creep-web-app-scanner

creep-web-app-scanner Un escáner de sitios web muy primitivo actualmente en desarrollo por un empleado de NCC Group y graduado universitario con un 20% de tiempo de investigación. creep actualmente rastrea un sitio y busca información potencialmente interesante dentro de cada página. creep...

buffalo

Buffalo Un script de Python 3 para ejecutar ataques de diccionario/lista de palabras contra un servidor SSH objetivo utilizando dos archivos de texto como entrada. Escrito para los fines de mi evaluación técnica de Intel. Instalación Este script depende de Paramiko y Colorama. Instala las...

CacheData_decrypt

CacheDatadecrypt Un simple kit de herramientas para hacer fuerza bruta y descifrar el CacheData de Windows EntraId. root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as...

HQLmap

HQLMap Este proyecto ha sido creado para explotar inyecciones HQL. La herramienta ha sido escrita en Python y se publica bajo la licencia MIT. Desarrollo futuro: tengo en mente desarrollar un módulo específico para SQLmap. ¿Dónde puedes probar la herramienta? Si deseas un entorno vulnerable rápid...

awind-research

Investigación sobre Awind Este repositorio contiene piezas y elementos interesantes relacionados con la investigación que realicé sobre dispositivos de presentación inalámbrica fabricados por Awindinc y con marca blanca para múltiples fabricantes. El repositorio está dividido en las siguientes...

AI-PASSWORD-TESTING-AGENT

AI Password Attack Orchestrator - Defensive Research Repository ⚠️ LEGAL DISCLAIMER & RESEARCH PURPOSE THIS REPOSITORY IS FOR DEFENSIVE CYBERSECURITY RESEARCH AND EDUCATIONAL PURPOSES ONLY NO EXPLOITABLE CODE - This repository contains only theoretical research, conceptual analysis, and defensive...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

CVE-2025-10658

Exploit: SupportCandy Guest OTP Brute Force → Account Takeover 1 Initiate OTP login flow browser Open: root@kitploit: /support/ Select guest / OTP login Enter target email e.g. [email protected] Submit 2 Extract required values from the OTP form In DevTools → Network →...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Exploit de denegación de servicio para el listener HTTPS de Sliver C2. Fuerza bruta el nonce de codificación PNG por sesión y entrega una bomba de descompresión que agota la memoria del servidor. Publicado como GHSA-663m-7x7m-g4fw. Resumen El canal C2 HTTPS de Sliver...

FTPBuster

FTPBuster FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks. It is intended for ethical hacking and penetration testing Features Brute-force support for FTP , SFTP , and explicit FTPS AUTH TL...

SecureOps-Lab

SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...

CVE-2026-44596

CVE-2026-44596 — YAMCS No Rate Limiting on Authentication Endpoint Summary The authentication endpoint POST /auth/token in yamcs-core lacks any form of rate limiting, account lockout, or failed attempt throttling. An unauthenticated remote attacker can perform unlimited password guessing attempts...

ZipRarHunter

ZipRarHunter ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives Features Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryptio...

CVE-2026-7671

CVE-2026-7671 - Tornet Scooter OTP Brute Force Summary Improper restriction of excessive authentication attempts CWE-307 in Tornet Scooter Mobile App 4.75 on Android. Details The /TwoFactor endpoint does not implement rate limiting or lockout. A 4-digit OTP 0000-9999 can be brute-forced remotely...