BruteLoops

BruteLoops 매우 간단한 라이브러리로, 인증 인터페이스에 대한 효율적인 비밀번호 무차별 대입 공격의 기초 로직을 제공합니다. 문서 문서는 여기에서 찾을 수 있습니다. 이전 예제 모듈을 찾고 있다면... BFG를 참조하세요. 예제들은 코드 및 패키징 문제를 최소화하기 위해 별도의 프로젝트로 분리되었습니다. 데이터베이스 및 공격 기능도 하나의 바이너리로 통합되었습니다. 주요 기능 프로토콜에 구애받지 않음 - Python으로 콜백을 작성할 수 있으면 BruteLoops를 사용하여 공격할 수 있습니다. SQLite 지원 -...

Brute_Force

BruteForce 설치 : root@kitploit: sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize 사용법: Gmail 무차별 대입 공격 root@kitploit: python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle Hotmail 무차별 대입 공격...

SUSE CVE-2005-4887

NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords...

CVE-2021-47707 COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

EUVD-2025-36697

Zitadel allows brute-forcing authentication factors...

EUVD-2019-8035

Malware in sbrugna...

EUVD-2006-0871

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-1722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password = 1,000,000 characters to the server, the password hashing process...

PT-2025-31910 · Unknown · Atjiu Pybbs

Name of the Vulnerable Software and Affected Versions: atjiu pybbs versions up to 6.0.0 Description: A critical issue exists in atjiu pybbs up to version 6.0.0 related to weak password requirements in the update function of the file...

CVE-2025-2500

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...

CVE-2025-2500

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...

CVE-2025-2500

CVE-2025-2500 affects Hitachi Energy Asset Suite SOAP Web services. Public documentation indicates a vulnerability in SOAP-based interfaces that could allow an attacker to gain unauthorized access and potentially extend the window for password attacks. Reported CVSS data (3.1: High, 7.4; 4.0: Cri...

CVE-2025-2500

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...

CVE-2025-2500

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...

PT-2025-23284 · Unknown · Asset Suite

Name of the Vulnerable Software and Affected Versions: Asset Suite versions affected versions not specified Description: A vulnerability exists in the SOAP Web services, allowing an attacker to gain unauthorized access to the product if successfully exploited. This could also expand the time wind...

CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

Splunk Enterprise Information Disclosure Vulnerability (CNVD-2024-34261)

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines and cloud. Splunk...

WinFiHack - A Windows Wifi Brute Forcing Utility Which Is An Extremely Old Method But Still Works Without The Requirement Of External Dependencies

WinFiHack is a recreational attempt by me to rewrite my previous project Brute-Hacking-Framework's main wifi hacking script that uses netsh and native Windows scripts to create a wifi bruteforcer. This is in no way a fast script nor a superior way of doing the same hack but it needs no external...

CVE-2023-6928

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system...

CVE-2023-6928

Summary (supported by provided documents): CVE-2023-6928 affects EuroTel ETL3100 transmitter versions v01c01 and v01x37. The vulnerability is an improper restriction of excessive authentication attempts (CWE-307), enabling a remote attacker to perform brute-force-like password guessing for admini...