Mirai-Spray

Mirai-Spray Scans typical Mirai loader/hostlists format with Hydra. This can be used to check if a list of hosts are able to be connected to. INSTALLATION root@kitploit: apt update -y && apt upgrade -y apt install tor git clone https://github.com/Skotizo/Mirai-Spray cd Mirai-spray g++ main.cpp -o...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Muchos módulos fueron escritos por David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licenciado bajo AGPLv3 ver archivo LICENSE Por favor, no lo utilices en organizaciones militares o de...

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

HydraDragonAntivirus

Hydra Dragon Antivirus 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. WARNING: ACTIVE DEVELOPMENT IN PROGRESS This project is not production-ready. Breaking changes, bugs, and incomplete features should be expected...

Athanasius

Athanasius Hacking Framework Installation 1.Clone Repo root@kitploit: git clone https://github.com/shyam999/Athanasius.git 2.Install Requirements root@kitploit: pip install -r requirements.txt 3.Install hydra root@kitploit: sudo apt install hydra 4.Run The Script root@kitploit: python athanasius....

MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

mass-bruter

Mass Bruter Fuerza bruta masiva de protocolos de red Información POC simple para forzar rápidamente servicios comunes en una gran escala de red. Comprobará credenciales por defecto en ftp, ssh, mysql, mssql...etc. Esto fue creado únicamente con fines de pruebas de penetración autorizadas. Cómo...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

CVE-2025-68055-poc

CVE-2025-68055 Inyección SQL autenticada en Hydra Booking Plugin get, Hydra Booking introduce directamente la entrada del usuario en la consulta SQL cruda en lugar de usar prepare para sanitizar la entrada, lo que conduce a una inyección SQL ciega basada en tiempo. Exploit Un comando de ejecución...

hydra

채팅 · 토론 · 뉴스레터 · 문서 · Ory Network 사용해 보기 · 채용 Ory Hydra는 낮은 지연 시간, 높은 처리량, 낮은 리소스 소비에 최적화된 강화된OpenID 인증 OAuth 2.0 서버이자 OpenID Connect 제공자입니다. 로그인 및 동의 앱을 통해 기존 ID 제공자에 연결되므로 사용자 인터페이스와 경험을 완전히 제어할 수 있습니다. Ory Hydra란 무엇인가? Ory Hydra를 선택하는 이유 OAuth2 및 OpenID Connect: 공개 표준 OpenID Connect 인증 배포 옵션 O...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage root@kitploit: python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra Deliver malware via CVE-2024-21412 usage Start the services in order, then access the web server. webserver Start a web server in the folder: python -m http.server Initial Access: Use Windows Advanced Query Syntax AQS to link back to a JPEG trojan hosted on a WebDAV shar...

ubuntu-privesc-lab

ubuntu-privesc-lab Flujo de trabajo completo de pruebas de penetración: fuerza bruta de credenciales, acceso SSH y escalada de privilegios CVE-2021-4034 VISIÓN GENERAL Este proyecto demuestra un flujo de trabajo completo de pruebas de penetración contra una máquina virtual Ubuntu vulnerable. La...

HydraDragonAntivirus openedr-v2-release-9

Hydra Dragon Antivirus 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. WARNING: ACTIVE DEVELOPMENT IN PROGRESS This project is not production-ready. Breaking changes, bugs, and incomplete features should be expected. ⚠️ NOTICE: This repository is...

Malicious Package

Overview bellatrix-bunyan-neptune-hydra is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

CVE-2026-68508

A flaw was found in Hydra. The hydra.utils.instantiate function, used for configuring complex applications, can be exploited by passing untrusted configuration. This allows an attacker to control target values and arguments, leading to the execution of arbitrary code within the application's...

CVE-2026-68508

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate resolves and calls Python objects selected by configuration through resolvetarget in hydra/internal/instantiate/instantiate2.py, allowing attacker-controlled target values and arguments to...

GHSA-2CP2-2R3C-7P7R Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

Summary hydra.utils.instantiate resolves and calls Python objects from config. If an application passes untrusted config to instantiate, an attacker who controls target and its arguments can cause arbitrary code execution in the consuming process. Hydra is not a network service. Exploitation...