DefaultCreds-cheat-sheet
mongoaudit
| DefaultCreds-cheat-sheet | mongoaudit | |
|---|---|---|
| 2 | 1 | |
| 5,266 | 1,308 | |
| - | 0.1% | |
| 7.5 | 0.0 | |
| 7 days ago | about 1 year ago | |
| Python | Python | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
DefaultCreds-cheat-sheet
- Database of default usernames and passwords?
-
Wordlists
If looking for a tool that searching default creds : https://github.com/ihebski/DefaultCreds-cheat-sheet
mongoaudit
What are some alternatives?
SecLists - SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
faraday - Open Source Vulnerability Management Platform
my-wordlists - wordlists i use for testing security/security testing or whatever you want to call it
PyCript - Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty
swaggerHole - A python3 script searching for secret on swaggerhub
rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
mssql-spider - Automated exploitation of MSSQL servers at scale
powershell_commands - Personal sheet for PowerShell 🧢
weird_proxies - Reverse proxies cheatsheet
Villain - Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).