179 matches found
Project-Pwnag0dchi
Project Pwnag0dchi Created this since a lot of people were asking about the customized plugins & configurations I use. Following this guide, your Pwnagotchi will look exactly as seen on my socials & YouTube videos in 5mins tops. You'll also find a complete Pwnagotchi noob build guide + some commo...
marfil
Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...
ScrapPY
🐕 ScrapPY: PDF 스크래핑을 쉽게 ScrapPY는 매뉴얼, 문서 및 기타 민감한 PDF를 스크래핑하여 오펜시브 보안 도구가 무차별 대입brute force, 강제 브라우징forced browsing, 사전 공격dictionary attack을 수행하는 데 사용할 수 있는 타겟 단어 목록을 생성하는 Python 유틸리티입니다. ScrapPY는 단어 빈도, 엔트로피 및 메타데이터 분석을 수행하며, 전체 출력 모드로 실행하여 타겟 공격을 위한 맞춤형 단어 목록을 만들 수 있습니다. 이 도구는 잠재적인 비밀번호나 숨겨진...
cbrutekrag
cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...
Klyda
Klyda 프로젝트는 온라인 웹 애플리케이션에 대한 빠른 자격 증명 기반 공격을 돕기 위해 만들어졌습니다. Klyda는 간단한 비밀번호 스프레이부터 대규모 멀티스레드 사전 공격까지 지원합니다. Klyda는 새로운 프로젝트이며, 기여를 찾고 있습니다. 어떤 도움이라도 매우 감사합니다. Klyda는 간단하고 기억하기 쉬운 사용법을 제공하지만, 필요에 따라 구성도 가능합니다: 멀티스레드 작업 단어 목록을 결합하여 더 큰 규모의 공격 데이터 블랙리스트로 결과 좁히기 은밀한 목적을 위해 스레드 속도 제한 설치 및 사용법 1 Git 저장...
Astra Linux – Vulnerability in Linux 5.15
A vulnerability has been identified in the ksmbd component of the Linux kernel the kernel SMB/CIFS server. A security measure designed to prevent dictionary attacks—which introduces a 5-second delay during session setup—can be bypassed through the use of asynchronous requests. This bypass defeats...
CVE-2026-48084 OpenReception doesn't rate limit passphrase login attempts
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2...
JLSEC-2026-278
An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...
blueprintUE self-hosted edition 安全漏洞
The blueprintUE self-hosted edition is an open-source data modeling and visualization tool developed by blueprintUE. Versions prior to blueprintUE self-hosted edition 4.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the login form processor not implementing any type of...
EUVD-2026-9375
The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation IDC SFX SeriesSFX2100 SuperFlex Satellite Receiver insecurely stores the hardcoded root password hash. The password itself is highly insecure and susceptible to offline dictionary attacks using the...
CVE-2026-29120
The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation IDC SFX SeriesSFX2100 SuperFlex Satellite Receiver insecurely stores the hardcoded root password hash. The password itself is highly insecure and susceptible to offline dictionary attacks using the...
AI-generated passwords are a security risk
Using Artificial Intelligence AI to generate your passwords is a bad idea. It's likely to give that password to a criminal who can then use it in a dictionary attack—which is when an attacker runs through a prepared list of likely passwords words, phrases, patterns with automated tools until one ...
CVE-2021-41995
A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass...
CVE-2021-41992
A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass...
OreaHax-Framework
OreaHax-Framework ╔════════════════════════════════════...
SqlScanner
SqlScanner SQL Injection Scanner deve...
EUVD-2017-12346
Malware in sbrugna...
EUVD-2019-5959
Malware in sbrugna...