CVE-2019-16113

Bludit 3.9.2 - Remote command execution - CVE-2019-16113 This exploit combines two exploits in Bludit CMS 3.9.2 to gain remote code execution on the target system. The original exploits are CVE-2019-17240 & CVE-2019-16113. Features Bruteforce password + RCE Bruteforce username:password + RCE...

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

Oh365UserFinder

Oh365 User Finder v1.1.2 Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify...

pre2k

/'\ /\ \ /\ /\ \ \ /'\ /\ '/'/'\ //// /\ \ , \ \ \L\ \ \ //\ //\ // /\ \ \ \\ \ \ ,/\ \\ \// // \ \ \ \ \ / // // // //// \ \ v3.0 // @unsignedsh0rt @Tw1sm Pre2k Pre2k est un outil permettant de vérifier l'existence d'objets informatiques antérieurs à Windows 2000, qui...

Pwdlyser

Pwdlyser Nouveau dépôt pour la version publique Pwdlyser P assw ord -Analyser est un outil d'analyse multifonctionnel créé pour offrir aux professionnels de la sécurité et aux organisations souhaitant améliorer leur posture de sécurité la capacité de revoir et d'analyser facilement les mots de...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

CVE_2020_35848

🧨 CVE‑2020‑35848 – Cockpit CMS 0.11.2 NoSQL Injection RCE Lab CVE‑2020‑35848 affects Agentejo Cockpit CMS versions before 0.11.2, introducing a critical NoSQL injection vulnerability in the /auth/newpassword endpoint. This flaw allows unauthenticated attackers to inject MongoDB operators into...

Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...

spraykatz

Spraykatz Spray love around the world Index Title| Description ---|--- About| Brief Description about the tool Installation| Installation and Requirements Usage| How to use Spraykatz Changelog| Spraykatz changelog Acknowlegments| Acknowlegments About Spraykatz is a tool without any pretention abl...

linset

Linset ليست أداة هندسة اجتماعية بادئ ذي بدء، تم التعليق على أن هذا المشروع لأغراض تعليمية خدمتني وآملين أن تخدم الآخرين للتواصل أكثر مع عالم البرمجة والشبكات اللاسلكية. يحظر تحت أي ظرف من الظروف استخدام هذه الأداة في شبكات لاسلكية أجنبية! كيف يعمل مسح الشبكات. اختيار الشبكة. 3. التقاط المصافحة يم...

CVE-2020-24029

CVE-2020-24029 الوصف بسبب تغييرات كلمة المرور غير المصادَق عليها في ForLogic Qualiex الإصدار 1 والإصدار 3، يمكن الوصول إلى صلاحيات وبيانات العميل والمسؤول عبر طلب بسيط. تواريخ مهمة الإعلان للبائع: 2020-07-12 تاريخ الكشف العام: 2020-08-31 نوع الثغرة التحكم غير الصحيح في الوصول بائع المنتج ForLogic...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux apt install...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

credmap

credmap: مخطط بيانات الاعتماد Credmap هي أداة مفتوحة المصدر تم إنشاؤها للتوعية بمخاطر إعادة استخدام بيانات الاعتماد. وهي قادرة على اختبار بيانات اعتماد المستخدم المقدمة على عدة مواقع معروفة لاختبار ما إذا كانت كلمة المرور قد أعيد استخدامها على أي منها. يمكن العثور على مقالة تعريفية رسمية هنا. قائ...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - تصعيد الامتيازات إصدار Perl من استغلال CVE-2013-1775 لـ Apple Mac OSX 10.8.4 - تصعيد الامتيازات. المراجع: https://www.exploit-db.com/exploits/27965/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb...

CVE-2026-89012

CVE-2026-89012 — Contournement de la liste de refus du filtre SQL de Dolibarr Exploit pour CVE-2026-89012 : la liste de refus des champs interdits dans forgeSQLFromUniversalSearchCriteria introduite avec le correctif CVE-2026-71510 utilise un inarray sensible à la casse alors que le jeu de...

pantagrule

Pantagrule gargantuan hashcat rulesets generated from compromised passwords Project maintenance warning : This project is deemed completed. No pull requests or changes will be made to this project in the future unless they are actual bugs or migrations to allow these rules to work with newer...

pantagrule

Pantagrule Règles hashcat gargantuesques générées à partir de mots de passe compromis Avertissement de maintenance du projet : Ce projet est considéré comme terminé. Aucune pull request ou modification ne sera apportée à ce projet à l'avenir, sauf s'il s'agit de bugs réels ou de migrations pour...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...