Scriptable network authentication cracker
-
Updated
Dec 19, 2023 - Rust
Scriptable network authentication cracker
A .NET Standard library for pentesting web apps against credential stuffing attacks.
A database for storing, querying and doing stats on credential leaks
Instagram Penetration Testing and 2FA Detection
Terminal based credential stuffing tool. Easy to build configs.
The most comprehensive wordlist generation toolkit for pentest, red team, and security research. 25 subcommands: charset, profile, corp-users, default-creds, password-dna, DNS fuzzing, web scraping, ISP keygen, ICS/SCADA credentials, ML training, pipal analysis, and more. Python 3.8+ | pip install wfh-wordlist
This script looks at a Email:password wordlist and Then attempts to locate the Imap server for the domains remaining. If a imap server responds the script will try to login via imap; if successful a hit will be logged in your results text file.
⚙️ Silverbullet Configs
A MyBB extension to reject breached passwords.
Check for breached passwords with k-anonymity
A tool to generate realistic looking email:pass combinations
Cred_Harvester_Stuffer makes a HTTP POST request to a given URL with randomly generated creds.
🔓 CLI tool to decrypt backup files exported from Bitwarden. This application is not affiliated with Bitwarden, Inc.
🔐 Credential stuffing attack tools | Automated login testing | NullSec Framework | @anonantics
Broken Authentication Lab This lab provides a hands-on demonstration of credential stuffing (using Postman +weakpass) and session hijacking (via low-entropy session IDs) against a vulnerable login.php app.
Testing & evaluating password strength using passwordmeter.com analyzing complexity, attacks & best practices | Elevate Labs Cybersecurity Internship Task 6
A Python script that parses and deduplicates credential dumps
Python-скрипт для перебора паролей phpMyAdmin с динамическим обходом защиты CSRF.
SecureAura is a Dockerized microservices framework that defends authentication endpoints from timing-based side-channel attacks.
Add a description, image, and links to the credential-stuffing topic page so that developers can more easily learn about it.
To associate your repository with the credential-stuffing topic, visit your repo's landing page and select "manage topics."