thc-hydra

H Y D R A c 2001-2023 par van Hauser / THC https://github.com/vanhauser-thc/thc-hydra De nombreux modules ont été écrits par David dot Maciejak @ gmail dot com Code BFG par Jan Dlabal Sous licence AGPLv3 voir fichier LICENSE Veuillez ne pas utiliser dans les organisations militaires ou de service...

IMAPLoginTester

IMAPLoginTester IMAPLoginTester is a simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to login to the respective IMAP servers. Usage: usage: imaplogintester.py -h -i INPUT -o OUTPUT -s -t SLEEPTIME -T TIMEO...

CVE-2024-50488

CVE-2024-50488 Token Login history.pushState'', '', '/'; document.forms0.submit;...

Mythic-Macro-Generator

Mythic-Macro-Generator Python3 script to generate MS Office macros for launching Mythic JXA payloads. This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload. Steps: 1. Set up Mythic C2 server and generate an "apfell" jxa payload note: this...

QRLJacking

QRLJacking - A New Social Engineering Attack Vector Find documentation in our Wiki. What is QRLJacking? QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of session hijacking affecting all applications that rely on the “Login with QR code” featur...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0 Suggested description Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature. Additional Information PoC:...

PhaseHack

PhaseHack Get Phase botnet login information via blind SQL injection...

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4...

CVE-2025-7892-Proof-of-Concept-Login-Form

CVE-2025-7892-Proof-of-Concept-Login-Form Demonstration Video: https://drive.google.com/file/d/16vr563yC9ub3NQP-f63KL95v0ZLbX5O/view?usp=drivelink Credit : https://github.com/KMov-g...

CVE-2023-33243

Proof of Concept for Login with Password Hash in STARFACE CVE-2023-33243 Details are described in our advisory. In the corresponding blog post the vulnerability CVE-2023-33243 is used as an example to describe how we generally approach the analysis of authentication mechanisms and identify...

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

cve-2018-9995

cve-2018-9995 exploit camera with vuln cve-2018-9995 Novo CeNova QSee Pulnix XVR 5 in 1 title: "XVR Login" Securus, - Security. Never Compromise !! - Night OWL DVR Login HVR Login MDVR Login...

CVE-2024-54820

Vulnerability: Unauthenticated SQL Injection - Clear Credentials Dump Author : Javier Carabantes Affected Software : XOne Web Monitor Software : https://xone.es/ Affected Version : 02.10.2024.530 framework 1.0.4.9 Description An unauthenticated SQL injection vulnerability has been discovered in t...

Burp_AES_Plugin

Burpsuite Plugin For AES Crack 0x00 mvn install to get jar git clone https://github.com/jas502n/BurpAESPlugin/ cd /github/BurpAESPlugin/AESDecode vi src/main/java/burp/BurpExtender.java mvn install INFO --- maven-install-plugin:2.4:install default-install @ AESCrack --- INFO Installing...

ScreenConnect-UserEnum

ScreenConnect-UserEnum ConnectWise also known as ScreenConnect has a userenum vulnerability. This is an user enumeration tool for that CVE-2019-16516 vulnerable = 19.2.24707 ??? didn't really understand if they fixed in upper version...

Blazy

Blazy blazy does login bruteforcing Usage python3 main.py -i url/file Credits Shamelessly stole form parser from guettli...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

CVE-2024-26521

CVE-2024-26521 CE-Phoenix-v1.0.8.20 Html Injection vulnearbility Login Page As we can see there is a login page that anyone can understand there is a HTML injection vulnerability are there in this application. Basically in this application all php save in this location as you can see the image...

CVE-2021-27403

UNAUTHENTICATED Cross-Site Scripting - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Param: curWebPage Payload: ";alert'xss'// Not tested in other model/version. Via GET REQUEST At the login request we can issue a GET Request:...