bruteforce-wallet

bruteforce-wallet Der Zweck dieses Programms ist es, das Passwort einer verschlüsselten Peercoin- oder Bitcoin-, Litecoin-, usw. Wallet-Datei d.h. wallet.dat zu finden. Es kann auf zwei Arten verwendet werden: alle möglichen Passwörter mit einem bestimmten Zeichensatz ausprobieren alle Passwörter...

jwt-cracker

jwt-cracker Quebrador de força bruta simples para tokens JWT HS256, HS384 e HS512. Eficaz apenas para quebrar tokens JWT com segredos fracos. Recomendação : Use segredos longos e fortes ou tokens RS256. Instalação Com npm: root@kitploit: npm install --global jwt-cracker Uso Na linha de comando:...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

Hob0Rules

Hob0Rules Passwort-Cracking-Regeln für Hashcat, basierend auf Statistiken und Branchenmustern. Die folgenden Blogbeiträge über Passwörter erklären die statistische Signifikanz dieser Regelsets: Statistics Will Crack Your Password Praetorian Password Cracking Rules Released Nützliche Wortlisten zu...

hashcrack

hashcrack entpackt einige Hash-Typen, wählt sinnvolle Optionen und ruft hashcat auf NVIDIA-Treiber hier: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk alternative E-Mail: [email protected], falls du Unterstützung brauchst Ich bin mir nicht sicher, ob sich jemand bei NCC darum kümmer...

buffalo

Buffalo Uno script Python 3 per eseguire attacchi dizionario/wordlist su un server SSH target utilizzando due file di testo come input. Scritto ai fini del mio technical screening Intel. Installazione Questo script dipende da Paramiko e Colorama. Installa le dipendenze tramite pip install -r...

SSHBuster

SSHBuster SSHBuster è un potente strumento da riga di comando per il brute-forcing SSH progettato per l'hacking etico e i test di penetrazione. Esegue attacchi basati su dizionario per trovare credenziali SSH valide in modo efficiente. Caratteristiche Esegue il brute-force sui server SSH...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

OneListForAll

OneListForAll Wordlist per fuzzing web: micro curata, short/long categorizzate e liste finali combinate. Cosa genera questo repository onelistforallmicro.txt: lista curata mantenuta manualmente. dict/short.txt: wordlist curata per categoria fonti piccole/qualità. dict/long.txt: wordlist completa...

cameradar

Cameradar Strumento di accesso ai flussi RTSP Cameradar esegue la scansione degli endpoint RTSP su target autorizzati e utilizza attacchi a dizionario per forzare le loro credenziali e rotte. Cosa fa Cameradar Rileva host RTSP aperti su target accessibili. Rileva il modello del dispositivo che...

FTPBuster

FTPBuster FTPBuster è un potente strumento da riga di comando progettato per attacchi di forza bruta a server FTP, SFTP e FTPS esplicito tramite attacchi basati su dizionario. È pensato per hacking etico e penetration testing Caratteristiche Supporto per forza bruta su FTP , SFTP e FTPS esplicito...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611

The vulnerable component is org.wildfly.security/wildfly-elytron-password-impl in WildFly Elytron. Password hashing/verification applies Unicode NFKC normalization, collapsing fullwidth characters to ASCII equivalents, which reduces the effective password keyspace. This allows a remote attacker t...

PT-2026-79049

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-57263

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...

CVE-2026-57263

CVE-2026-57263 affects LOGO! Soft Comfort for all versions

EUVD-2026-56118

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...

PT-2026-70188

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...

EUVD-2026-43560

PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Attackers who know a push token can systematically guess passphrases at 120 attempts per minute without triggering any...

CVE-2026-61458 PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint

PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Attackers who know a push token can systematically guess passphrases at 120 attempts per minute without triggering any...