MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: $ apt-get install python3-pip Mac $ ruby -e "$curl -fsSL...

CVE-2015-7755-POC

CVE-2015-7755-POC CVE-2015-7755 vulnerability detection using ssh to connect those vulnerable version: ScreenOS 6.2.0r15—6.2.0r18，6.3.0r12—6.3.0r20 Juniper Networks user: root passwd: %sun='%s' = %u...

zerologon

CVE-2020-1472 aka Zerologon Exploit POC What is it? NetLogon MS-NRPC, can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. Notes: DC will be semi broken while password is zero'ed out, however this...

vortex

🚩 This is the public repository of vortex, for latest version and updates please consider supporting us through https://porchetta.industries/ Vortex VPN Overall Reconnaissance, Testing, Enumeration and Exploitation Toolkit 🚩 Sponsors If you want to sponsors this project and have the latest update...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...

openwifipass

OpenWifiPass تنفيذ مفتوح المصدر لدور المانح في بروتوكول مشاركة كلمة مرور Wi-Fi من Apple. إخلاء مسؤولية OpenWifiPass هو برنامج تجريبي وهو نتاج جهود الهندسة العكسية من قبل مشروع Open Wireless Link. يخدم الكود أغراضًا توثيقية وتعليمية فقط. إنه غير مختبر و غير مكتمل. على سبيل المثال، لا يتحقق الكود م...

-CVE-2019-9053

CVE-2019-9053 This repository contains the corrected code for CVE: 2019-9053 How to use this? Inside the terminal you can deploy this by python3 exploit2019.py this will ask you to add the URL etc.. after it starts running u can follow those steps to run it and get the Username and Password...

XSS2Shell

XSS2Shell XSS2Shell est une preuve de concept éducative pour CVE-2026-64638 , démontrant l'impact d'un problème de XSS avant authentification dans des installations WordPress vulnérables. Avec la participation explicite d'un administrateur, la preuve de concept capture un mot de passe d'applicati...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

kraker

حول الإعداد الخادم الإعداد الوكيل الإعداد بناء من المصدر استخدام الإصدار جهات الاتصال حول Kraker هو نظام توزيعي لتكسير كلمات المرور بالقوة الغاشمة يتيح لك تشغيل وإدارة hashcat على خوادم ومحطات عمل مختلفة، مع التركيز على سهولة الاستخدام. كان هناك هدفان رئيسيان أثناء التصميم والتطوير: إنشاء أبسط أد...

CVE-2024-48887-Exploit

CVE-2024-48887-Unverified Password Change CWE-620 Overview An unverified password change vulnerability in Fortinet FortiSwitch GUI that allows a remote unauthenticated attacker to change admin passwords via a specially crafted request Exploit: Download here Details CVE ID : CVE-2024-48887 Publish...

restic

Introduction restic est un programme de sauvegarde rapide, efficace et sécurisé. Il prend en charge les trois principaux systèmes d'exploitation Linux, macOS, Windows et quelques autres moins répandus FreeBSD, OpenBSD. Pour des instructions détaillées d'utilisation et d'installation, consultez la...

CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Weak password encryption Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing user passwords uses AES algorith...

CVE-2024-48887-FortiSwitch-Exploit

CVE-2024-48887-FortiSwitch-Exploit 🚨 FortiSwitch CVE-2024-48887 PoC JavaScript 🚨 🔥 Just dropped a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints. 🛠️ About the Vulnerability: An attacker can craft a simpl...

Poc-CVE-2024-57040

Poc-CVE-2024-57040 CVE-2024-57040 is a security vulnerability found in certain TP-Link TL-WR845N router models. Specifically, it involves a "hardcoded" password for the router's root account. This means a default, unchanging password is built into the router's software. Affected Devices: The...

Locky

Locky يولّد Locky كلمات مرور "قوية" حقًا وسهلة التذكر. تتميز كلمات المرور التي يولّدها Locky بالخصائص التالية: 20+ حرفًا إنتروبيا عالية حقًا سهلة التذكر حشو بين الكلمات عنصر مخصص اسم وبالتالي لا يمكن اختراق كلمات المرور بالقوة الغاشمة، ولا يمكن تخمينها ولا يمكن نسيانها. التوافق Locky متوافق مع...

stegcrack

Stegcrack Stegcrack is an open-source program for exploiting a vulnerability in Steghide specifically CVE-2021-27211. Stegcrack detects whether a given file contains data hidden with Steghide, and can sometimes fully extract the hidden data, all with no password. Installation Clone this repositor...

WordListGen

WordListGen Super Simple Python Word List Generator for Password Cracking Hashcat! I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script is fully...

CVE-2025-46047

CVE-2025-46047 Silverpeas = 6.4.2 تعداد أسماء المستخدمين PoC نص برمجي لبرهان المفهوم PoC لإظهار ثغرة تعداد أسماء المستخدمين في إصدارات Silverpeas 6.4.1 و6.4.2. تفاصيل الثغرة البرنامج المتأثر: Silverpeas الإصدارات المتأثرة: 6.4.1، 6.4.2 وربما إصدارات أقدم الإصدار المُصحَّح: 6.4.3 نوع الثغرة: تعداد...

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: FortiOS get system status FortiOS exit Reset admin password: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! Developer Telegram: @chernyzhizn Disclaimer: This tool is provided for educational and authorized testing purposes...