BaRMIe

BaRMIe BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testin...

tactical-exploitation

tactical-exploitation 「ペンテストのもう一つの方法」 -- HD Moore & Valsmith 私は常に、既知のソフトウェア脆弱性の悪用に焦点を当てるのではなく、情報収集やブルートフォースといった旧来の手法に依存する、戦術的なペネトレーションテストアプローチの強い支持者です。時折のタイミングの良い 0day...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

wpbf

wpbf! wpbf は、WordPress サイトのパスワード強度テスト、ユーザー名列挙、プラグイン検出をリモートで実行するブルートフォースツールです。 説明 ^^^^^^^^^^^ このスクリプトは、列挙したユーザー名、ワードリスト、ブログのコンテンツから抽出した関連キーワードを組み合わせて、ログインフォーム経由で WordPress ダッシュボードへのログインを試みます。単一のユーザー名が指定された場合、スクリプトは追加のユーザー名を検索しません。 正しいユーザー名/パスワードの組み合わせが見つかると、ログに記録され、標準出力に表示されます。...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

CVE-2023-48034

CVE-2023-48034 I have discovered weak encryption used in the wireless protocol of the Acer Wireless Keyboard SK-9662 FCC ID: H4IKB9662. This weak encryption allows an attacker to easily monitor and log keystrokes and also inject arbitrary keystrokes. Intro The keyboard uses a Texas Instruments...

CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaiten - a workflow management system, is vulnerable to unrestricted brute force attacks on user logins and email addresses registered in the system via a simple POST request. References: CVE MITRE Description NVD CVE Usage Simple download bash script and ru...

CVE-2024-57610

Sylius v2.0.2 中缺少速率限制 供应商主页：https://sylius.com/ 复现步骤 1. 访问 https://store.sylius.com/login 2. 使用自动化工具或脚本（例如 Burp Suite、cURL）尝试多次登录请求。 3. 观察到未应用速率限制，请求被无限制地处理。 PoC 视频 https://drive.google.com/file/d/1o5nd8eStt0tgBpKJHUay02NHVAUntPM/view 图片...

insect

insect - Webパス発見 最新リリース: v1.4 20222.09.03 ウェブサーバーのディレクトリやファイルをブルートフォースするために設計された高度なコマンドラインツール、別名ウェブパススキャナー アイデア by @maurosoria と @shelld3v Developement-2022 は @nu11secur1ty によって活発に開発されています 目次 インストール ワードリスト オプション 設定 使用方法 シンプルな使用方法 進行状況の一時停止 再帰 スレッド プレフィックス / サフィックス ブラックリスト フィルター 生リクエスト ワードリスト形式...

SourceWolf

SourceWolf ​ Tested environments: Windows, MAC, linux, and windows subsystem for linux WSL Sponsors Support this project by becoming a sponsor. Checkout these awesome sponsors: Oxylabs provides premium proxies with 100M+ IPs across 195 countries and ready-to-use Scraper APIs. You can use this...

powersap

PowerSAP PowerSAPは、公開されているすべてのツール（Bizploit、Metasploitの補助モジュール、インターネット上のPythonスクリプトなど）で利用される一般的かつ効果的なテクニックを、シンプルなPowerShellで再実装したものです。この再実装には、新規または未公開の脆弱性は含まれていません。 PowerSAPは、.Netコネクタ「NCo」を使用してSAP RFCにアクセスできます。 クレジット すべてのクレジットは以下に帰属します: Onapsis - Mariano, Jordan… ERPScan @chipik ERPSEC - Joris van...

iOSRestrictionBruteForce

iOS Restriction Passcode Brute Force Overview This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad takes advantage of a flaw in unencrypted backups allowing the hash and salt to be discovered. DEPENDENCIES This has been tested wit...

FaceBrute

FaceBrute Facebook 暴力破解脚本 该脚本尝试使用密码列表（字典）来猜测给定 Facebook 账户的密码。 由于 Facebook 会临时阻止连续登录失败账户的访问，因此该脚本在遇到这种情况时会等待指定时间，直到账户锁定解除。...

dnssearch

dnssearch 이 소프트웨어는 서브도메인 열거 도구입니다. 목적 dnssearch는 입력 도메인 -domain 파라미터 과 단어 목록 -wordlist 파라미터 을 받아들인 후, 단어 목록의 각 줄을 서브도메인으로 사용하여 동시 DNS 요청을 수행하여 최상위 도메인에서 사용 가능한 모든 서브도메인을 무차별 대입합니다. 커스텀 파일 확장자 -ext, 기본값 php 및 기타 선택적 인수를 지원합니다: root@kitploit: Usage of ./dnssearch: -consumers int Number of concurren...

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

kippo

참고: 더 최신 개발에 대해서는 Michel Oosterhof의 포크를 확인하세요. Kippo Kippo는 무차별 대입 공격을 기록하고, 가장 중요한 것은 공격자가 수행한 전체 셸 상호작용을 기록하도록 설계된 중간 수준 상호작용 SSH 허니팟입니다. Kippo는 Kojoney에서 영감을 받았지만, 이를 기반으로 하지는 않습니다. 데모 다음은 실제 Kippo 설치에서 얻은 몇 가지 흥미로운 로그입니다Ajaxterm의 도움으로 웹 브라우저에서 볼 수 있습니다. 일부 명령은 이 로그가 기록된 이후로 개선되었을 수 있습니다...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

CodeIgniterXor

CodeIgniterXor CodeIgniter = 2.1.4のセッションCookieで、xorencodeメソッドを使用するものをデコードするPoCスクリプトです。 詳細は次のブログ記事にあります: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability 使い方 break.py...

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...