BRC4-BOF-Artillery

Generic Questo repository include una raccolta di BOF generici che ho scritto nel corso del tempo. Questo repository si concentra esclusivamente sul porting e sull'esecuzione, senza modificare il codice sorgente originale per la stabilità. Sebbene in futuro possa condurre ulteriori test, non è...

Search-That-Hash

➡️ Discord ⬅️ Il sistema più veloce per il cracking degli hash pip3 install search-that-hash && sth 🤔 Panoramica Stanco di andare su ogni sito web per decifrare il tuo hash? Search-That-Hash automatizza questo processo in meno di 2 secondi. Search-That-Hash cerca nei siti di cracking degli hash più...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation Während der forensischen Analyse eines Windows-Rechners kann es vorkommen, dass Sie den Namen einer gelöschten Prefetch-Datei finden. Auch wenn der Inhalt möglicherweise nicht wiederherstellbar ist, reicht der Dateiname selbst oft aus, um den vollständigen Pfad de...

TheDoc

TheDoc è un semplice ma utilissimo automatizzatore di SQLMAP con un admin finder integrato, hash cracker usando hashcat e altro ancora! Capacità: Conta il totale delle injection tentate. Esegue la scansione del dominio dato per vulnerabilità. Estrae le informazioni del database tramite URL di...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g...

CVE-2026-64563

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

CVE-2022-45599

CVE-2022-45599 URL CVE:| https://vulners.com/cve/CVE-2022-45599 ---|--- Segnalato da:| TanYeeTat Prodotto:| Aztech WMB250AC Router Mesh Wireless Firmware interessato:| Rilascio 2020 topaz-linux.lzma.img Download firmware:| codice chiuso Manuale del prodotto: https://kylaconnect.com/download-cente...

QUIC-attacks

Attacchi QUIC CVE-2022-30591 Il presente repository ha lo scopo di condividere gli script che abbiamo utilizzato per scopi educativi. Questi attacchi facevano parte del nostro studio vedi qui, e sono stati testati contro 6 diversi server abilitati QUIC IIS, NGINX, LiteSpeed, Cloudflare, H2O e...

CVE-2020-5902

CVE-2020-5902 Shodan root@kitploit: http.favicon.hash:-335242539 "3992"...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Schwachstelle zur Remote-Codeausführung PoC 🚀 Verwendung Stellen Sie sicher, dass Sie die entsprechenden Berechtigungen und die Genehmigung des Eigentümers des Zielsystems haben, bevor Sie dieses Skript verwenden. Voraussetzungen Python 3.x impacket-smbserver...

keimpx

Introduzione keimpx è uno strumento open source, rilasciato sotto licenza Apache 2.0. Può essere utilizzato per verificare rapidamente la presenza di credenziali valide su una rete tramite SMB. Le credenziali possono essere: Combinazione di utente / password in testo chiaro. Combinazione di utent...

quick-lookup-ptrun

Plugin de Consulta Rápida para PowerToys Run Este plugin para o PowerToys Run permite pesquisar rapidamente um endereço IP, nome de domínio, hash ou qualquer outro ponto de dados numa lista de ferramentas de Cibersegurança. É perfeito para analistas de segurança, testadores de penetração ou...

ketshash

Ketshash Un piccolo strumento per rilevare connessioni NTLM privilegiate sospette, in particolare l'attacco Pass-The-Hash, basato sui log del visualizzatore eventi. Lo strumento è stato pubblicato come parte della ricerca "Pass-The-Hash detection" - maggiori dettagli sulla "Pass-The-Hash detectio...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Crittografia debole delle password CVE-2022-25012 Versione aggiornata di questo script di crittografia debole delle password Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...

BIT-KEYCLOAK-2026-15571 Flaw in the legacy client-initiated account-linking endpoint of Keycloak

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...

CVE-2026-45332-PoC

CVE-2026-45332: Automad CMS में टूटा हुआ एक्सेस नियंत्रण CVE-2026-45332 के लिए प्रूफ़ ऑफ़ कॉन्सेप्ट — Automad CMS में एक टूटा हुआ एक्सेस नियंत्रण Broken Access Control भेद्यता, जो किसी भी अनप्रमाणित हमलावर को सेटअप एंडपॉइंट के माध्यम से प्रत्येक व्यवस्थापक खाते का bcrypt पासवर्ड हैश और TOTP सीक्र...

misp-extractor

مستخرج MISP يتصل هذا الكود بخادم MISP منصة مشاركة معلومات البرامج الضارة معين ويقوم بتحليل عدد محدد من الأحداث، وكتابة عناوين IP وروابط URL وتجمّعات MD5 الموجودة في الأحداث إلى ثلاثة ملفات منفصلة. الاستخدام لاستخدام هذا السكربت، ستحتاج إلى تقديم عنوان URL لمثيل MISP الخاص بك ومفتاح API صالح. يمكن...

CVE-2023-1430

Update 2023-06-12: Sie benötigen den Snippet nicht mehr. WPManageNinja hat die Sicherheitslücke zwei Stunden nach der öffentlichen Offenlegung gepatcht 93 Tage nach der Meldung. Update 2024-01-27: Das verwandte Problem mit ewigen Hash-Werten ist nun vollständig behoben. Verantwortungsvolle...

CVE-2026-77134

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...