wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/ihebski/wpUsersScan.git $ c...

osueta

/ \ / / | || | | | ' / - ' \ \ \ | /| ./||||//||| || | | | | | | | | | || -/ - '| | || ' \ || | ' / - '/ | | / \ ' \ ///|| ||||,||||| ,||/||| | /| || | | | | | | | ' | | ' / | / \ | / / | / / || ||||||||, | // \|\,|\ |/ What's OSUETA? Osueta it's a simple Python2 script to...

CVE-2016-6210-Exploit

This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...

RFCpwn

RFCpwn An SAP enumeration and exploitation toolkit using SAP RFC calls Twitter: @icryo This is a toolkit for demonstrating the impact of compromised service accounts. This PoC is not for use in production environments, no guarantee of stability or support. RFCpwn relies on the pyrfc and the...

username-anarchy

Username Anarchy バージョン: 0.6（2024年9月20日） 著者: urbanadventurer Andrew Horton ホームページ: https://www.morningstarsecurity.com/research/username-anarchy ソース: https://github.com/urbanadventurer/username-anarchy/ ライセンス: MIT 説明 ペネトレーションテスト時にユーザー名を生成するためのツール。 ユーザー名はパスワードブルートフォース問題の半分を占めます。...

GoMapEnum

This project was originally written to learn Golang and explore the different ways I've encountered when pentesting to enumerate or brute force users and write them together. If you have any errors, feel free to create an issue and I'll do my best to fix them or improve the tools. GoMapEnum Nothi...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

ridenum

RIDENUM - A simple open source method for performing null session brute forces Copyright 2018 TrustedSec Written by: David Kennedy ReL1K Twitter: @HackingDave and @TrustedSec Website: https://www.trustedsec.com . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | | | .--. | | | | | | | | | | |...

LiquidFiles < 4.2 - User Enumeration via Password Reset

LiquidFiles filetransfer server before 4.2 contains a user enumeration vulnerability caused by distinguishable responses in password reset functionality, letting unauthenticated attackers enumerate valid user accounts, exploit requires no authentication. id: CVE-2025-56132 info: name: LiquidFiles...

Dify User Enumeration via Observable Response Discrepancy

Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...

NocoDB - User Enumeration

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered emails, allowing user enumeration. This issue has been patched in version 0.301.3. id: CVE-2026-28358 info: name: NocoDB -...

WPCracker

WPCracker WordPress user enumeration and login Brute Force tool for Windows and Linux With the Brute Force tool, you can control how aggressive an attack you want to perform, and this affects the attack time required. The tool makes it possible to adjust the number of threads as well as how large...

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

CVE-2022-1162

CVE-2022-1162 A GitLab TakeOver Tool A simple tool to enumerate users in gitlab and login using CVE-2022-1162 Google Dork intitle:"Sign in · GitLab" Cmd python code.py https://url.com Pull Requests are Welcome!...

drupwn

Drupwn v1.0.4 Description Drupwn claims to provide an efficient way to gather drupal information. Enumeration Exploitation Further explaination on our blog post article Supported tested version Drupal 7 Drupal 8 Execution mode Drupwn can be run, using two seperate modes which are enum and exploit...

opensshenum

説明: Opensshenum は OpenSsh ユーザ列挙ツールで、任意のユーザ名リストを OpenSsh サーバに対して検証し、そのリモートマシンに実際に存在するユーザを特定します。このプログラムは2018年7月に修正されたバグを悪用し、少なくともOpenSSH 2.3.0（2000年11月リリース）以降で有効であることが確認されています。 私はこのエクスプロイトを、RFCに基づいてC++11でスクラッチから作成したSSH 2クライアントTsshを基に作成しました。 詳細はこちらをお読みください： http://seclists.org/oss-sec/2018/q3/124...

msmailprobe

msmailprobe Office 365 및 Exchange 열거 OWAOutlook Web App가 시간 기반 사용자 열거 공격에 취약하다는 것은 널리 알려져 있습니다. 이 도구는 기본 Exchange 설치에서 노출되는 모든 알려진 서비스와 덜 알려진 일부 서비스를 활용하여 사용자를 열거합니다. 또한 Office 365를 대상으로 오류 기반 사용자 열거를 수행합니다. 시작하기 종속성이 없는 간단한 코드를 다운로드하여 컴파일하려면 먼저 GoLang을 설치해야 합니다! 이 작업은 훌륭한 문서와 다른 온라인 리소스를 참고하시기...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2019-8449

CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

WPintel

Features • Installation • Use • License • Download Video Demonstration Features Detect WordPress version Detect version vulnerabilities Enumerate Users Detect Themes Detect Plugins Find full path disclosure Check user registration status Installation Google chrome users can download WPintel from...