967 matches found
username-anarchy
Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...
win-brute-logon
Notice 1: We are excited to announce that our current tool has been ported to a PowerShell version. This means that users can now access and use the tool directly from the PowerShell command line, making it even more convenient and efficient to use. We believe that this new version will greatly...
CVE-2022-31007-Python-POC
أتمتة بايثون لـwrite up التالي حول تجاوز قفل الحساب في elabFTW وهجوم القوة الغاشمة على تسجيل الدخول، والذي يؤثر على الإصدارات الأقدم من 4.1.0. يمكن استخدام كلا السكربتين ضد مختبر Proving Grounds Practice المسمى Source، والذي يشغّل إصدارًا معرضًا للثغرات من elabFTW - وهو دفتر مختبر إلكتروني مجاني...
smartbrute
Description The smart password spraying and bruteforcing tool for Active Directory Domain Services. ⚠️ This project works. But the filthy coding makes it more PoC than a stable tool. I may or may not rewrite this in the future, but at least you have everything here to work with bruteforce on any...
CVE-2020-15931
CVE-2020-15931 ثغرة الكشف عن بيانات اعتماد حساب مسؤول المجال في Netwrix Account Lockout Examiner 4.1 نظرة عامة على الثغرة يتيح Netwrix Account Lockout Examiner ALE قبل الإصدار 5.1 لمهاجم بعيد غير مصادَق إمكانية تحفيز اتصال بنظام يتحكم فيه المهاجم والتقاط استجابة التحدي NTLMv1/v2 لحساب يتمتع...
aad-sso-enum-brute-spray
aad-sso-enum-brute-spray POC de la vulnérabilité de force brute sur les mots de passe Azure Active Directory récemment révélée par SecureWorks Description Ce code est une preuve de concept de la vulnérabilité de force brute sur les mots de passe Azure Active Directory récemment révélée, annoncée...
MSF_PassSpray_Wordlist_Generator
Password Spray Wordlist Generator A handy tool that helps you to create your own wordlist for Metasploit framework, in order to carry out a password spray attack against various network protocols in your victims' domain, such as SMB : Description Metasploit has multiple modules that can be utiliz...
EUVD-2026-93512
Payload: Unauthenticated account-lockout denial of service...
Payload: Unauthenticated account-lockout denial of service
Impact An unauthenticated attacker who knows an account’s email address or username could trigger Payload’s account lockout mechanism and prevent that user from signing in. You are affected if: Using an affected Payload version with an auth-enabled collection that uses local authentication and...
GHSA-V5GF-VPJC-PC7W Payload: Unauthenticated account-lockout denial of service
Impact An unauthenticated attacker who knows an account’s email address or username could trigger Payload’s account lockout mechanism and prevent that user from signing in. You are affected if: Using an affected Payload version with an auth-enabled collection that uses local authentication and...
NPM: Payload: Unauthenticated account-lockout denial of service
NPM: Payload: Unauthenticated account-lockout denial of service vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424
تجاوز المصادقة الثنائية باستخدام هجوم القوة العمياء نظرة عامة تطبيق Nagios Fusion الإصدار 2024R1.2 و2024R2 معرض لهجوم القوة العمياء على آلية المصادقة الثنائية 2FA. وتحديدًا، لا يفرض تطبيق 2FA بشكل كافٍ آليات تحديد المعدل أو إغلاق الحساب، مما يسمح للمهاجم بتجاوز 2FA عن طريق تخمين كلمة المرور لمرة...
CVE-2026-105866
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...
CVE-2026-105866 Payload: Unauthenticated account-lockout denial of service
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...
CVE-2026-105866
The headless content management system Payload is vulnerable in versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 . An unauthenticated attacker who possesses an account email address or username can exploit the account lockout mechanism within a local-authentication collection ....
CVE-2026-105866 Payload: Unauthenticated account-lockout denial of service
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...
CVE-2026-105866 Payload: Unauthenticated account-lockout denial of service
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...
PT-2026-106799
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description An unauthenticated attacker who knows a user's email address or username can abuse the account lockout mechanism of a local-authentication collection...
EUVD-2026-91055
Filament: Multi-factor authentication app management actions do not require password reauthentication...
CVE-2020-15906
CVE-2020-15906 شرح لـ CVE-2020-15906. شكر خاص لـ Frederic Mohr Lastbreach على دعمك الخلفي. Tiki Wiki Cms Groupware 16.x - 21.1 تجاوز المصادقة بواسطة Maximilian Barz لقد وجدت ثغرة جديدة في TikiWiki Cms Groupware 16.x - 21.1. تسمح للمهاجمين غير المصادقين عن بُعد بتجاوز صفحة تسجيل الدخول مما يؤدي إل...