Captive Portal. A Hotspot or Evil twin which redirects the clients to login page to enter credentials. Simple and easy to use with less bugs.

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.

sshd-poison is a tool that modifies a sshd binary to capture password-based authentications and allows you to login in some accounts using a magic-pass.

Passwords Recovery Tool

Invoke-KleptoKitty - Deploys Payloads and collects credentials

Hard-to-detect facebook clone webpage that stores victim credentials in either a file or a database

Programmatically extract saved passwords from Chromium based browsers.

Tool to search secrets in network shares, support SMB FTP or SFTP.

Go library for credentials recovery

Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets

convert secret patterns to gf compatible.

Man in the browser attack is all about stealing credentials from sites running in internet-explorer by forcing user to logout and then again logIn.

GitHub Secret Hunter - Helps you find credentials and sensitive contents in public GitHub repositories

A C# implementation of dumping credentials from Windows Credential Manager

💨 SUPER SONIC WORDPRESS CHECKER

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

Leaky simplifies the management and visualization of database leak files containing credentials, enhancing efficiency in data analysis and redteam operations.

Web browser credential thief for Windows