An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework 이 프레임워크는 기존의 여러 오픈 소스 도구를 통합 패키지로 결합하여 포렌식 조사 프로세스를 자동화합니다. 무선 네트워크 트래픽을 캡처하고, 조사 요구에 따라 캡처된 트래픽을 분석하며, 분석된 트래픽에서 디지털 증거를 추출하고 문서화할 수 있습니다. 공격 시그니처 이 프레임워크는 3가지 유형의 공격을 분석할 수 있습니다: DoS Evil Twin WEP Crack 사전 요구 사항 Kali Linux 1.0.9 프레임워크 실...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack From source git clone https://github.com/hahwul/jwt-hack cd jwt-hack...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

password-generator

비밀번호 생성기 BruteForce 또는 MD5 크랙/비교용 $ php password-generator --info="victim name,victim surname , victim age , victim email" --info 피해자의 모든 정보를 가져옵니다. --path 파일이 저장될 경로 선택 사항. --md5 이 값을 사용하여 생성된 비밀번호는 MD5로도 생성됩니다 선택 사항. $ php password-generator --info="victim name,victim surname , victim age ,...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

Ricnar-Exploit-Solutions

Ricardo NarvajaとCrack Latinosが提示したチャレンジの解答 http://www.ricardonarvaja.info/WEB/EXPLOITING/...

crack-0.1.8-fixed

crack MerbとRailsから流用した、とてもシンプルなJSONおよびXMLパーサーです。XMLパーサーはMerbから、JSONパーサーはRailsから拝借しました。私の功績ではありません。皆さんが楽しんで簡単に使えるようにパッケージ化しただけです。 == リリースに関する注意 リリースはgithub上でタグ付けされ、githubとrubyforgeでgemとしてもリリースされています。masterには、パッチや新機能を追加するたびにプッシュされます。masterからビルドするには、コードをクローンし、更新されたgemspecを生成して、gemをビルドしてインストールしてください。...

Task4-Exploitation-System-Security

Task 4: Exploitation & System Security Cybersecurity & Ethi...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

EUVD-2026-39917

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-32315 motionEye: World-Readable Configuration File Exposes Admin Password Hash

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...

Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege Escalation

Description The application's session management is vulnerable to Authorization Bypass and Vertical Privilege Escalation. During dynamic analysis of the application's authentication flow, I discovered that the JSON Web Tokens JWT are signed with a weak secret key. This allowed me to perform an...

EUVD-2025-205781

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.evallength...

CVE-2025-10285: Exposure of Sensitive Information to an Unauthorized Actor

The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password...

EUVD-2017-0271

Malware in sbrugna...

Exploit for CVE-2017-0143

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features - Free one id Multi-target web netcat for reverse shell - What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。re...

CVE-2025-35114

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30...

Linux Distros Unpatched Vulnerability : CVE-2009-4269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the...