CVE-2026-102458

EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API...

ecapture

汉字 | English eCapture旁观者: capture SSL/TLS text content without a CA certificate using eBPF. !IMPORTANT Supports Linux/Android on x8664 kernel 4.18+ and aarch64 kernel 5.5+. Kernel version requirements apply per CPU architecture for both Linux and Android. Need ROOT permission or specific Linux...

CVE-2026-102458

The EasyFlow .NET software developed by DigiWin is vulnerable to a Missing Authentication flaw. This security weakness allows unauthenticated remote attackers to access and obtain plaintext passwords belonging to other users by interacting with a specific API. The vulnerability is characterized b...

EUVD-2026-89714

EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV Decryptor Cryptanalysis of a proprietary 1999 video DRM system, recovering 51 minutes of lost media through static binary analysis and known-plaintext attack. Frame from a recovered "CyberRing" match. WCW wrestlers were filmed against blue screen and composited into a CGI arena...

pax

pax Exploit padding oracles for fun and profit! Pax PAdding oracle eXploiter is a tool for exploiting padding oracles in order to: 1. Obtain plaintext for a given piece of CBC encrypted data. 2. Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by...

enject

enject Hide .env secrets from prAIng eyes. Note: this project was previously called enveil and has been renamed to enject AI coding tools like Claude Code, Copilot, Cursor, and others can read files in your project directory, which means a plaintext .env file is an accidental secret dump waiting ...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

leakdb

LeakDB LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext "Have I Been Pwned"-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large...

CVE-2023-49367

CVE-2023-49367 - Sensetive Data Exposure Sensetive Data Exposure in Kyocera Printer Web Panel Vendor: Kyocera Corporation Affected Versions: Command Center RX - EXOSYS M5521cdn Description After connecting to the Kyocera interface address book, test requests for smb and ftp can be seen in the sen...

iCULeak.py

iCULeak.py Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM Call Manager. When using Cisco's CUCM Call Manager, phone configuration files are stored on a TFTP server. These VoIP phone configuration files quite frequently contain sensitive...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

PasswordFilter

PasswordFilter 2 ways of Password Filter DLL to record the plaintext password More detials: https://3gstudent.github.io/Password-Filter-DLL%E5%9C%A8%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B8%AD%E7%9A%84%E5%BA%94%E7%94%A8...

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

MicroburstSecretsHunter

MicroBurst Secrets Hunter Un escáner de PowerShell que examina la salida de Get-AzDomainInfo de MicroBurst en busca de contraseñas en texto plano, claves, cadenas de conexión y otros secretos que nunca deberían permanecer sin cifrar en un entorno de Azure. Diseñado para flujos de trabajo de...

NativeBypassCredGuard

NativeBypassCredGuard NativeBypassCredGuard es una herramienta diseñada para eludir Credential Guard parcheando WDigest.dll utilizando únicamente funciones NTAPI exportadas por ntdll.dll. Está disponible en dos variantes: C y C++. La herramienta localiza el patrón "39 ?? ?? ?? ?? 00 8b ?? ?? ?? ?...

CVE-2020-24227

CVE-2020-24227 Playground Sessions: almacenamiento de credenciales de usuario en texto plano Playground Sessions v2.5.582 y versiones anteriores para Windows almacena las credenciales de usuario en texto plano, lo que permite a cualquier persona con acceso a...

tsh-sctp

Tiny SHell - Una puerta trasera UNIX de código abierto Antes de compilar Tiny SHell 1. En primer lugar, debes configurar tu clave secreta, que se encuentra en tsh.h; la clave puede tener cualquier longitud usa al menos 12 caracteres para una mejor seguridad. 2. Se recomienda cambiar SERVERPORT, e...

BEAST-PoC

BEAST-PoC ataque de texto plano elegido Esta prueba de concepto se centra en la criptografía detrás del ataque BEAST Browser Exploit Against SSL/TLS presentado por Thai Duong y Juliano Rizzo el 23 de septiembre de 2011. Esto es un ataque de texto plano elegido y permite recuperar información...