WordPress Redux Framework <=4.2.11 - Information Disclosure

WordPress Redux Framework plugin through 4.2.11 is susceptible to information disclosure. The plugin registers several unique AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php. These are predictable, given that they are based on an md5 has...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

Email-exploit-Moniker-Link-CVE-2024-21413-

E-Mail-Exploit Moniker Link-CVE-2024-21413-Module — Dokumentation Übersicht: Ein praktischer PoC, der die Verwendung eines Moniker Links in einer HTML-E-Mail demonstriert, um eine SMB-Verbindung von Outlook auszulösen, sodass der netNTLMv2-Hash eines Opfers über Responder erfasst werden kann. Die...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

CVE-2023-3450

CVE-2023-3450 fofa：iconhash="-399311436" Beispiel：http://123.54.231.201:6060 Usage: python3 CVE-2023-3450.py -h, --help python3 CVE-2023-3450.py -u URL, --url URL python3 CVE-2023-3450.py -f FILE, --file FILE...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

Windows-SignedBinary

Generieren eines signierten Windows-Binaries mit einem anderen Hash Die Idee war, Endpoint-Lösungen zu umgehen, die bekannte „bösartige“ signierte Anwendungen wie „regsvr32.exe“ blockieren. Ich wollte einen Weg finden, eine gültige signierte Datei mit einem anderen Hash zu erhalten. Die Analyse M...

hashr

HashR: Genera il tuo set di hash Indice HashR: Genera il tuo set di hash Indice Informazioni Requisiti Compilazione del binario HashR ed esecuzione dei test Configurazione di HashR HashR tramite docker Configurazione del sistema operativo & strumenti di terze parti richiesti Configurazione dello...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – Umgehung der DKIM-Signaturverifizierung Fehler in der Header-Kanonisierung Programmcode Python-E-Mail-Parsing-Simulation root@kitploit: dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From: [email protected] To:...

cyanide

Was ist Cyanide? Wie der Name schon vermuten lässt, ist es Gift. Cyanide ist im Wesentlichen ein Tracker zur Korrelation verschiedener Poisoning-Techniken derzeit wird nur Responder verwendet in Verbindung mit dem Relayen der erbeuteten Hashes über Impackets ntlmrelayx.py. Beim Start wird Respond...

mimikatz

mimikatz mimikatz è uno strumento che ho creato per imparare il C e fare alcuni esperimenti con la sicurezza di Windows. È ormai noto per estrarre password in chiaro, hash, codici PIN e ticket Kerberos dalla memoria. mimikatz può anche eseguire pass-the-hash, pass-the-ticket o costruire Golden...

Bcrypt-forcer

Bcrypt-forcer sqlmap Bcrypt Entschlüsselungstool Bcrypt Hash-Cracker...

forensicscanner

This repository does not have a README...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

CVE-2019-9053

CMS Made Simple प्रतिक्रिया विलंब की जाँच करके अक्षर दर...

CVE-2019-9053-exploit

CVE-2019-9053 — SQL Injection non autenticata in CMS Made Simple Descrizione CVE-2019-9053 è una vulnerabilità di iniezione SQL time-based blind che colpisce CMS Made Simple nelle versioni ≤ 2.2.9. Non richiede autenticazione. Il parametro vulnerabile è m1idlist nel modulo News moduleinterface.ph...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 ist eine kritische Schwachstelle zur Remotecodeausführung in Microsoft Outlook einschließlich Versionen von Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 vor dem Februar-2024-Patch. Sie ermöglicht es einem nicht authentifizierten Angreifer, die Geschützte Ansicht Protecte...

CVE-2024-21754-Forti-RCE

Vulnerabilità di hashing delle password in FortiOS e FortiProxy che porta a RCE CVE-2024-21754 Panoramica È stata identificata una vulnerabilità critica, classificata come CVE-2024-21754, nelle versioni di FortiOS e FortiProxy fino alla 7.4.3, 7.2, 7.0, 6.4 e 2.0. Questa vulnerabilità,...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primo, ottieni l'hash MD5 della password dell'account 'admin'. Invia: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows...

CVE-2026-11551-PoC

CVE-2026-11551 - Privilegio non autenticato in White Label & Branding, Free Login Page Customizer White Label & Branding, Free Login Page Customizer update $wpdb-users, $data, ... ← Line 2515: DOUBLE HASH TERSIMPAN Codice Vulnerabile inc/modules/login-screen/signup-password.php:230...