hashcracker

hashcracker Algoritmi di hashing supportati: SHA512, SHA256, SHA384, SHA1, MD5, SHA224 Caratteristiche: rilevamento automatico dell'algoritmo di hashing basato sulla lunghezza non consigliato, bruteforce, lista password Argomenti: type: algoritmo di hash deve essere uno degli algoritmi di hashing...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

turkce-wordlist

Este projeto não contém nenhum dado pessoal como endereço de e-mail, nome, telefone ou similar. As senhas são listadas apenas para fins acadêmicos. Não é possível associar as senhas a pessoas reais. Wordlist Turca É um estudo realizado para análise das escolhas de senhas de usuários turcos. Foi...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation Während der forensischen Analyse eines Windows-Rechners kann es vorkommen, dass Sie den Namen einer gelöschten Prefetch-Datei finden. Auch wenn der Inhalt möglicherweise nicht wiederherstellbar ist, reicht der Dateiname selbst oft aus, um den vollständigen Pfad de...

TheDoc

TheDoc è un semplice ma utilissimo automatizzatore di SQLMAP con un admin finder integrato, hash cracker usando hashcat e altro ancora! Capacità: Conta il totale delle injection tentate. Esegue la scansione del dominio dato per vulnerabilità. Estrae le informazioni del database tramite URL di...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Crittografia debole delle password CVE-2022-25012 Versione aggiornata di questo script di crittografia debole delle password Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

SMB-Penetration-Testing-NTLM-Relay-Version-2-

SMB Penetrationstest – NTLM-Relay-Angriff Red Team Lab – NTLM-Relay via LLMNR-Poisoning, CVE-2007-2447, NTLMv2-Hash-Cracking & NT AUTHORITY\SYSTEM unter Windows 10 Autor Feld| Details ---|--- Name| Younes GitHub| @Youneskc Typ| Penetrationstest-Labor Status| Abgeschlossen Rechtlicher...

Hashcat-Cheatsheet

Hashcat-Cheatsheet Cheatsheet di Hashcat per OSCP https://hashcat.net/wiki/doku.php?id=hashcat Identificare gli hash hash-identifier Hash di esempio: https://hashcat.net/wiki/doku.php?id=examplehashes MASSIMA POTENZA! Ho scoperto che posso ottenere più potenza dal cracking degli hash aggiungendo...

sqlmate

sqlmate Ci sono alcune funzionalità che pensiamo SQLMap dovrebbe avere. Come trovare il pannello di amministrazione del target, un miglior cracking degli hash, ecc. Se la pensi allo stesso modo, SQLMate fa per te. Cosa fa? Fornisci un dork di SQL injection tramite l'opzione --dork e troverà siti...

hashcrack

hashcrack decomprime alcuni tipi di hash, sceglie opzioni sensate e invoca hashcat Driver NVIDIA qui: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk email alternativa: [email protected] se hai bisogno di supporto Non sono sicuro che qualcuno alla NCC si occuperà di questo, ma in futu...

CVE-2026-53632 NTLMv2 hash disclosure via UNC path handling on Windows

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...

GHSA-V6WH-96G9-6WX3 launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows

Summary The launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result ...

EUVD-2026-35133

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...

CVE-2026-39908 OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...

robot

Good all day, my friends, I finally finished the first versio...

CVE-2026-33041

WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...

CVE-2026-33041

CVE-2026-33041 affects WWBN AVideo. In versions 25.0 and earlier, the endpoint /objects/encryptPass.json.php exposes the site’s password hashing algorithm to unauthenticated users, allowing submission of a password to receive its hash and enabling offline cracking against leaked database hashes. ...

CVE-2022-37163

Bminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes...