passwordcheck

passwordcheck for rclone config files In https://github.com/rclone/rclone/issues/4783 a security issue was found which meant that passwords generated by "rclone config" might be insecure. This program checks your rclone config file for any of those passwords. Installation Download the relevant zi...

pantagrule

Pantagrule conjuntos de reglas hashcat gigantescos generados a partir de contraseñas comprometidas Advertencia de mantenimiento del proyecto : Este proyecto se considera completado. No se realizarán solicitudes de extracción ni cambios en este proyecto en el futuro a menos que sean errores reales...

vboxdie-cracker

Crackeador de contraseñas de cifrado de imágenes de disco de Virtual Box Requisitos 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 soporte XTS Descripción del algoritmo La contraseña del usuario se almacena usando una combinación de PBKDF2 y AES-XTS de la siguiente manera los valores mostrados están fijos por...

kraken

Advertencia He estado revisando el código de Kraken-Client y, como fue mi primera aplicación React, es antiguo, torpe y necesita una gran mejora el servidor también necesita algo de trabajo. En las próximas semanas/meses haré todo lo posible por reescribirlo en React actualizado o en otro...

msprobe

msprobe Acerca de Instalación Uso Ejemplos Próximamente Agradecimientos Acerca de Encontrando todo lo relacionado con Microsoft on-premises para pulverización de contraseñas y enumeración. La herramienta utilizará una lista de subdominios comunes asociados con tu dominio apex de destino para...

GitLab-CVE-2023-7028

GitLab CVE-2023-7028 — Mock 16.6.0 Host-only CVE-2023-7028 CVSS 10.0: POST /users/password accepted useremail array — server found user by email0 but sent the same reset token to every address → attacker with [email protected] hijacks [email protected]. Affected: GitLab CE/EE 16.5.6,...

automato

automato.rb automato utiliza bibliotecas LDAP nativas para automatizar la recolección y enumeración de varios objetos de directorio. Esto es increíblemente útil durante una prueba de penetración interna. automato también puede realizar ataques de pulverización de contraseñas e identificar si un...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

words-scraper

Words Scraper Web scraper basado en Selenium para generar listas de contraseñas. Instalación Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriver...

TeamPass

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub Contents About Who it's for Securit...

kcmd

kcmd - Kankun Sniffer and Hijacker Send encrypted ON/OFF commands to kankun smart sockets Sniff the commands on the network to extract password Copyright 2015 © Payatu Author: Aseem Jakhar aseematpayatudotcom Websites: www.payatu.com www.nullcon.net www.hardwear.io www.null.co.in This program is...

Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

CVE-2026-89283

The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...

CVE-2026-88785

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

brutto

brutto Fuerza bruta fácil para lo que quieras, Su magia: valores crecientes y directos. Implementación Clona git clone https://github.com/jofpin/brutto.git Descarga la última versión Instala con Python: python setup.py install So you import the library from bruttoeasy import Brutto Cómo usar...

tsh-sctp

Tiny SHell - Una backdoor UNIX open-source Prima di compilare Tiny SHell 1. Prima di tutto, imposta la tua chiave segreta, che si trova in tsh.h; la chiave può avere qualsiasi lunghezza usa almeno 12 caratteri per una maggiore sicurezza. 2. Si consiglia di cambiare SERVERPORT, la porta su cui il...

EUVD-2026-96785

The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...

CVE-2026-89283

The WP Posts Password Batch Manager WordPress plugin, in versions through 1.1 , contains a vulnerability where it fails to perform capability or nonce checks on a bulk post-password action. This action runs on an always-loaded admin handler , enabling unauthenticated attackers to reset or overwri...

CVE-2026-89283 WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password Rewrite

The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...

CVE-2026-88785

The Simple Membership WordPress plugin, in versions before 4.8.3 , is vulnerable to credential exposure. When the optional auto-login-after-registration feature is enabled, the plugin transmits a newly registered member's plaintext password within a URL query string . This exposure allows anyone ...