ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

CVE-2023-48034

CVE-2023-48034 I have discovered weak encryption used in the wireless protocol of the Acer Wireless Keyboard SK-9662 FCC ID: H4IKB9662. This weak encryption allows an attacker to easily monitor and log keystrokes and also inject arbitrary keystrokes. Intro The keyboard uses a Texas Instruments...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaiten - a workflow management system, is vulnerable to unrestricted brute force attacks on user logins and email addresses registered in the system via a simple POST request. References: CVE MITRE Description NVD CVE Usage Simple download bash script and ru...

CVE-2024-57610

Lack of Rate Limiting in Sylius v2.0.2 Vendor Homepage: https://sylius.com/ Steps to Reproduce 1.Navigate to https://store.sylius.com/login 2.Attempt multiple login requests using automated tools or scripts e.g., Burp Suite, cURL. 3.Observe that no rate limiting is applied, and requests are...

cameradar

Cameradar RTSP stream access tool Cameradar scans RTSP endpoints on authorized targets, and uses dictionary attacks to bruteforce their credentials and routes. What Cameradar does Detects open RTSP hosts on accessible targets. Detects the device model that streams the RTSP feed. Attempts...

insect

insect - Web path discovery Current Release: v1.4 20222.09.03 An advanced command-line tool designed to brute force directories and files in webservers, AKA web path scanner Idea by @maurosoria and @shelld3v Developement-2022 is being actively developed by @nu11secur1ty Table of Contents...

SourceWolf

SourceWolf ​ Tested environments: Windows, MAC, linux, and windows subsystem for linux WSL Sponsors Support this project by becoming a sponsor. Checkout these awesome sponsors: Oxylabs provides premium proxies with 100M+ IPs across 195 countries and ready-to-use Scraper APIs. You can use this...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

iOSRestrictionBruteForce

iOS Restriction Passcode Brute Force Overview This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad takes advantage of a flaw in unencrypted backups allowing the hash and salt to be discovered. DEPENDENCIES This has been tested wit...

FaceBrute

FaceBrute Facebook brute force script This script tries to guess passwords for a given facebook account using a list of passwords dictionary. Since facebook temporaly blocks access to accounts that continously fail to login, this script is coded so that it waits a specified amount of time when th...

openclaw-security-monitor

OpenClaw Security Monitor Proactive security monitoring, threat scanning, and real-time visibility for OpenClaw deployments. Detects threats from the ClawHavoc campaign 824+ malicious skills, AMOS stealer , Vidar infostealer , GhostSocks proxy malware, ClawJacked WebSocket brute-force, workspace...

cve-2026-42945-nginx32-lab

CVE-2026-42945 nginx 32-bit Exploit Lab This repository is a reproducible Docker lab for studying CVE-2026-42945 in nginx 1.30.0. It contains a vulnerable 32-bit target, a primitive trigger, a lab-assisted known-address RCE validator, and a no-introspection brute-force driver. The proof boundary...

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

Lock-Picking-Robot

🔑 Unlocked 🔑 Introduction Background An open source Lock picking robot. Basically, there are many skeleton keys in use the most common example is the TSA 007, which is bad. Having one key which can open MANY different locks, especially without the lock owners people knowing it exists or can be...

brutespray

Brutespray Created by: Shane Young/@x90sky && Jacob Robles/@shellfail Inspired by: Leon Johnson/@sho-luv Description Brutespray automatically attempts default credentials on discovered services. It takes scan output from Nmap GNMAP/XML, Nessus, Nexpose, JSON, and lists, then brute-forces...

Pyrit

Please Read Pyrit is old, is outdated and it's still Python2 I am currently attempting to rewrite it from scratch, so thanks for all the stars but remember to keep an eye for Python3 version. Pyrit Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a...