CVE-2019-17525

CVE-2019-17525 ROUTER D-LINK "MODELO NO: DIR-615" CON "VERSIÓN DE FIRMWARE:20.10" Y "VERSIÓN DE HARDWARE:T1" Una vulnerabilidad encontrada en la página de inicio de sesión del ROUTER D-LINK "DIR-615" con "VERSIÓN DE FIRMWARE:20.10" y "VERSIÓN DE HARDWARE:T1" que permite a los atacantes eludir...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

Blazy

Blazy blazy does login bruteforcing Usage root@kitploit: python3 main.py -i url/file Credits Shamelessly stole form parser from guettli...

PyLadon

Escáner Ladon para Python PyLadon Actualmente, la versión de Python tiene pocas funcionalidades, tanto en rendimiento como en velocidad es inferior a Ladon.exe en sistemas Windows o Linux. La única ventaja es la multiplataforma, se agregarán funciones relacionadas en el futuro. La desventaja...

Bluto-Old

BLUTO Bluto has moved to a new repo, this version is now deprecated. New version and repo can be found https://github.com/darryllane/Bluto Latest Version Features: DNS recon SubDomain Brute forcer DNZ Zone Transfers DNS Wild Card Checks DNS Wild Card Brute Forcing Email Enumeration Staff...

CVE-2020-24913-exploit

qcubed-exploit Necesitas tener Bun instalado: https://bun.sh Para instalar las dependencias: root@kitploit: bun install Para ejecutar: root@kitploit: mostrar ayuda bun run exploit -h probar si es vulnerable bun run exploit vulnerable -u https://site.com/framework/assets/core/php/profile.php crear...

dirstalk

Dirstalk Dirstalk — это многопоточное приложение, предназначенное для подбора путей на веб-серверах. Инструмент содержит функциональность, аналогичную предлагаемой в dirbuster и dirb. Здесь вы можете увидеть его в работе: Содержание Как использовать Сканирование Полезные ресурсы Генератор словаре...

usernamer

usernamer usernamer es una herramienta de pruebas de penetración para generar una lista de posibles nombres de usuario/inicios de sesión para un nombre determinado ej.: John Doe Doeson para enumeración de usuarios o fuerza bruta. Esta herramienta también admite archivos de texto con un nombre por...

SSHBuster

SSHBuster SSHBuster is a powerful command-line SSH brute-forcing tool designed for ethical hacking and penetration testing. It performs dictionary-based attacks to find valid SSH login credentials efficiently. Features Brute-force SSH servers using different username and password combinations...

burpsuiefakeip

Reposted from https://github.com/TheKingOfDuck/burpFakeIP BurpFakeIP Forging IP in Burp Suite, and I'm dead serious. Four small features Forge a specified IP Forge a local IP Forge a random IP Random IP brute-forcing 0x01 Forge a specified IP In the Repeater module, right-click to select the fake...

CVE-2026-81822 AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...

CVE-2026-81822 AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Características clave de este exploit de caja negra: 1. Fuerza bruta de credenciales: Prueba más de 12 combinaciones comunes de usuario/contraseña predeterminadas Comprueba 5 bases de datos del sistema comunes Detecta automáticamente credenciales válidas 2. Intento de acces...

PT-2026-88085

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...

CVE-2026-66047 ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE

ProfilePress wp-user-avatar WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and activate arbitrary plugins by brute-forcing a weak 32-bit connect token via the ppressconnectprocess AJAX handler...

CVE-2026-55977

Technical details about CVE-2026-55977 are not publicly available in the provided documents; monitor for updates from NVD and CVE sources.

eCPPT-Penetration-Testing-Reports

eCPPT Penetration Testing Reports Penetration testing lab rep...

OSWE-Notes

OSWE Exploit Helpers Helper modules for writing OSWE exploit...

PT-2026-32359

Name of the Vulnerable Software and Affected Versions Totara LMS versions prior to 19.1.6 Description Incorrect Access Control allows the login page code to be manipulated to reveal the login form. This can be combined with a missing rate-limit on the login form to facilitate a brute force attack...