ff-password-exporter

FF Password Exporter Firefox에서 비밀번호를 내보내는 것은 어려울 수 있습니다. Firefox 57Quantum부터 기존의 비밀번호 내보내기 애드온이 더 이상 작동하지 않습니다. Mozilla는 다른 공식 대안을 제공하지 않습니다. FF Password Exporter를 사용하면 Firefox의 모든 비밀번호를 빠르고 쉽게 내보낼 수 있습니다. FF Password Exporter는 Windows, macOS 및 Linux 배포판에서 사용할 수 있습니다. 다운로드/설치 Windows 7, 8, 10 이상...

CVE-2024-3183-POC

CVE-2024-3183-POC POC for CVE-2024-3183 FreeIPA Rosting Impact: A low-privileged user can obtain a hash of the passwords of all domain users and perform offline brute force kerberoasting. Patch impacket-getTGT: 1. Add decoder.decode.defaultErrorState = stGetValueDecoderByTag to...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

glimmer

Glimmer Adversary emulation framework for offensive security research and purple team operations. Glimmer is a custom C2 framework built from scratch to explore persistence, evasion, and detection engineering across workstation, cloud, and embedded environments. This is a research and portfolio...

lsPass

lsPass: gestor de contraseñas local y cifrado GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass guarda inicios de sesión, notas seguras y claves de API en un almacén cifrado local. Sin red, sin nube, sin telemetría. Nunca se escribe nada secreto en disco en texto plano. Compilar y probar...

zerologon

Script de explotación de ZeroLogon Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación y escáner originales por Secura, modificaciones por RiskSense Inc. Para explotar, elimina cualquier instalación previa de Impacket q...

CVE-2025-4094

CVE-2025-4094 – WordPress Digits Plugin This method is useful for vi...

cve-2022-22976-bcrypt-skips-salt

BCrypt Hash Check To assist with the mitigation steps for CVE-2022-xxxx, you can use this tool to check your database for hashes that need updating. After you've integrated the application with your database, the tool works in two steps. To demonstrate this a in-memory sample application is used...

CVE-2024-10508

Unauthenticated Privilege Escalation via Password Recovery on RegistrationMagic = 6.0.2.6 Disclaimer : This information is provided for educational purposes only. This document aims to raise awareness of security vulnerabilities and should not be used for any unauthorized or malicious activities...

TendaSpill

TendaSpill An exploitation tool to extract passwords using CVE-2015-5995. CVE-2015-5995 Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header...

LDAP-Password-Hunter

LDAP Password Hunter It happens that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py Impacket and ldapsearch in order to lo...

CVE-2026-19218

The MyRezzta software, developed by AKIN Software Computer Import-Export Industry and Trade Co. Ltd., contains a Weak Password Recovery Mechanism for forgotten passwords. This vulnerability, identified as CWE-640 , allows for password recovery exploitation, which can lead to account takeover. The...

EUVD-2026-94927

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01...

CVE-2026-19218 Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01...

CVE-2025-54321

CVE-2025-54321 Reset Password Email Bombing Description The reset password function does not implement rate limiting for the target email address. This allows for an Email Bombing attack CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discoverer Yazan...

wifi-cracking

Wi-Fi Cracking Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat. 이것은 약한 비밀번호로 보호된 Wi-Fi 네트워크를 크랙하는 방법을 설명하는 간단한 실습 튜토리얼입니다. 포괄적이지는 않지만, 자신의 네트워크 보안을 테스트하거나 주변 네트워크에 침투하기에 충분한 정보를 제공해야 합니다. 아래에 설명된 공격은 완전히 수동적컴퓨터에서 아무것도 전송하지 않고 듣기만 함이며, 크랙한 비밀번호를 실제로 사용하지 않는 한 탐지가 불가능합니다. 선택적 ...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

RDPassSpray

RDPassSpray RDPassSpary is a python tool to perform password spray attack in a Microsoft domain environment. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: pip3 install -r requirements.txt Second, make sure you have xfreerdp: apt-g...