ios_Restriction_PassCode_Crack---Python-version

ios Restriction PassCode Crack -Python version Overview ios Restriction PassCode Cracker , this version of the application is written with Python programming language,which is used to crack the Restriction PassCode of iphone/ipad. iphone/ipad 访问限制密码破解 Methodthe same as C version bruce crack 1 .ge...

gospider

GoSpider GoSpider - 用Go编写的快速网络爬虫 无需痛苦地将Gospider集成到你的侦察工作流中？ 该项目是Osmedeus引擎的一部分。查看它在@OsmedeusEngine上的集成方式 安装 GO安装 root@kitploit: GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker root@kitploit: 克隆仓库 git clone https://github.com/jaeles-project/gospider.git 构建容器 docker build...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentication Bypass Kaiten - a workflow management system. A vulnerability in Kaiten allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their logi...

reaver-wps-fork-t6x

概述 Reaver 实现了一种针对 Wifi Protected Setup WPS 注册器 PIN 的 暴力破解攻击 ，以恢复 WPA/WPA2 密码 ，正如 Stefan Viehböck 在 《当糟糕的设计遇上糟糕的实现：暴力破解 Wi-Fi Protected Setup》 中所描述。 Reaver 被设计为一种针对 Wi-Fi Protected Setup WPS 注册器 PIN 的稳健且实用的攻击工具，用于 恢复 WPA/WPA2 密码 ，并已针对多种接入点和 WPS 实现进行了测试。 根据目标接入点 AP 的不同 ，传统的 在线暴力破解 方法恢复明文 WPA/WPA2 密...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

LadonGo

Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html Introduction LadonGo is an open source intranet penetration scanner framework, which can be used to easily detect segment C, B, A live hosts, fingerprint identification, port scanning, password explosion, remote execution, high-ri...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

submonitor

submonitor by xpl0ited1 Description Subdomain monitor with reporting capabilities to Slack, Discord and Telegram Usage: Configure the scanning targets on the targets.txt file, set the reporting config at the config.yaml, then create a cronjob to execute every day root@kitploit: crontab -e 0 8...

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

plown

Acerca de Plown es un escáner de seguridad para el CMS Plone. Aunque Plone tiene el mejor historial de seguridad de cualquier CMS importante y se considera altamente seguro, las configuraciones incorrectas y las contraseñas débiles podrían permitir intrusiones en el sistema. Plown ha sido...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

B0tN3tBrut3

B0tN3tBrut3 Brute force tool for telnet and ssh, programmed in python with Zmap Usage: Read ReadmeTelnet.md & ReadmeSsh.md...

CVE-2021-29156

CVE-2021-29156 Proof-of-Concept c 2021 GuidePoint Security Charlton Trezevant [email protected] Background Today GuidePoint is pleased to release a functional Proof-of-Concept tool for CVE-2021-29156, an LDAP injection vulnerability in ForgeRock OpenAM v13.0.0. This vulnerability allows an...

o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

mass-bruter

批量暴力破解工具 批量暴力破解网络协议 简介 简单的概念验证，用于在大型网络中快速批量暴力破解常见服务。 它将检查ftp、ssh、mysql、mssql等服务的默认凭据。 本工具仅用于授权的渗透测试。 工作原理 1. 使用masscan（比nmap更快）扫描网络段中存活主机及其常见端口。 2. 从masscan结果中解析IP和端口。 3. 构造并运行hydra命令，自动暴力破解设备上支持的网络服务。 依赖 Kali linux 或其他任意Linux发行版 Python 3.10+ root@kitploit: Install required tools for the script a...

haklistgen

haklistgen 将任何垃圾文本转换为可用于暴力破解的单词列表。 安装 root@kitploit: go install github.com/hakluke/haklistgen@latest 使用示例 从 HTTP 响应中提取所有单词，构建目录暴力破解单词列表： root@kitploit: curl https://wikipedia.org | haklistgen 将子域名列表通过管道输入，生成用于暴力破解更多子域名的单词列表： root@kitploit: subfinder -silent -d example.com | haklistgen 通过管道输入自定义...

cbrutekrag

cbrutekrag 使用字典攻击对 SSH 服务器进行渗透测试。使用 C 语言编写。 brute krag 在南非荷兰语中意为“暴力破解” 免责声明 此工具仅用于道德测试目的。 cbrutekrag 及其所有者不对用户的滥用行为负责。 用户必须遵守当地法律的规定。 运行 root@kitploit: $ cbrutekrag -h | | | | | | | | | | | | / || ' | '| | | | / \ |/ / '/ |/ | | | | | | | || | || / | | | | | | | ||./|| ,|\||\| ,|, | OpenSSH...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

Instagram-Brute-Force-2024

Instagram-Brute-Force-2024 Instagram Brute Force CPU/GPU Supported 2024 Use option 2 while running the script. Option 1 is on development Chrome should be downloaded in device. Compatible and Tested GUI Supported Operating Systems Only Python 3.13 x64 bit Unix / Linux / Mac / Windows 8.1 and high...