14035 matches found
CVE-2024-28000
LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 This repository contains a Proof of Concept PoC script for exploiting a privilege escalation vulnerability in the LiteSpeed Cache WordPress plugin. The vulnerability, identified as CVE-2024-28000 , allows unauthenticated users to gain...
CodeIgniterXor
CodeIgniterXor PoC script to decode CodeIgniter = 2.1.4 session cookies that use xorencode method. Full details availalbe on on the following blog post: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability Usage break.py This is the main script, and given a target URI will...
advisories
About me Twitter: @justinsteven Blog: https://www.justinsteven.com/ Advisories Listed in reverse chronological order. Click any title to read the full advisory. Gartner Peer Insights Widget postMessage DOM XSS Disclosure date: 2023-02-03 The Gartner Peer Insights Widget had a DOM XSS vulnerabilit...
hikvision_brute
hikvisionbrute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/main.go -help to get help with running args run example go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt...
SafeGuard
./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Goβs standard library e.g. AES-GCM for...
Android-PIN-Bruteforce
ππ± Android-PIN-Bruteforce Unlock an Android phone or device by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! π± How it works It uses a USB OTG cable to connect the locked phone to the Nethunter device. It emulates a keyboard,...
Vajra
Vajra - Your Weapon To Cloud About Vajra Vajra is a UI based tool with multiple techniques for attacking and enumerating in target's Azure environment. The term Vajra refers to the Weapon of God Indra in Indian mythology God of Thunder & Storms. Its connection to the cloud makes it a perfect name...
pythem
pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...
ZipRarHunter
ZipRarHunter ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives Features Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryptio...
CVE-2025-53694
CVE-2025-53694: Information Disclosure in ItemService API with a restricted anonymous user, leading to exposure of cache keys using a brute-force approach The ItemService API, accessible at /sitecore/shell/api/sitecore/ItemService/GetChildren, allows unauthenticated users to query the Sitecore...
shodanwave
Shodanwave Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online. What does the tool to? Look, a list! Search Brute force SSID and WPAPSK Password...
CSRFBrute
CSRFBrute CSRF login brute-force tool - V 0.5.0 Dev It is recommended to prioritize the stable and streamlined version csrfbrute.py π Features Dynamic CSRF Token refresh - Ensures accuracy on high-security targets Thread-safe session management - Supports high-concurrency operations, up to 100...
Zydra
Zydra Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the userβs password in the linux shadow file one after...
thc-ipv6
THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 Licensed under AGPLv3 see LICENSE file INTRODUCTION This code was inspired when I got into touch with IPv6, learned more and more about it - and then found no tools to play read: "hack" around wit...
Loracrack
Loracrack - LoRaWAN session cracker A PoC for exploiting weak or shared Application Keys Created by Sipke Mellema of Applied Risk This is a Proof-of-Concept for demonstrating the dangers of using the same AppKey on multiple LoRaWAN nodes. This repository holds a toolbox for cracking LoRaWAN sessi...
FaceBrute
FaceBrute Facebook brute force script This script tries to guess passwords for a given facebook account using a list of passwords dictionary. Since facebook temporaly blocks access to accounts that continously fail to login, this script is coded so that it waits a specified amount of time when th...
laf
LoRaWAN Auditing Framework - ALPHA VERSION IoT deployments just keep growing and one part of that significant grow is composed of millions of LPWAN low-power wide-area network sensors deployed at hundreds of cities Smart Cities around the world, also at industries and homes. One of the most used...
CVE-2023-45182
CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Weak password encryption Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing user passwords uses AES algorith...
CVE-2018-15473_burte
CVE-2018-15473burte openssh7.7 username enumeration...
Beleth
Beleth Dictionary based SSH cracker Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt connections to thi...