github-dorks

Github Dorks La búsqueda de GitHub es una característica bastante potente y útil que se puede usar para buscar datos sensibles en repositorios. La colección de dorks de GitHub puede revelar información sensible personal y/u organizacional como claves privadas, credenciales, tokens de autenticació...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

chromepass

Chromepass - Hackeando contraseñas y cookies guardadas de Chrome Ver demo · Reportar error · Solicitar función Tabla de contenido Acerca del proyecto Detección AV Primeros pasos Requisitos previos Instalación Uso Correo electrónico Errores, fallos y solicitudes de funciones Más información Licenc...

Moniker-Link-Lab-Setup

Part of my SOC Analyst portfolio https://github.com/E-m-e-k-a/SOC-Analyst-Portfolio Moniker Link Lab Setup - CVE-2024-21413 🎯 Project Overview Hands-on penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft. This project documents the complete...

CVE-2019-10708

Scms - SQL Injection exploit.py is a PoC for the CVE-2019-10708 vulnerability, implementing multiprocessing for injection to obtain the database name and backend administrator credentials recommended for versions before 20190401 Usage 測試是否可注入 python3 exploit.py http:localhost/js/scms.php --test...

patator

Patator Patator fue escrito por frustración al usar Hydra, Medusa, Ncrack, módulos de Metasploit y scripts NSE de Nmap para ataques de adivinación de contraseñas. Opté por un enfoque diferente para no crear otra herramienta de fuerza bruta y evitar repetir las mismas deficiencias. Patator es una...

CVE-2024-1346

CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants. Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator -...

CACredDecoder

C-Ark Credential Decoder Exploit tool for CVE-2021-31796 A Tool for decoding C-Ark Credential files By: Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm First release: 2/Sep/2019 Disclosure: 11/Oct/2021 References...

CVE-2017-7921

Hikvision Camera Lister & Snapshot Tool Standalone tool to list Hikvision cameras from a file and take a snapshot from each using valid credentials HTTP Basic or Digest auth or the CVE auth bypass. Intended to run on another host for testing. Features List cameras from a text file one host or...

CVE-2026-108742

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials without datasource-edit permission. Attackers can set saveCredentials and sharedCredentials flags with chosen...

spraykatz

Spraykatz Esparce amor por el mundo Índice Título| Descripción ---|--- Acerca de| Breve descripción sobre la herramienta Instalación| Instalación y requisitos Uso| Cómo usar Spraykatz Registro de cambios| Historial de cambios de Spraykatz Agradecimientos| Agradecimientos Acerca de Spraykatz es un...

Malicious code in orderly-plugin-liquidity-heatmap (npm)

orderly-plugin-liquidity-heatmap poses as a liquidity heatmap plugin for the Orderly Network orderbook widget, but its only export is an empty stub and a postinstall hook runs node ./scripts/setup.js on npm install. When the script detects GitHub Actions CI and GITHUBWORKSPACE set, it records the...

MAL-2026-17848 Malicious code in orderly-plugin-liquidity-heatmap (npm)

orderly-plugin-liquidity-heatmap poses as a liquidity heatmap plugin for the Orderly Network orderbook widget, but its only export is an empty stub and a postinstall hook runs node ./scripts/setup.js on npm install. When the script detects GitHub Actions CI and GITHUBWORKSPACE set, it records the...

fakelogonscreen

FakeLogonScreen FakeLogonScreen es una utilidad para falsificar la pantalla de inicio de sesión de Windows con el fin de obtener la contraseña del usuario. La contraseña ingresada se valida contra Active Directory o la máquina local para asegurarse de que sea correcta y luego se muestra en la...

CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 Exploit Demonstration Project Overview This repository provides a demonstration of CVE-2023-32784, a critical vulnerability found in KeePass versions prior to 2.54. The exploit allows the recovery of the master password through memory dumps, exposing stored credentials. This...

CVE-2021-36934

CVE-2021-36934 python secretsdump.py -sam C:\Windows\Temp\SAM -security C:\Windows\Temp\SECURITY -system C:\Windows\Temp\SYSTEM LOCAL...

CVE-2023-28432

MinIO vulnerability exploit CVE-2023-28432 Description This python3 script is designed to exploit CVE-2023-28432, which potentially affects certain MinIO server configurations. The script makes a POST request to a specified hostname, attempting to retrieve sensitive environment variables such as...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool es una herramienta de pruebas de penetración de código abierto que prueba la seguridad de las bases de datos Microsoft SQL de forma remota. Ejemplos de uso de MSDAT: Tiene una ba...

CVE-2025-50154

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...

nanodump

NanoDump Una herramienta flexible que crea un minidump del proceso LSASS. Tabla de contenidos 1. Uso 2. Características 3. Combinación de técnicas 4. Ejemplos 5. Redirectores HTTPS 1. Uso usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle...