CVE-2023-4427

CVE-2023-4427 CVE-2023-4427 was found by glazunov, and you can find RCA in his report chrome version: 117.0.5938.62 in linux from v8ctf. I choose a very unstable method. To bypass ASLR, use many iframes with different domains in main.html to brute high address, you can change your /etc/hosts to...

temcrypt

El cifrado de próxima generación Prueba temcrypt en la Web → temcrypt SDK Enfocado en proteger datos altamente sensibles, temcrypt es un mecanismo avanzado de cifrado evolutivo de múltiples capas que ofrece complejidad escalable con el tiempo y es resistente a los ataques comunes de fuerza bruta...

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

BaRMIe

BaRMIe BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testin...

CVE-2019-17240_Bludit-BF-Bypass

CVE-2019-17240 Exploit/PoC - Bypass de mitigación de fuerza bruta de Bludit Código de Exploit para CVE-2019-17240 alias Bludit = 3.9.2 Bypass de mitigación de fuerza bruta Enlaces del Exploit: ExploitDB-48942 PacketStorm Resultado esperado: Descubrir credenciales de inicio de sesión, evadiendo el...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

Awesome_shiro

Awesome-shiro Herramienta para la deserialización de Shirodecodificar Base64--descifrar AES--deserializar Entorno linux/win10 ambos python2/python3 ambos Debido a que hay ysoserial.jar en module, el proyecto es algo grande; disculpa las molestias. Montar el laboratorio local root@kitploit: docker...

zenbuster

About ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin @0xTas. I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity tooling in general. ZenBuster may not be the fastest or most...

web-brutator

Web Brutator Bruteforce rápido y modular de interfaces web 📥 Instalación root@kitploit: python3 -m pip install -r requirements.txt ⏩ Uso root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /...

spraygen

Spraygen Password list generator for password spraying - prebaked with goodies Version 1.7 Generates permutations of Months, Seasons, Years, Sports Teams NFL, NBA, MLB, NHL, Sports Scores, "Password", and even Iterable Keyspaces of a specified size. All permutations are generated with common...

fuckshitup

Agenda FuckShitUp 0.1 - Escáner de Múltiples Vulnerabilidades Básicamente, FSU es un conjunto de herramientas escritas en PHP-CLI. Usando funciones integradas, puedes obtener URL mediante motores de búsqueda y así buscar archivos interesantes y revelaciones de rutas completas. Usando una lista de...

pydictor

pydictor README.md中文版 pydictor —— A powerful and useful hacker dictionary builder for a brute-force attack root@kitploit: | | | | ' | | | |/ | |/ | / | '| | | | || | | | | | || | | | ./ , |,|||\/|| || |/ Email: [email protected] Preface： root@kitploit: Q: Why I need to use pydictor ? A:...

Sublist3r

Acerca de Sublist3r Sublist3r es una herramienta de Python diseñada para enumerar subdominios de sitios web utilizando OSINT. Ayuda a los probadores de penetración y cazadores de bugs a recolectar y reunir subdominios para el dominio que están atacando. Sublist3r enumera subdominios utilizando...

WPCracker

WPCracker WordPress user enumeration and login Brute Force tool for Windows and Linux With the Brute Force tool, you can control how aggressive an attack you want to perform, and this affects the attack time required. The tool makes it possible to adjust the number of threads as well as how large...

cerbrutus

Cerbrutus Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation:...

hackerone

hackerone He recopilado todos los informes divulgados de hackerone mediante fuerza bruta en su api https://api.hackerone.com/v1/hackers/reports/id desde el número 1 hasta 1500000. Puede que haya más informes, con id superior a 1500000. El archivo reports.csv contiene más de 10000 informes...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

Instagram-Brute-Force-2024

Instagram-Brute-Force-2024 Instagram Brute Force CPU/GPU Supported 2024 Use option 2 while running the script. Option 1 is on development Chrome should be downloaded in device. Compatible and Tested GUI Supported Operating Systems Only Python 3.13 x64 bit Unix / Linux / Mac / Windows 8.1 and high...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

autocrack

AUTOCRACK.py Este script de Python es un envoltorio de Hashcat https://hashcat.net para ayudar a automatizar el proceso de cracking. El script incluye múltiples funciones para seleccionar un conjunto de wordlists y reglas, así como la capacidad de ejecutar un ataque de fuerza bruta, con máscaras...