RomBuster

RomBuster RomBuster is a router exploitation tool that allows to disclosure network router admin password. Features Exploits vulnerabilities in most popular routers such as D-Link, Zyxel, TP-Link, Cisco and Huawei. Optimized to exploit multiple routers at one time from list. Simple CLI and API...

Evasive_Malware_Book_Samples

『Evasive Malware』書籍のサンプル 私の書籍『Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats』https://nostarch.com/evasive-malware で参照されているサンプル 法的免責事項 このリポジトリは、付随する出版物（『Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...

kraken

警告 私はKraken-Clientのコードをレビューしてきましたが、これは私の初めてのReactアプリであり、古くて使い勝手が悪く、大幅な改善が必要です（サーバー側も同様に手を加える必要があります）。今後数週間から数か月のうちに、最新のReactまたは別のフレームワークで書き直すよう努力します。現状のまま引き続きご利用いただいて構いません。問題があれば引き続きIssueを報告し、フィードバックをお寄せください。ありがとうございます！ Kraken: マルチプラットフォーム分散ブルートフォースパスワードクラックシステム Krakenとは...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

CVE-2024-33901-ProofOfConcept

CVE-2024-33901-ProofOfConcept Short program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7 The report for the class might need the source code linked, so that's why I created the repo for this How to replicate the vulnerability 1. Open KeePassXC and authenticate the...

CVE-2017-8295

CVE-2017-8295 Wordpress has a password reset feature that contains a vulnerability which might in some cases allow attackers to get hold of the password reset link without previous authentication. Such attack could lead to an attacker gaining unauthorised access to a victim's WordPress account...

hijagger

hijagger - ハイジャック可能なパッケージをパッケージレジストリからチェックする このツールは、NPM および Python Pypi レジストリ内のすべてのパッケージのすべてのメンテナーについて、未登録のドメインまたはそれらのドメイン上の未登録の MX レコードをチェックします。ドメインが未登録の場合、そのドメインを取得し、2 要素認証が有効になっていなければアカウントのパスワードリセットを開始できます。これにより、パッケージをハイジャックして、そのパッケージに対して任意の操作を行うことができます。...

CVE-2025-2304_POC

CVE-2025-2304POC CVE-2025-2304 POC - Camaleon CMS Privilege Escalation This POC is used to exploit Camaleon CMS privileges to administrator. The exploit works by injecting role into the password reset function of an authenticated user. Prerequisites & Assumptions You have a user account on the...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ それは何ですか？ CrackLord は、スケーラブルでプラグイン可能な分散システムを提供するために設計されたシステムで、パスワードクラッキングだけでなく、大量の計算リソースを必要とするあらゆるジョブに対応します。より明確に言うと、CrackLord は複数のハードウェアシステムからの CPU、GPU、ネットワークなどのリソースを負荷分散し、Resource と Queue という2つの主要サービスからなる単一のキューイングサービスに統合する方法です。...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

CVE-2019-18634

CVE-2019-18634 I wrote this exploit for Linx Mint 19.1 so probably it'll not work for other distributions. If you're exploint a real environment I recommend you to use Salem Rashid's exploit version, which has the proper offsets for other sudo versions. This is just an exploit for this specfic OS...

wifi-cracking

Wi-Fi Cracking Airodump-ng と Aircrack-ng/Hashcat を使って WPA/WPA2 Wi-Fi ルーターをクラックします。 これは、脆弱なパスワードで保護された Wi-Fi...

CredMaster

CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. Shoutout to @ustayready for his CredKing and FireProx tools,...

CVE-2025-51586-PrestaShop-PoC

CVE-2025-51586 - PrestaShop AdminLogin Email Enumeration PoC 📌 Overview This repository contains an ethical Proof-of-Concept PoC for the vulnerability CVE-2025-51586, affecting PrestaShop versions 1.7.x — 8.2.2. The PoC enumerates administrator email addresses via the Back Office password reset...

drupal-exploit

drupal-exploit CVE-2018-7600 This script will exploit the CVE-2018-7600 vulnerability in Drupal 7 : drupal.py https://drupaldomain/drupal/ uid=33www-data gid=33www-data groups=33www-data https://nvd.nist.gov/vuln/detail/CVE-2018-7600 https://www.drupal.org/sa-core-2018-002...

CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authenticated SQL Injection Usage usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to login with username...

LDAP-Password-Hunter

LDAP Password Hunter It happens that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py Impacket and ldapsearch in order to lo...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

enumpossible

enumpossible Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability CVE-2018-15473 in those identified. Uses a slightly modified version of https://www.exploit-db.com/exploits/45939 by @LeapSecurity to check for CVE-2018-15473...