Common User Passwords Profiler (CUPP)
☆5,800Dec 26, 2025Updated 2 months ago
Alternatives and similar repositories for cupp
Users that are interested in cupp are comparing it to the libraries listed below
Sorting:
- Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can outpu…☆1,962Nov 17, 2025Updated 3 months ago
- CeWL is a Custom Word List Generator☆2,592Feb 20, 2026Updated 3 weeks ago
- A powerful and useful hacker dictionary builder for a brute-force attack☆3,590Dec 5, 2024Updated last year
- Impacket is a collection of Python classes for working with network protocols.☆15,515Mar 5, 2026Updated last week
- A swiss army knife for pentesting networks☆9,093Dec 6, 2023Updated 2 years ago
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆69,337Updated this week
- Nishang - Offensive PowerShell for red team, penetration testing and offensive security.☆9,787Apr 25, 2024Updated last year
- Scripted Local Linux Enumeration & Privilege Escalation Checks☆7,852Sep 6, 2023Updated 2 years ago
- E-mails, subdomains and names Harvester - OSINT☆15,772Updated this week
- PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)☆19,424Updated this week
- PowerSploit - A PowerShell Post-Exploitation Framework☆12,900Aug 17, 2020Updated 5 years ago
- The ultimate WinRM shell for hacking/pentesting☆5,268Feb 20, 2026Updated 3 weeks ago
- Username tools for penetration testing☆1,334Sep 20, 2024Updated last year
- Fast web fuzzer written in Go☆15,723Apr 24, 2025Updated 10 months ago
- Web application fuzzer☆6,434Jan 21, 2026Updated last month
- Fast subdomains enumeration tool for penetration testers☆10,849Aug 2, 2024Updated last year
- Credentials recovery project☆10,702Sep 18, 2025Updated 5 months ago
- EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.☆5,655Jan 5, 2026Updated 2 months ago
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆75,937Updated this week
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆6,361Jan 26, 2026Updated last month
- Attack Surface Management Platform☆9,449Feb 15, 2026Updated 3 weeks ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆3,213Aug 7, 2025Updated 7 months ago
- Monitor linux processes without root permissions☆5,913Mar 1, 2026Updated last week
- Web path scanner☆14,065Feb 20, 2026Updated 3 weeks ago
- Linux privilege escalation auditing tool☆6,407Feb 19, 2026Updated 3 weeks ago
- A Tool for Domain Flyovers☆5,904May 22, 2022Updated 3 years ago
- Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of …☆14,700Oct 6, 2025Updated 5 months ago
- WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.☆6,224Jan 27, 2026Updated last month
- Empire is a PowerShell and Python post-exploitation agent.☆7,821Jan 19, 2020Updated 6 years ago
- Veil 3.1.X (Check version info in Veil at runtime)☆4,209Oct 9, 2023Updated 2 years ago
- Six Degrees of Domain Admin☆10,547Mar 2, 2026Updated last week
- A tool to perform Kerberos pre-auth bruteforcing☆3,258Aug 20, 2024Updated last year
- This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on th…☆4,174May 11, 2023Updated 2 years ago
- A little tool to play with Windows security☆21,316May 11, 2025Updated 10 months ago
- Automated All-in-One OS Command Injection Exploitation Tool☆5,661Updated this week
- Trying to tame the three-headed dog.☆4,913Nov 14, 2025Updated 3 months ago
- This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.☆10,170Sep 29, 2025Updated 5 months ago
- In-depth attack surface mapping and asset discovery☆14,222Updated this week
- Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?☆417Jun 23, 2021Updated 4 years ago