Sublist3r

Acerca de Sublist3r Sublist3r es una herramienta de Python diseñada para enumerar subdominios de sitios web utilizando OSINT. Ayuda a los probadores de penetración y cazadores de bugs a recolectar y reunir subdominios para el dominio que están atacando. Sublist3r enumera subdominios utilizando...

CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaiten - a workflow management system, is vulnerable to unrestricted brute force attacks on user logins and email addresses registered in the system via a simple POST request. References: CVE MITRE Description NVD CVE Usage Simple download bash script and ru...

CVE-2016-10924

CVE-2016-10924 CVE-2016-10924 - Directory traversal vulnerability in WordPress ebook-download plugin1.2. PoC + PID Bruteforce in Python. Usage root@kitploit: git clone https://github.com/rvizx/CVE-2016-10924 cd CVE-2016-10924 python pidbrute.py...

adfsbrute

adfsbrute Un script para probar credenciales contra Active Directory Federation Services ADFS, calculando la URL de ADFS de una organización y permitiendo ataques de password spraying o fuerza bruta. La idea principal es realizar ataques de password spraying con una demora aleatoria y alta entre...

Arkhota

Arkhota, a web brute forcer for Android What? Arkhota is a web HTTP/S brute forcer for Android OS. Why? A web brute forcer is always in a hacker's computer, for obvious reasons. Sometimes attacks require to be quick or/and with minimal device preparation. Also a phone takes less attention rather...

spraygen

Spraygen Generador de listas de contraseñas para password spraying - ya incluye buenos complementos Versión 1.7 Genera permutaciones de Meses, Estaciones, Años, Equipos Deportivos NFL, NBA, MLB, NHL, Puntuaciones Deportivas, "Contraseña", e incluso Espacios de Claves Iterables de un tamaño...

c-jwt-cracker

JWT cracker Un cracker de JWT por fuerza bruta multi-hilo escrito en C. Si tienes mucha suerte o un enorme poder de cómputo, este programa debería encontrar la clave secreta de un token JWT, permitiéndote falsificar tokens válidos. Esto es solo para fines de prueba, no te metas en problemas :...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

phpunit-brute

phpunit-brute Tool to try multiple paths for PHPunit RCE CVE-2017-9841 and it will log found paths to found.txt in the dir. It uses the following list of paths https://raw.githubusercontent.com/random-robbie/bruteforce-lists/master/phpunit.txt if you have a path that is not on there please submit...

Wordpress-XMLRPC-Brute-Force-Exploit

Wordpress XMLRPC System Multicall Brute Force Exploit by 1N3 Last Updated: 20170215 https://crowdshield.com ABOUT: This is an exploit for Wordpress xmlrpc.php System Multicall function affecting the most current version of Wordpress 3.5.1. The exploit works by sending 1,000+ auth attempts per...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...

snmpwn

SNMPwn es una herramienta de enumeración y ataque de usuarios SNMPv3. Es una herramienta de seguridad legítima diseñada para ser utilizada por profesionales de seguridad y testers de penetración contra hosts que tengas permiso de probar. Aprovecha el hecho de que los sistemas SNMPv3 responderán c...

maskprocessor

maskprocessor Generador de palabras de alto rendimiento con un conjunto de caracteres configurable por posición Ataque por máscara Intenta todas las combinaciones de un espacio de claves dado, igual que en el ataque de fuerza bruta, pero más específico. Ventaja sobre la fuerza bruta La razón para...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

crackle

crackle descifra el cifrado BLE también conocido como Bluetooth Smart. crackle explota una falla en el proceso de emparejamiento BLE que permite a un atacante adivinar o forzar bruscamente muy rápidamente la TK Clave Temporal. Con la TK y otros datos recopilados del proceso de emparejamiento, se...

CVE-2026-43914-PoC

CVE-2026-43914 — Vaultwarden Email-2FA Brute-Force Protection Bypass Proof-of-concept for CVE-2026-43914 : when Email 2FA is enabled, Vaultwarden's login brute-force protection can be completely bypassed via the unauthenticated POST /api/two-factor/send-email-login endpoint, which acts as an...

Brute_Force

BruteForce install : root@kitploit: sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize Usage: BruteForce Gmail Attack root@kitploit: python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle...

CVE-2025-51868

CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...

HIK-CVE-2021-36260-Exploit

hikvisionbrute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/main.go -help to get help with running args run example go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt...

CVE-2024-3183-POC

CVE-2024-3183-POC POC for CVE-2024-3183 FreeIPA Rosting Impact: A low-privileged user can obtain a hash of the passwords of all domain users and perform offline brute force kerberoasting. Patch impacket-getTGT: 1. Add decoder.decode.defaultErrorState = stGetValueDecoderByTag to...