271 matches found
Inveigh
Inveigh Inveigh es una herramienta multiplataforma .NET IPv4/IPv6 de intermediario machine-in-the-middle para probadores de penetración. Este repositorio contiene la versión principal en C así como la versión heredada en PowerShell. Resumen Inveigh realiza ataques de suplantación y capturas de...
DLLPasswordFilterImplant
DLLPasswordFilterImplant DLLPasswordFilterImplant is a custom password filter DLL that allows the capture of a user's credentials. Each password change event on a domain will trigger the registered DLL in order to exfiltrate the username and new password value prior successfully changing it in th...
Responder
Responder Responder es un envenenador de LLMNR, NBT-NS y MDNS con servidores de autenticación falsos incorporados para HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS y más. Soporta NTLMv1/NTLMv2/LMv2, NTLMSSP de seguridad extendida y varios métodos de autenticación en más de 15 protocolos. Tabla de...
net-creds
Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Screenshots --- Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP...
wifiphisher
Acerca de Wifiphisher es un framework de Punto de Acción falso para realizar compromisos de equipos rojos o pruebas de seguridad Wi-Fi. Usando Wifiphisher, los probadores de penetración pueden lograr fácilmente una posición de hombre en el medio MitM contra clientes inalámbricos mediante la...
fluxion
Fluxion is the future of MITM WPA attacks Fluxion is a remake of linset by vk496 with hopefully less bugs and more functionality. It's compatible with the latest release of Kali rolling. Latest builds stable and beta can be found here here...
thief_raccoon
Thief Raccoon - Herramienta de Phishing para Inicio de Sesión Thief Raccoon es una herramienta diseñada con fines educativos para demostrar cómo se pueden realizar ataques de phishing en varios sistemas operativos. Esta herramienta tiene como objetivo crear conciencia sobre las amenazas de...
Koh
Koh Koh es un conjunto de herramientas en C y Archivos de Objeto Beacon BOF que permite la captura de material de credenciales de usuario mediante una fuga intencionada de tokens/sesiones de inicio de sesión. Parte del código se inspiró en el proyecto Internal-Monologue de Elad Shamir sin licenci...
CredSniper
CredSniper Resumen Beneficios Uso básico Instalación Capturas de pantalla Módulo Gmail Mantenedor Contribuciones Resumen Lanza fácilmente un nuevo sitio de phishing completamente presentado con SSL y captura credenciales junto con tokens de 2FA usando CredSniper. La API proporciona acceso seguro ...
ARP-poisoning-packet-sniffer
ARP Poisoning - Packet Sniffer Two scripts written to perform ARP poisoning on target computers on the same network and to monitor network traffic. The arpspoofy.py script is used to perform ARP poisoning on a target computer on the same network. While the arpspoofy.py script performs ARP poisoni...
hostapd-mana
hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...
CVE-2026-41012
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
ESP-RFID-Tool
ESP-RFID-Tool Di Corey Harding Sito ufficiale: www.rfid-tool.com April Brother sta attualmente producendo questo hardware e può essere acquistato direttamente dalla Cina dal loro Negozio Ufficiale: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress Store:...
CVE-2026-41012 BOSH vSphere CPI Improper Cert Validation
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
CVE-2026-41012
CVE-2026-41012 is a traffic interception vulnerability in BOSH Director vSphere CPI (all versions prior to v98.0.6 ) caused by insufficient certificate validation and pinning in the communication between BOSH Director and vCenter. An attacker positioned between the two can impersonate the vCenter...
EUVD-2026-68038
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
PT-2026-83390
Name of the Vulnerable Software and Affected Versions BOSH vSphere CPI versions prior to 98.0.6 Description An issue in the communication protocol between BOSH Director and vCenter allows an attacker positioned between these two entities to intercept traffic and impersonate the vCenter REST API...
CVE-2026-55215
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...
chuckle
Chuckle - Uno script automatizzato per SMB Relay. Chuckle richiede alcuni strumenti per funzionare: SMBRelayX.py Veil ultima versione da git Responder Chuckle rileverà quale versione stai utilizzando. Nmap Nbtscan unixwiz MSFconsole L'uso dovrebbe essere abbastanza semplice, esegui come root o us...