CVE-2020-25078

D-Link DCS Series Account Password Information Disclosure Vulnerability D-Link DCS Series account password information disclosure vulnerability, obtain account password via script to log in. Vulnerability ID CVE-2020-25078 Tool Usage python3 CVE-2020-25078.py -u http://127.0.0.1:1111 single URL...

openwifipass

OpenWifiPass AppleのWi-Fiパスワード共有プロトコルにおけるgrantor役割のオープンソース実装です。 免責事項 OpenWifiPassは実験的なソフトウェアであり、Open Wireless Linkプロジェクトによるリバースエンジニアリングの成果です。 このコードは文書化および教育目的のみに提供されています。 未テスト であり、 不完全 です。 例えば、コードはリクエスタの身元を検証しません 。したがって、機密性の高いWi-Fi認証情報ではこの実装を使用しないでください。 OpenWifiPassはApple Inc.との提携や推奨を受けるものではありません。...

PSForgot2kEyXCHANGE

PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...

Zip-Cracker-

Zip Cracker This Script Supports Only Zip File in This Verson You Can Also Use This Script With crunch Cross-platform Supported Usage: zipcracker.py options Options: --version show program's version number and exit -h, --help show this help message and exit -f FILENAME, --file=FILENAME Please...

cisco7crack

cisco7crack crypt and decrypt the cisco enable 7 passwords...

aad-sso-enum-brute-spray

aad-sso-enum-brute-spray POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln Description This code is a proof-of-concept of the recently revealed Azure Active Directory password brute-forcing vulnerability announced by Secureworks here is the Ars Technica article that...

Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor ⚠️ For more information, please visit https://laokoon-security.com/cortex-xdr-config-exctractor/ currently in German only This tool is meant to be used during Red Team Assessments and to audit the XDR Settings. With this tool its possible to parse the Database Lock File...

CVE-2025-4322

🔐 CVE-2025-4322 – Motors = 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover 📌 Themes Information Plugin : Motors = 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover Vulnerable Version : = 5.6.67 CVE : CVE-2025-4322 Severity : 9.8...

Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...

CVE-2024-34582

CVE-2024-34582 Affects the latest versions of Mozilla & Chrome Web Browsers, Sunhillo Rici5k & Sureline The most current versions of the Web Servers running on the Sunhillo devices are susceptible to Reflected XSS. The vulnerability lies within the useridchange parameter within /cgi/usrPasswd.cgi...

PDFPasswordUnlocker

Recuperador de Contraseñas de PDF usando Google Colab Desbloquea PDF fácilmente ¿Alguna vez has olvidado la contraseña de un documento PDF crucial? ¡No temas! Con el Recuperador de Contraseñas de PDF, recuperar contraseñas olvidadas de PDF es ahora muy sencillo. Este proyecto aprovecha el poder d...

turkce-wordlist

This project does not contain any personal data such as email addresses, names, phone numbers. Passwords are listed only for academic purposes. It is not possible to associate passwords with real people. Turkish Wordlist This is a study conducted for the analysis of password choices of Turkish...

pwdgenerator

pwdgenerator Customized password dictionary generator Based on bit4woo's passmaker project～ 🙏 Usage, download release Command line: ./pwdgenerator -h Simple usage ./pwdgenerator -d baidu.com -min 6 -max 10 Customized password dictionary generator How to use download release command line:...

win-brute-logon

Notice 1: We are excited to announce that our current tool has been ported to a PowerShell version. This means that users can now access and use the tool directly from the PowerShell command line, making it even more convenient and efficient to use. We believe that this new version will greatly...

keepass2-password-finder

CVE-2023-32784 - KeePass 2.X Password dumper This is a proof of context for CVE-2023-32784, which I rewrote in python. Only requirement is a file name Usage: ./cracker.py file...

CVE-2021-26832

CVE-2021-26832 Suggested description Cross Site Scripting XSS at the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Vulnerability Type...

Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: Stealer.exe CREDITCARDS 🕘 Ge...

CVE-2019-9053-python3-remastered

CVE-2019-9053-python3-remastered The script has been remastered by Teymur Novruzov to ensure compatibility with Python 3. This tool is intended for educational purposes only. Unauthorized use of this tool on any system or network without permission is illegal. The author is not responsible for an...

elpscrk

Elpscrk - v2.0 An Intelligent common user-password profiler that's named after the same tool in Mr.Robot series S01E01 😄 In simple words, elpscrk will ask you about all info you know about your target then will try to generate every possible password the target could think of, it all depends on t...

DeepPass

DeepPass Dockerized application that analyzes documents for password candidates. The blogpost "DeepPass — Finding Passwords With Deep Learning" gives more detail on the approach and development of the model. To run: docker-compose up This will expose http://localhost:5000 where documents can be...