Doozer

Doozer Doozer es una utilidad extensible y automatizada para el descifrado de hashes que automatiza el análisis, el descifrado y la organización de hashes de contraseñas. Actualmente, Doozer admite hashes nt/lm, ntlmv1 y ntlmv2 de Responder o SAM, pero cuenta con una arquitectura modular que...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

hashes

RustCrypto: Funciones hash !Project Chatchat-imagechat-link !dependency statusdeps-imagedeps-link !Apache2/MIT licensedlicense-image Colección de funciones hash criptográficas1 escritas en Rust puro. Todos los algoritmos residen en crates separados y se implementan utilizando los traits del crate...

CVE-2022-22972-

Lista de IOC de CVE-2022-22972 DIRECCIONES IP • 23.36.163.250 • 64.32.6.143 • 217.175.49.100 HASH • 6f17c8af555321cca16fe1695cc420eb9079fd187b8fa71d840f3cfd1f796117 • 040db8eacbd482c12ba03ab1a7c738be • 97ac734b671c815c43ea3287732046d2177e5bdad63e12315acc4902b8baa04d •...

CVE-2025-32044

CVE-2025-32044 — Exposición de Datos de Usuario en la API REST de Moodle sin Autenticación Fuga de Args en Stack Trace → Nombres, Correos Electrónicos, Hashes de Contraseñas Resumen CVE-2025-32044 es una vulnerabilidad de divulgación de información sin autenticación de severidad alta CVSS 7.5 en...

DeadMatter

DeadMatter DeadMatter es una herramienta especializada escrita en C, diseñada para extraer información sensible, como hashes de contraseñas de sesiones de inicio de sesión activas, a partir de volcados de memoria. Emplea técnicas de carving para recuperar credenciales de diversos tipos de archivo...

CVE-2021-44228-Log4Shell-Hashes

CVE-2021-44228-Log4Shell-Hashes Hashes para versiones vulnerables de LOG4J Creado para ayudar a las organizaciones a buscar estas versiones vulnerables https://www.lunasec.io/docs/blog/log4j-zero-day/ Fuente de los hashes: https://archive.apache.org/dist/logging/log4j/ Posiblemente 1.X afectada...

CVE-2024-24919

Check point:CVE-2024-24919 ejecutar CVE nuclei -list chick.txt -t CVE-2024-24919.yaml Reemplace con la dirección IP objetivo, y este comando intentará acceder al archivo /etc/shadow, que contiene los hashes de contraseñas. curl --path-as-is -i -s -k -X POST \ -H 'Host: 117.102.198.7 ' \ -H...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

CVE-2026-100719

Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure ...

EUVD-2026-87692

Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure ...

CVE-2026-100719

Froxlor versions before 2.3.12 are affected by a credential disclosure vulnerability within the DirProtections.listing API command. The root cause allows authenticated API users to retrieve bcrypt password hashes for users of protected directories. This exposure enables offline cracking attempts ...

CVE-2026-100719 Froxlor before 2.3.12 Credential Disclosure via DirProtections API

Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure ...

CVE-2026-100543

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

EUVD-2026-87507

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

CVE-2026-100543

The OpenClaw npm package (version openclaw before 2026.8.1 ) is vulnerable to information disclosure because it includes deterministic hashes computed over original, unredacted configurations within redacted configuration responses. If the Gateway password has low entropy and other configuration ...