h4rpy

h4rpy h4rpy es una herramienta automatizada de ataque WPA/WPA2 PSK, un wrapper del framework aircrack-ng. h4rpy proporciona una interfaz limpia para el descifrado automatizado de redes WPA/WPA2 PSK. h4rpy habilita el modo monitor en la interfaz inalámbrica seleccionada, escanea el espacio...

jwt-cracker

jwt-cracker HS256、HS384、HS512 JWTトークンのブルートフォースクラッカー。 脆弱なシークレットを持つJWTトークンのみをクラックするのに効果的です。 推奨 : 強力で長いシークレット、またはRS256トークンを使用してください。 インストール npmを使用: root@kitploit: npm install --global jwt-cracker 使用方法 コマンドラインから: root@kitploit: jwt-cracker -t -a --max -d -f ここで: token : クラックする完全なHS256-512 JWTトークン文字列...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

bitcracker

BitCracker BitCracker は、BitLocker で暗号化されたストレージデバイス（ハードディスク、USB メモリ、SD カードなど）を対象とした、初のオープンソースパスワードクラッキングツールです。BitLocker は Windows Vista、7、8.1、10（Ultimate、Pro、Enterprise エディション）で利用可能な暗号化機能です。BitLocker は、Trusted Platform Module TPM、スマートカード、回復パスワード、ユーザー提供パスワードなど、ストレージデバイスを暗号化するためのいくつかの認証方法を提供します。...

CVE-2018-15473-exp

CVE-2018-15473-exp This is an exp for CVE-2018-15473 I feel that the username enumeration for openssh 7.7 is quite common, so I wrote an exp that can call poc and exploit it with a dictionary. The poc is written in python2.7, and openssh.py is written in python3; pay attention when calling them...

userenum-CVE-2018-15473

Userenum CVE-2018-15473 User enumeration for CVE-2018-15473 This script is a method to use a user dictionary with the CVE-2018-15473 SSH User Enumeration by Leap Security @LeapSecurity https://leapsecurity.io. Script developed to solve Valentine HTB machine. How to use it 1st. Download the main...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py は、JWT JSON Web Tokens の検証、偽造、スキャン、改ざんを行うためのツールキットです。 主な機能は次のとおりです: トークンの有効性の確認 既知のエクスプロイトのテスト: CVE-2015-2951 alg=none 署名バイパスの脆弱性 CVE-2016-10555 RS/HS256 公開鍵不一致の脆弱性 CVE-2018-0114 Key injection 脆弱性 CVE-2019-20933/CVE-2020-28637 Blank password 脆弱性...

CVE-2026-90852

A flaw was found in luben zstd-jni. This flaw involves a use-after-free vulnerability in the ZstdCompressCtx.loadDict function, which handles dictionary sharing. A remote attacker could exploit this by manipulating dictionary sharing operations, potentially leading to denial of service, informati...

CVE-2026-90852

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

EUVD-2026-78255

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852 luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852 luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852

luben zstd-jni (a Java binding for the Zstandard compression library) is affected by a use-after-free vulnerability in the Dictionary Sharing component, specifically in the function ZstdCompressCtx.loadDict within ZstdCompressCtx.java. Affected versions are up to 1.5.7-13 . The vulnerability can ...

PT-2026-91849

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

Linux Distros Unpatched Vulnerability : CVE-2026-90852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.ja...

nvdcve

Archivos NVD/CVE® en formato JSON Importante : este repositorio ahora es parcialmente redundante con el proyecto CVEProject/cvelist que permite explorar el historial de modificaciones de CVE®/NVD usando git, así como enviar nuevas vulnerabilidades mediante solicitudes de extracción de GitHub. Sin...

iDict

Disclaimer: Do whatever you want with this code as long as you give me credit @Pr0x13 Check and make sure its legal in your country to use this tool before doing so. I'm not responsible for any damage done whatsoever to anyones iCloud account or iDevice. I Didn't exploit any accounts while writin...

Hashcat-Cheatsheet

Hashcat-Cheatsheet Hashcat Cheatsheet for OSCP https://hashcat.net/wiki/doku.php?id=hashcat Identify Hashes hash-identifier Example Hashes: https://hashcat.net/wiki/doku.php?id=examplehashes MAX POWER! I have found that I can squeeze some more power out of my hash cracking by adding these...

naive-hashcat

Naive Hashcat 无需繁琐操作即可破解密码哈希。Naive hashcat 是一个即插即用脚本，预配置了朴素、经过经验验证的“足够好”参数/攻击类型。使用 ./naive-hashcat.sh 运行 hashcat 攻击，无需了解“底层”发生了什么。 免责声明：本软件仅供教育目的使用。本软件不应被用于非法活动。作者不对其使用负责。不要当混蛋。 快速入门bash git clone https://github.com/brannondorsey/naive-hashcat cd naive-hashcat if you are on MacOS/OSX, run this. I...

CVE-2026-51992

CVE-2026-51992 Within ClickHouse, a feature exists that allows a user with the correct permissions to create dictionaries in order to interact with different databases and run specific queries on them. For PostgreSQL, SELECT queries are wrapped in a COPY QUERY TO STDOUT statement before being...