GhostKatz

GhostKatz 脆弱な署名済みドライバーを悪用し、MmMapIoSpace を介した物理メモリ読み取りプリミティブを使用して、LSASS の資格情報を物理メモリから直接抽出します。従来のユーザーモード検出機能をバイパスします。 このツールは Julian Peña と Eric Esquivel の協力により開発されました。 このリリースの GhostKatz は、既に公開された脆弱性のあるドライバーを使用しています。最良の結果を得るには、GhostKatz...

CredsHunter

CredsHunter CVE-2026-3609 · Writeup LSASS凭据转储概念验证，利用Wellbia的XIGNCODE3反作弊驱动xhunter1.sys中绕过PPL的进程句柄泄漏漏洞。 该驱动暴露了一个IRPMJWRITE命令接口，调用ObOpenObjectByPointer时AccessMode = KernelMode且未设置OBJKERNELHANDLE，从而将内核授予的PROCESSALLACCESS句柄直接放入调用者的句柄表中。接着，标准凭据转储代码从目标中读取lsasrv.dll的3DES密钥，并恢复每个活跃登录会话的NTLM + SHA1哈希。...

Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL-Injection JCK Editor Jtreelink プラグイン（Joomla! 向け）はユーザー入力を適切に解析しないため、SQL インジェクションが可能です。 本エクスプロイトはこのセキュリティ脆弱性を悪用し、管理者の認証情報をダンプし、可能であれば PHP RCE シェルをアップロードします。 Exploit Title: Joomla JCK Editor 6.4.4 SQL Injection Google Dork:...

Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

Fortigate-Belsen-Leak-Dump-CVE-2022-40684 このスクリプトの動作: 1. スクリプトは rootfolder 配下のすべてのサブフォルダーを調べ、vpn-passwords.txt を探します。 2.「-=-= Belsen Group -=-=.」というバナーを含む行をスキップします。 3. username:password 形式の行については コロンより後ろの部分（パスワード）を抽出し、出力ファイルに書き込みます。 出力: 4. パスワードは extractedpasswords.txt ファイルに保存されます。1行に1つのパスワードです。...

CVE-2022-0739

CVE-2022-0739 CVE-2022-0739용 Python PoC 익스플로잇 기능 데이터베이스 메타데이터 조회 Wordpress 사용자 자격 증명 덤프 임의 블라인드 쿼리 주입 💉 사용법 root@kitploit: usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help message and exit -u URL, --url URL URL of the page containing the BookingPress Widget -e EXEC, --exe...

Exploit for SQL Injection in Devcode Openstamanager

CVE-2026-24418 OpenSTAManager --info Reconnaissan...

lab-purple-team

Lab Purple Team - Active Directory !screenshots/wazuhsecu...

Exploit for Path Traversal in Mikrotik Routeros

Ferramentas de Pentest — /rede Repositório de scripts para au...

AVideo Unauthenticated SQL Injection Credential Dump

AVideo use auxiliary/gather/avideo/catnamesqli msf undefinedcatnamesqli show actions ...actions... msf undefinedcatnamesqli set ACTION msf undefinedcatnamesqli show options ...show and set options... msf undefinedcatnamesqli run This module requires Metasploit: https://metasploit.com/download...

EUVD-2022-52365

Malicious code in bioql PyPI...

FrontPage .pwd File Credential Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FrontPage .pwd File Credential Dump', 'Description' = %q This module downloads and parses the 'vtipvt/service.pwd', 'vtipvt/administrators.pwd',...

CVE-2022-30493

In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin accessprivilege escalation...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system. version 1.0 of Automotive Shop Management System contains a security vulnerability that could be exploited to dump all database credentials and gain administrator access...

CVE-2020-6780

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

CVE-2020-6780

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

Metasploit Framework Relative Path Traversal Vulnerability

Metasploit Framework is a modular Ruby-based penetration testing platform that enables you to write, test and execute exploit code. A relative path traversal vulnerability exists in the untar method of the "auxiliary/admin/http/telpho10credentialdump" module of the Metasploit Framework, which can...

CVE-2020-7377

The Metasploit Framework module "auxiliary/admin/http/telpho10credentialdump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP...

Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump

This module uses a blind SQL injection CVE-2020-5724 affecting the Grandstream UCM62xx IP PBX to dump the users table. The injection occurs over a websocket at the websockify endpoint, and specifically occurs when the user requests the challenge as part of a challenge and response authentication...

FrontPage .pwd File Credential Dump

This module downloads and parses the 'vtipvt/service.pwd', 'vtipvt/administrators.pwd', and 'vtipvt/authors.pwd' files on a FrontPage server to find credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Credential Dump

No description provided by source. Exploit Title: Team Helpdesk Customer Web Service CWS Remote User Credential Dump exploit Exploit Title: Team Helpdesk Technician Web Access TWA Remote User Credential Dump exploit Date: May 5, 2014 Exploit Author: bhamb [email protected] Vendor Homepage:...