager with local storage and bring-your-own-cloud sync across Google Drive, Microsoft OneDrive, and Dropbox. Your…

redsplit/shiguresh

CVE-2004-1769 // Mass cPanel Reset password

randomrobbiebf/grafana-bruteforce

Grafana Bruteforce tool

rek7/descrypt-cpu-collision-cracker

DEScrypt CPU Collision Cracker

dejanlevaja/wpbf

WPBF - a multithreaded WP brute forcer

alewong/webminrce-exp-cve-2019-15107-

Remote Code Execution Vulnerability in Webmin

0xwhoami35/cve-2023-23752

Authentication bypass exploit for Joomla CVE-2023-23752 that leaks administrator credentials and MySQL configuration from vulnerable versions…

hashcat/hashcat

World's fastest and most advanced password recovery utility

alexkaos32/hunterscrape

Python script that uses the hunter.io API to scrape email addresses from a target domain, generating a target list for password spraying attacks.

n0kovo/awesome-password-cracking

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

eqstlab/cve-2026-72898

Unauthenticated blind SQL injection exploit for Metabase, exploiting a raw SQL injection in the password reset endpoint to extract data via…

r3vpwnx/cve-2025-58434

Exploit chain for Flowise 3.0.5: unauthenticated account takeover via password-reset token disclosure (CVE-2025-58434) chained to CustomMCP…

mananispiwpiw/cve-2025-58434-poc

CVE-2025-58434 Proof of Concept

frizb/wordlistgen

Super Simple Python Word List Generator for Fuzzing and Brute Forcing in Python