Lucene search
+L

1748 matches found

Kitploit
Kitploit
added 2026/09/13 11:50 a.m.5 views

CVE-2018-15473_burte

CVE-2018-15473burte openssh7.7 username enumeration...

5.9CVSS6.9AI score0.98631EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/13 11:09 a.m.4 views

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/13 11:02 a.m.3 views

CVE-2018-15473

CVE-2018-15473 Cause The OpenSSH server does not delay processing an invalid user until the packet containing the request is fully parsed. This vulnerability is related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Exploitation Although this vulnerability cannot be used to generate a val...

5.9CVSS6.7AI score0.98631EPSS
SaveExploits26References2
Kitploit
Kitploit
added 2026/09/13 9:51 a.m.4 views

cve-2018-15473

CVE-2018-15473: OpenSSH Username Enumeration OpenSSH through 7.7 allows remote attackers to enumerate valid usernames by sending malformed authentication requests and observing differential server responses. Details Field| Value ---|--- Affected Software| OpenSSH 2.3 through 7.7 CVSS v3.1| 5.3...

5.9CVSS7AI score0.98631EPSS
SaveExploits26References2
Kitploit
Kitploit
added 2026/09/13 8:58 a.m.8 views

o365spray

o365spray o365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 O365. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments. For educational, authorized and/or research purpose...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 8:44 a.m.9 views

CVE-2022-23342

CVE-2022-23342 Security Advisory – Username Enumeration in OnBase Affected software versions and builds: OnBase Application Server OnBase releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are impacted. Fixed software versions and builds: OnBase EP3 releases great...

5.3CVSS6AI score0.01276EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 8:19 a.m.5 views

user-scanner

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 465+ total scan vectors —including 175+ email-integrated sites and 290+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...

5.8AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/13 5:20 a.m.6 views

go-sherlock

go-sherlock go-sherlock is an implementation of sherlock written in Go with some changes for better performance and more accurate results. Provided by Skele's Choice. Skele's Choice, it's the best choice! Ask your bones! skele.company Inspiration, Reference, & Credits sherlock WhatsMyName Effecti...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 4:15 a.m.8 views

WhatsMyName

WhatsMyName WhatsMyName WMN is a community-maintained dataset that lets you find out if a username exists across hundreds of websites. If you're investigating a person of interest, verifying an online identity, or simply curious about your own digital footprint, this project powers the tools that...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 3:07 a.m.6 views

CVE-2016-6210-exploit

CVE-2016-6210-exploit Custom exploit python 2.7 written for enumerating usernames as per CVE-2016-6210 OpenSSH 7.2-p2 & prior should only be used on authorised systems DESCRIPTION I wrote this program as a tool to exploit CVE-2016-6210, which is a vulnerability in OpenSSH before version 7.3...

5.9CVSS6.8AI score0.88944EPSS
SaveExploits12
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.41 views

Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration

Zoho ManageEngine ADSelfService Plus 6121 is vulnerable to username enumeration CVE-2022-28987. The Forgot Password functionality responds differently for existing and non-existing users, allowing attackers to enumerate valid usernames. id: CVE-2022-28987 info: name: Zoho ManageEngine ADSelfServi...

5.3CVSS5.9AI score0.10282EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.48 views

Usermin 2.100 - Username Enumeration

Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...

5.3CVSS5.9AI score0.02566EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.65 views

Pritunl VPN Server 1.29.2145.25 - Username Enumeration

Pritunl 1.29.2145.25 contains a username enumeration issue caused by different error responses in /auth/session login attempts, letting attackers verify valid usernames, exploit requires network access to the login endpoint. id: CVE-2020-25200 info: name: Pritunl VPN Server 1.29.2145.25 - Usernam...

5.3CVSS5.9AI score0.0747EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.54 views

AnythingLLM - Username Enumeration via Password Recovery

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling...

5.3CVSS5.8AI score0.00779EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 1:36 a.m.7 views

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage root@kitploit: $ python wpUsersScan.py URL How to install Clone Clone the repository with: root@kitploit: $ git clone...

5.3CVSS7AI score0.87299EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 1:19 a.m.9 views

CVE-2024-54772

CVE-2024-54772 implemented in Rust this vulnerability allows to enumerate valid mikrotik router usernames...

5.4CVSS6AI score0.00792EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:19 a.m.4 views

CVE-2020-35846

CVE-2020-35846 - Prueba de Concepto para Filtrar Nombres de Usuario de Cockpit John Hammond | Domingo, 25 de julio de 2021 Script Python de prueba de concepto para filtrar nombres de usuario de Cockpit con CVE-2020-35846...

9.8CVSS8.1AI score0.93292EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 10:21 p.m.6 views

Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:45 p.m.10 views

Tritium

Tritium A tool to enumerate and spray valid Active Directory accounts through Kerberos Pre-Authentication. Background Although many Kerberos password spraying tools currently exist on the market, I found it difficult to find tools with the following built-in functionality: The ability to prevent...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:25 p.m.8 views

linkedin2username

linkedin2username Herramienta OSINT: Genera listas de nombres de usuario a partir de empresas en LinkedIn. Esto es un web scraper puro, no se requiere clave API. Usas tu nombre de usuario y contraseña válidos de LinkedIn para iniciar sesión, y creará varias listas de posibles formatos de nombre d...

6AI score
SaveExploits0
Rows per page
Query Builder