CVE-2023-35636

CVE-2023-35636 Vulnerabilidade de Divulgação de Informações do Microsoft Outlook vazamento de hash de senha - Script POC Expect CVE-2023-35636 é um exploit da função de compartilhamento de calendário do Microsoft Outlook, onde a adição de dois cabeçalhos a um e-mail faz com que o Outlook...

DragonCastle

DragonCastle Una PoC che combina la tecnica di movimento laterale AutodialDLL e SSP per estrarre hash NTLM dal processo LSASS. Descrizione Carica una DLL sulla macchina target. Quindi abilita il registro remoto per modificare la voce AutodialDLL e avvia/riavvia il servizio BITS. Svchosts caricher...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Dieses Repository zeigt einen Exploit für CVE-2021-24762. Es handelt sich um einen Blind-SQLi-Exploit, der in der Standardkonfiguration das Admin-Passwort ausliest. Während ich ein Labor auf Basis von WordPress mit dem PerfectSurvey-Plugin durchführte, blieb ich bei einer...

BLAKE3

BLAKE3 BLAKE3 ist eine kryptografische Hashfunktion, die: Viel schneller als MD5, SHA-1, SHA-2, SHA-3 und BLAKE2. Sicher , im Gegensatz zu MD5 und SHA-1. Und sicher gegen Längenerweiterung, anders als SHA-2. Hochgradig parallelisierbar über beliebig viele Threads und SIMD-Bahnen, da es sich im...

cve-2026-43512-poc

CVE-2026-43512 — Bypass de Autenticação DIGEST do Apache Tomcat Resultado da análise de explorabilidade: a causa raiz está confirmada. A exploração de ponta a ponta não é reproduzível contra uma implantação padrão do UserDatabaseRealm. Veja Análise para detalhes. Índice Visão Geral Versões Afetad...

FavFreak

FavFreak - Armare favicon.ico per BugBounties, OSINT e quant'altro Una descrizione dettagliata è disponibile qui: Leggi il blog qui: https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 Introduzione Ho creato questo strumento per rendere il mio lavo...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook लीक क्रेडेंशियल्स और रिमोट कोड एक्ज़ीक्यूशन भेद्यता जब CVE-2023-21716 के साथ जोड़ा जाता है पूर्वावलोकन पैनल के माध्यम से CVSS:3.1 9.8 / 8.5 आउटलुक को बाहरी लिंक खोलने पर जोखिम के बारे में आपको चेतावनी देनी चाहिए = लेकिन ऐसा नहीं है! उपयोग:...

Hash-Eye

🔍 HashEye - أداة متقدمة للكشف عن أنواع التجزئة Hashes HashEye هي أداة CLI قوية بلغة Python للكشف الفوري عن أنواع التجزئة وتحليلها. توفر معلومات مفصلة حول تنسيقات التجزئة، مستويات الأمان، تحليل الإنتروبيا، واكتشاف الأنماط. مقدمة منIsaac Security Labs 🔗 روابط: GitHub: @ishaklaz تلغرام:...

telfhash

Trend Micro ELF Hash telfhash telfhash est un hash de symboles pour les fichiers ELF, tout comme imphash est un hash d'importations pour les fichiers PE. Avec telfhash, vous pouvez regrouper les fichiers ELF par similarité basée sur les symboles. Ceci est particulièrement utile pour regrouper des...

hassh

"HASSH" - un metodo di profilazione per client e server SSH. NOTA: questo repository Corelight è stato creato affinché possa essere mantenuto attivamente, su richiesta di Salesforce, il cui repository originale non viene più mantenuto. "HASSH" è uno standard di fingerprinting di rete che può esse...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

spraykatz

Spraykatz Spray love around the world Index...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

mimikatz

mimikatz mimikatz è uno strumento che ho creato per imparare il C e fare alcuni esperimenti con la sicurezza di Windows. È ora ben noto per estrarre password in chiaro, hash, codici PIN e ticket Kerberos dalla memoria. mimikatz può anche eseguire pass-the-hash, pass-the-ticket o creare Golden...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

turkce-wordlist

Este projeto não contém nenhum dado pessoal como endereço de e-mail, nome, telefone ou similar. As senhas são listadas apenas para fins acadêmicos. Não é possível associar as senhas a pessoas reais. Wordlist Turca É um estudo realizado para análise das escolhas de senhas de usuários turcos. Foi...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

recomposer

Recomposer.py Hatten Sie schon einmal das unsichere Gefühl, Ihre Malware-Binärdateien auf VirusTotal oder andere AV-Seiten hochzuladen, weil man Binärdateien anhand von Hashes nachschlagen kann? Beispiel: https://github.com/mubix/vt-notify Fühlen Sie sich mit Recomposer etwas sicherer! Recomposer...

recomposer

Recomposer.py Ever have that not so safe feeling uploading your malware binaries to VirusTotal or other AV sites because you can look up binaries by hashes? Example: https://github.com/mubix/vt-notify Feel somewhat safer with Recomposer! Recomposer will take your binary and randomly do the...