☆70Jun 18, 2026Updated last month
Alternatives and similar repositories for Pentest-stuff
Users that are interested in Pentest-stuff are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all cleartext passwords and hashes to…☆209Oct 17, 2024Updated last year
- C# implementation of harmj0y's PowerView☆54Mar 22, 2020Updated 6 years ago
- GitLab User Enumeration☆73Jan 3, 2025Updated last year
- This script will bruteforce the credential of tomcat manager or host-manager☆40Jun 24, 2020Updated 6 years ago
- Joomla login bruteforce☆132Jul 18, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A simple splunk package for obtaining reverse shells on both Windows and most *nix systems.☆164Aug 20, 2018Updated 7 years ago
- Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion in Python3☆34Feb 27, 2023Updated 3 years ago
- Tool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.☆215Aug 7, 2025Updated last year
- This project aims to provide a comprehensive resource for understanding and testing Cross-Site Scripting (XSS) vulnerabilities, one of th…☆151Jan 10, 2026Updated 7 months ago
- Drupal < 7.58 - Drupalgeddon 3 Authenticated Remote Code Execution (Metasploit)☆42May 1, 2018Updated 8 years ago
- ☆21Aug 5, 2020Updated 6 years ago
- CVE-2025-8110 PoC☆30Dec 24, 2025Updated 7 months ago
- Write-ups and notes for Hack The Box Academy modules☆17Mar 17, 2024Updated 2 years ago
- Wordlists for creating statistically likely username lists for use in password attacks and security testing. Used for pentesting for over…☆1,384Feb 16, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OSINT Tool: Generate username lists for companies on LinkedIn☆1,817May 20, 2026Updated 2 months ago
- SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket☆978Jul 26, 2021Updated 5 years ago
- Kerberoast with ACL abuse capabilities☆677Dec 16, 2024Updated last year
- Plugins for Metasploit Framework☆499Jan 18, 2019Updated 7 years ago
- linikatz is a tool to attack AD on UNIX☆614May 30, 2026Updated 2 months ago
- WhiteWinterWolf's PHP web shell☆800Dec 2, 2017Updated 8 years ago
- Username guessing tool primarily for use against the default Solaris SMTP service. Can use either EXPN, VRFY or RCPT TO.☆168Apr 20, 2022Updated 4 years ago
- A unique automated LFi Exploiter with Bind/Reverse Shells☆315Jul 11, 2026Updated last month
- ☆175May 26, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.☆21Aug 9, 2026Updated last week
- Proof of Concept for CVE-2025-24367☆38Dec 8, 2025Updated 8 months ago
- Python script to enumerate users, groups and computers from a Windows domain through LDAP queries☆983Apr 20, 2022Updated 4 years ago
- Centralized docs of ProjectDiscovery☆26Aug 10, 2026Updated last week
- Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user☆1,020Jan 29, 2023Updated 3 years ago
- C# Data Collector for BloodHound☆1,327Aug 11, 2026Updated last week
- ☆161Jun 30, 2026Updated last month
- Extracts Key Values from .keytab files☆381Aug 26, 2020Updated 5 years ago
- ☆18Sep 12, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- CeWL is a Custom Word List Generator☆2,787Jun 24, 2026Updated last month
- ☆14Nov 16, 2024Updated last year
- All cheetsheets with main information from HTB CBBH role path in one place.☆126Mar 20, 2024Updated 2 years ago
- Username tools for penetration testing☆1,451Sep 20, 2024Updated last year
- Cheat Sheet☆87Jan 3, 2023Updated 3 years ago
- A tool inspired by sqlmap specifically for MongoDB Injection☆30Aug 16, 2020Updated 6 years ago
- A tool to perform Kerberos pre-auth bruteforcing☆3,418Aug 20, 2024Updated last year