thc-hydra

H Y D R A c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for illegal purposes...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Este script escanea una IP/rango/CIDR y muestra los servidores Microsoft Exchange y las versiones descubiertas. La IP/rango/CIDR especificada se escaneará con masscan en el puerto tcp/443. Después de un escaneo exitoso, intenta hacer HTTP GET "/owa/auth/logon.aspx" con curl...

win-brute-logon

Notice 1: We are excited to announce that our current tool has been ported to a PowerShell version. This means that users can now access and use the tool directly from the PowerShell command line, making it even more convenient and efficient to use. We believe that this new version will greatly...

LogonTracer

Concept LogonTracer v2 is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which...

DiagTrackEoP

DiagTrackEoP Just another way to abuse SeImpersonate privilege. This PoC is based on this blog by @crisprss. In this blog @crisprss showed some interesting method to abuse SeImpersonate privilege using AzureAttestService which comes with recent verions of SQL server, PoC for that can be found her...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - Multi-Factor Authentication MFA Bypass Exploit Title: Userlock - Multi-Factor Authentication MFA Bypass Date: 01/11/2023 Exploit Author: Pinar Sadioglu Vendor Homepage: https://www.isdecisions.com/products/userlock/help/ Version: = 11.0.1.40 Tested on:...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

SAPKiln

OWASP SAPKiln El mundo 🌎 de SAP es muy vasto y único. SAP tiene múltiples productos para abordar diversos problemas, así como múltiples plataformas tecnológicas como NetWeaver, etc. SAPKiln es una herramienta GUI de código abierto 💻 diseñada para capacitar a los investigadores de seguridad en la...

Koh

Koh Koh es un conjunto de herramientas en C y Archivos de Objeto Beacon BOF que permite la captura de material de credenciales de usuario mediante una fuga intencionada de tokens/sesiones de inicio de sesión. Parte del código se inspiró en el proyecto Internal-Monologue de Elad Shamir sin licenci...

DahuaConsole

Dahua Console Versión: Pre-alpha Bugs: Efectivamente TODO: Muchas cosas Requisitos de instalación sudo pip3 install -r requirements.txt Argumentos -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 permite la inyección de mensajes de advertencia. Descubierto: 15 de febrero de 2022 Versiones afectadas: 9.4 Exploit de PoC: SASLogon/csrf tiene un parámetro llamado "target" Este parámetro afecta el mensaje de advertencia de la URL que el usuario estaba a punto de...

sap_logon_ticket

saplogonticket General toolkit related to SAP's SSO mechanism : the Logon Tickets...

CVE-2026-83540

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

CVE-2026-83540 wolfSSHd on Windows race condition leading to logon token reused across connections

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

CVE-2026-83540

The wolfSSHd Windows port is vulnerable to a race condition in versions 1.4.15 through 1.5.0 . When using password or public key authentication, the Windows logon token from one authenticated connection is not released before being reused for a subsequent connection. This flaw can lead to user lo...

CVE-2026-83540 wolfSSHd on Windows race condition leading to logon token reused across connections

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

CVE-2026-83540 wolfSSHd on Windows race condition leading to logon token reused across connections

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: lpfc: Moved the unregistration of NPIV’s transport to after resource cleanup. There are cases after NPIV is deleted where the fabric switch still believes that NPIV is logged into the fabric. This occurs when a vport is...

CentOS Linux 6 [TuxCare] Security Update: mysql / mysql-bench / mysql-devel / mysql-embedded / etc (CENTOS6:CLSA-2026:1777683582)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777683582 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.59...

Linux Distros Unpatched Vulnerability : CVE-2026-87269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable...