185 matches found
crackle
crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...
john
John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...
An-Integrated-Wireless-Network-Forensic-Analysis-Framework
An-Integrated-Wireless-Network-Forensic-Analysis-Framework This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able to capture wireless network traffic, to analyze the captured traffic according to the...
jwt-hack
JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack Chocolatey Windows choco install jwt-hack From source git clone...
vboxdie-cracker
Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...
password-generator
Password Generator For BruteForce or Md5 Crack/Comparison $ php password-generator --info="victim name,victim surname , victim age , victim email" --info Get all information from victim. --path The area where the file will be saved optional. --md5 The passwords created with this value will also...
Ricnar-Exploit-Solutions
Solutions aux défis proposés par Ricardo Narvaja et Crack Latinos http://www.ricardonarvaja.info/WEB/EXPLOITING/...
crack-0.1.8-fixed
= crack تحليل JSON وXML بسيط حقًا، منقول من Merb وRails. محلل XML منقول من Merb، ومحلل JSON منقول من Rails. لا أدّعي أي فضل؛ لقد قمت فقط بتغليفهما ليستمتع بهما الجميع ويستخدمهما بسهولة. == ملاحظة حول الإصدارات تُوسم الإصدارات tags على github كما تُطرح كجيمات gems على github وrubyforge. يتم الدفع...
Malicious Package
Overview chai-as-crack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-16196 Malicious code in chai-as-crack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090c71f12df6d5441dce686e54fef42805f1afd6575d48bc0f6263dcf50b2f21 Package's main entry index.js unconditionally requires./lib/config at top level, causing the file to execute on any require'chai-as-crack'...
Malicious code in chai-as-crack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090c71f12df6d5441dce686e54fef42805f1afd6575d48bc0f6263dcf50b2f21 Package's main entry index.js unconditionally requires./lib/config at top level, causing the file to execute on any require'chai-as-crack'...
Task4-Exploitation-System-Security
Task 4: Exploitation & System Security Cybersecurity & Ethi...
CVE-2026-55069
Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...
EUVD-2026-39917
Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...
CVE-2026-55069
Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...
CVE-2026-32315 motionEye: World-Readable Configuration File Exposes Admin Password Hash
motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...
Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege Escalation
Description The application's session management is vulnerable to Authorization Bypass and Vertical Privilege Escalation. During dynamic analysis of the application's authentication flow, I discovered that the JSON Web Tokens JWT are signed with a weak secret key. This allowed me to perform an...
EUVD-2025-205781
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.evallength...
CVE-2025-10285: Exposure of Sensitive Information to an Unauthorized Actor
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password...