Brute_Force

BruteForce install : sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize Usage: BruteForce Gmail Attack python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle BruteForce Hotmail Attack python3...

GitLab-CVE-2023-7028

GitLab CVE-2023-7028 — Mock 16.6.0 Host-only CVE-2023-7028 CVSS 10.0: POST /users/password accepted useremail array — server found user by email0 but sent the same reset token to every address → attacker with [email protected] hijacks [email protected]. Affected: GitLab CE/EE 16.5.6,...

automato

automato.rb automato utiliza bibliotecas LDAP nativas para automatizar la recolección y enumeración de varios objetos de directorio. Esto es increíblemente útil durante una prueba de penetración interna. automato también puede realizar ataques de pulverización de contraseñas e identificar si un...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

CVE-2023-24055

CVE-2023-24055 PoC y Escáner para CVE-2023-24055 ¡Úselo bajo su propio riesgo! configscanner.py Un simple analizador para el archivo de configuración de KeePass que se ejecuta en Windows. La herramienta abrirá el directorio %APPDATA%\Roaming\KeePass\KeePass.config.xml y mostrará todos los...

PassBreaker

PassBreaker PassBreaker es una herramienta de cracking de contraseñas de línea de comandos desarrollada en Python. Permite realizar varias técnicas de cracking de contraseñas, como ataques basados en listas de palabras y ataques de fuerza bruta. Características Cracking de contraseñas basado en...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

Klyda

El proyecto Klyda ha sido creado para ayudar en ataques rápidos basados en credenciales contra aplicaciones web en línea. Klyda soporta el uso desde simples rociados de contraseñas hasta grandes ataques de diccionario multihilo. Klyda es un proyecto nuevo, y estoy buscando contribuciones. Cualqui...

uberscan

uberscan Security program for pen-testing servers, routers and IoT devices btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme...

CamOver

CamOver CamOver is a camera exploitation tool that allows to disclosure network camera admin password. Features Exploits vulnerabilities in most popular camera models such as CCTV, GoAhead and Netwave. Optimized to exploit multiple cameras at one time from list with threading enabled. Simple CLI...

SecurityNotFound

404 Página No Encontrada Webshell 📼 ¡Clóname! Clona o descarga el proyecto: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "Instalación" El archivo src/404.php debe ubicarse en el servidor objetivo y debe tener la capacidad de ejecutar archivos .php. Aquí hay un ejemplo...

words-scraper

Words Scraper Web scraper basado en Selenium para generar listas de contraseñas. Instalación Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriver...

words-scraper

Words Scraper Selenium based web scraper to generate passwords list. Installation Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriver --version Ma...

TeamPass

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub Contents About Who it's for Securit...

kcmd

kcmd - Kankun Sniffer and Hijacker Send encrypted ON/OFF commands to kankun smart sockets Sniff the commands on the network to extract password Copyright 2015 © Payatu Author: Aseem Jakhar aseematpayatudotcom Websites: www.payatu.com www.nullcon.net www.hardwear.io www.null.co.in This program is...

Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

SuperMicro-Password-Scanner

Supermicro IPMI/BMC Cleartext Password Scanner v20140622 by 1N3 https://crowdshield.com Usage: sh supermicroscan.sh proxy ABOUT: Supermicro’s implementation of IPMI/BMC allows remote, unauthenticated attackers to request the file PSBlock via port 49152. This plain text password file contains IPMI...

CVE-2026-89283

The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...

CVE-2026-88785

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

ADFSpray

ADFSpray ADFSpray is a python3 tool to perform password spray attack against Microsoft ADFS. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: pip3 install -r requirements.txt Run the tool with the needed flags: python3 ADFSpray.py -u...