An-Integrated-Wireless-Network-Forensic-Analysis-Framework

統合ワイヤレスネットワークフォレンジック分析フレームワーク このフレームワークは、既存のオープンソースツール群を統合パッケージとして組み合わせ、フォレンジック調査プロセスを自動化します。ワイヤレスネットワークトラフィックをキャプチャし、調査のニーズに応じてキャプチャしたトラフィックを分析し、分析結果からデジタル証拠を抽出・文書化することができます。 攻撃シグネチャ 本フレームワークは、以下の3種類の攻撃を分析できます： DoS Evil Twin WEP Crack 前提条件 Kali Linux 1.0.9 フレームワークの実行方法 ./applicationMain.py...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack From source git clone https://github.com/hahwul/jwt-hack cd jwt-hack...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

password-generator

パスワードジェネレーター ブルートフォースまたはMD5クラック/比較用 $ php password-generator --info="victim name,victim surname , victim age , victim email" --info 被害者に関するすべての情報を取得します。 --path ファイルを保存するディレクトリ（オプション）。 --md5 この値を使用して生成されたパスワードは、MD5でも作成されます（オプション）。 $ php password-generator --info="victim name,victim surname ,...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

Ricnar-Exploit-Solutions

Ricardo NarvajaとCrack Latinosが提示したチャレンジの解答 http://www.ricardonarvaja.info/WEB/EXPLOITING/...

crack-0.1.8-fixed

crack MerbとRailsから流用した、とてもシンプルなJSONおよびXMLパーサーです。XMLパーサーはMerbから、JSONパーサーはRailsから拝借しました。私の功績ではありません。皆さんが楽しんで簡単に使えるようにパッケージ化しただけです。 == リリースに関する注意 リリースはgithub上でタグ付けされ、githubとrubyforgeでgemとしてもリリースされています。masterには、パッチや新機能を追加するたびにプッシュされます。masterからビルドするには、コードをクローンし、更新されたgemspecを生成して、gemをビルドしてインストールしてください。...

Task4-Exploitation-System-Security

Task 4: Exploitation & System Security Cybersecurity & Ethi...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

EUVD-2026-39917

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-32315 motionEye: World-Readable Configuration File Exposes Admin Password Hash

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...

Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege Escalation

Description The application's session management is vulnerable to Authorization Bypass and Vertical Privilege Escalation. During dynamic analysis of the application's authentication flow, I discovered that the JSON Web Tokens JWT are signed with a weak secret key. This allowed me to perform an...

EUVD-2025-205781

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.evallength...

CVE-2025-10285: Exposure of Sensitive Information to an Unauthorized Actor

The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password...

EUVD-2017-0271

Malware in sbrugna...

Exploit for CVE-2017-0143

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features - Free one id Multi-target web netcat for reverse shell - What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。re...

CVE-2025-35114

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30...

Linux Distros Unpatched Vulnerability : CVE-2009-4269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the...