Wordlists handcrafted (and automated) with ♥
☆237Aug 1, 2025Updated last year
Alternatives and similar repositories for brutas
Users that are interested in brutas are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆38May 5, 2024Updated 2 years ago
- Roast in the Middle☆295Sep 17, 2026Updated last month
- Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!☆1,426Updated this week
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- Identify virtual hosts by similarity comparison☆141Mar 18, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- Rockyou for web fuzzing☆3,267Sep 22, 2026Updated 3 weeks ago
- ☆383May 17, 2023Updated 3 years ago
- Real-world infosec wordlists, updated regularly☆1,802Updated this week
- Python script to launch burp scans automatically☆32Jul 18, 2021Updated 5 years ago
- Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).☆199Sep 19, 2022Updated 4 years ago
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,300Mar 19, 2025Updated last year
- Leveraging GitHub Actions to rotate IP addresses during password spraying attacks to bypass IP-Based blocking☆152May 23, 2024Updated 2 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆495Oct 14, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆16Jan 9, 2025Updated last year
- A modular URL deduplication tool.☆18Feb 19, 2025Updated last year
- Alternative to XSS Hunter for blind XSS.☆51Dec 8, 2022Updated 3 years ago
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆818Jun 16, 2026Updated 4 months ago
- bypass-url-parser☆1,138Oct 10, 2026Updated last week
- ☆12Aug 1, 2022Updated 4 years ago
- Generate graphs and charts based on password cracking result☆167Feb 17, 2023Updated 3 years ago
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- The format of various s3 buckets is convert in one format. for bugbounty and security testing.☆92May 6, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆93Aug 23, 2021Updated 5 years ago
- A tool to enumerate and download files from the System Center Configuration Manager (SCCM) SMB share (SCCMContentLib)☆21Jul 27, 2024Updated 2 years ago
- Utility for creating ZipSlip archives☆98Feb 9, 2023Updated 3 years ago
- Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.☆1,327Jul 3, 2026Updated 3 months ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆258May 17, 2022Updated 4 years ago
- Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information☆79Jul 30, 2026Updated 2 months ago
- ☆523Jun 5, 2023Updated 3 years ago
- AAD related enumeration in Nim☆133Sep 7, 2023Updated 3 years ago
- An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer☆749May 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A python script to scan for Apache Tomcat server vulnerabilities.☆892Jan 12, 2026Updated 9 months ago
- Maximizing BloodHound. Max is a good boy.☆534Apr 25, 2025Updated last year
- Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)☆981Nov 4, 2025Updated 11 months ago
- This includes all the templates of nuclei collected from different sources☆18Dec 30, 2022Updated 3 years ago
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆580Jun 5, 2023Updated 3 years ago
- A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.☆1,377Mar 6, 2026Updated 7 months ago