wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

hashcracker

hashcracker Algoritmos de hash compatibles: SHA512, SHA256, SHA384, SHA1, MD5, SHA224 Características: detección automática del algoritmo de hash basada en la longitud no recomendado, fuerza bruta, lista de contraseñas Argumentos: type: algoritmo de hash debe ser uno de los algoritmos de hash...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Rápido y Async • 🔐 Recon + Fuerza Bruta • 🔧 Fácil de Extender KnockPy es una herramienta modular de Python 3 para enumerar subdominios mediante reconocimiento pasivo y fuerza bruta, ahora con soporte async/await , rendimiento mejorado y manejo moderno de HTTP/TLS. ...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

Telewreck

Telewreck Una extensión de Burp para detectar y explotar versiones de Telerik Web UI vulnerables a CVE-2017-9248. Esta extensión se basa en la herramienta de explotación original escrita por Paul Taylor @bao7uo que está disponible en https://github.com/bao7uo/dpcrypto. Créditos y muchas gracias a...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

ldapnomnom

LDAP Nom Nom Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by abusing LDAP Ping requests cLDAP Looks for enabled normal user accounts. No Windows audit logs generated. High speed up to 50K/sec per server - go way beyond that with multiple...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

icebreaker

icebreaker Rompe el hielo con ese adorable entorno de Active Directory que tienes ahí. Cuando estás frío y solo mirando a una fiesta de Active Directory pero no posees ni una sola credencial de AD para unirte a la diversión, esta herramienta es para ti. Automatiza secuencialmente 5 ataques de red...

rmiscout

Descripción RMIScout permite ataques de lista de palabras y fuerza bruta contra interfaces Java RMI expuestas para adivinar de forma segura firmas de métodos sin invocación. Soporta múltiples protocolos Java RMI, invocación de métodos y explotación. Resumen de características Soporta múltiples...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

PoC-ubuntutouch-pin-privesc

ACTUALIZACIÓN 09.09.2022 Obtuve un nuevo CVE para esta vulnerabilidad: CVE-2022-40297. Prueba de Concepto: Escalada de privilegios en Ubuntu Touch 16.04 - mediante fuerza bruta de código de acceso Ubuntu Touch permite "proteger" los dispositivos con un código de acceso de 4 dígitos. Dicho código ...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

wifi-bruteforcer-fsecurify

WiFi Bruteforcer - Fsecurify WARNING: This project is still under development and by installing the app may desconfigure the Wi-Fi settings of your Android OS, a system restore may be necessary to fix it. Android application to brute force WiFi passwords without requiring a rooted device...