A wordlist repository with human-curated and reviewed content.
☆143Sep 16, 2026Updated last month
Alternatives and similar repositories for Security-Wordlist
Users that are interested in Security-Wordlist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion in Python3☆36Feb 27, 2023Updated 3 years ago
- GitLab User Enumeration☆75Jan 3, 2025Updated last year
- Drupal < 7.58 - Drupalgeddon 3 Authenticated Remote Code Execution (Metasploit)☆43May 1, 2018Updated 8 years ago
- A simple splunk package for obtaining reverse shells on both Windows and most *nix systems.☆173Aug 20, 2018Updated 8 years ago
- Username tools for penetration testing☆1,498Sep 20, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- getsystem via parent process using ps1 & embeded c#☆518Oct 26, 2023Updated 3 years ago
- Username guessing tool primarily for use against the default Solaris SMTP service. Can use either EXPN, VRFY or RCPT TO.☆180Apr 20, 2022Updated 4 years ago
- ☆132Dec 13, 2019Updated 6 years ago
- ☆223Jan 12, 2026Updated 9 months ago
- Joomla login bruteforce☆141Jul 18, 2024Updated 2 years ago
- This script will bruteforce the credential of tomcat manager or host-manager☆41Jun 24, 2020Updated 6 years ago
- ☆345Jan 7, 2015Updated 11 years ago
- Extracts Key Values from .keytab files☆386Aug 26, 2020Updated 6 years ago
- Python script to decrypt passwords stored by mRemoteNG☆185Jul 6, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cmd.exe Command Obfuscation Generator & Detection Test Harness☆955Mar 27, 2018Updated 8 years ago
- A semi-interactive PHP shell compressed into a single file.☆1,116Feb 14, 2018Updated 8 years ago
- A Tool for Domain Flyovers☆139Nov 20, 2024Updated last year
- Use SE_BACKUP_NAME/SeBackupPrivilege to access objects you shouldn't have access to☆482Jul 29, 2013Updated 13 years ago
- All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications☆90Feb 21, 2019Updated 7 years ago
- Wordlists for creating statistically likely username lists for use in password attacks and security testing. Used for pentesting for over…☆1,433Feb 16, 2026Updated 8 months ago
- PowerShell-based security assessment script by cube0x0 for Windows and Active Directory environments.☆21Dec 22, 2025Updated 10 months ago
- .Net Assembly loader for the GMSAPasswordReader☆23Feb 15, 2023Updated 3 years ago
- Tools for Kerberos PKINIT and relaying to AD CS☆938Jan 3, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Wfuzz fork☆48Jan 10, 2025Updated last year
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- Shared wordlists used for common subdomains , directory bruteforcing etc.☆12Jun 23, 2026Updated 4 months ago
- Tunnel TCP connections through ICMP.☆625Nov 27, 2024Updated last year
- Python script to enumerate users, groups and computers from a Windows domain through LDAP queries☆994Apr 20, 2022Updated 4 years ago
- Small POC in powershell exploiting hardlinks during the VM deletion process☆58Jan 18, 2020Updated 6 years ago
- linikatz is a tool to attack AD on UNIX☆626May 30, 2026Updated 5 months ago
- Kerberoast with ACL abuse capabilities☆693Dec 16, 2024Updated last year
- a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )☆2,976Feb 27, 2026Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.☆2,013Sep 5, 2023Updated 3 years ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- ☆14Dec 5, 2024Updated last year
- Lists who can read any gMSA password blobs and parses them if the current user has access.☆389Feb 12, 2024Updated 2 years ago
- Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)☆179Jun 14, 2018Updated 8 years ago
- ☆16Jun 26, 2025Updated last year
- A super small jsp webshell with file upload capabilities.☆343Aug 20, 2021Updated 5 years ago