61337 matches found
cve-2018-9995
cve-2018-9995 DVR，全称为Digital Video Recorder硬盘录像机，即数字视频录像机，相对于传统的模拟摄像录像机，采用硬盘录像，故常常被称为硬盘录像机，也被称为DVR. 通过漏洞允许攻击者通过修改“Cookie: uid=admin” 之后访问 DVR 的控制面板，返回此设备的明文管理员凭证。 使用方法: python3 cve-2018-9995.py...
keimpx
Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...
CVE-2015-7755-POC
CVE-2015-7755-POC Detección de vulnerabilidad CVE-2015-7755 usando ssh para conectar esas versiones vulnerables: ScreenOS 6.2.0r15—6.2.0r18，6.3.0r12—6.3.0r20 Juniper Networks usuario: root contraseña: %sun='%s' = %u...
CVE-2020-25078
CVE-2020-25078 使用说明 instructions 攻击url放同一目录下 ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128 http://xxx.xxx.xxx.xxx:80...
CVE-2020-0688
识别易受CVE-2020-0688攻击的Exchange服务器 CVE-2020-0688 是 Microsoft Exchange 中的一个关键漏洞，源于使用了静态密钥。虽然利用此漏洞需要有效的凭据（至少是电子邮件用户级别），且大规模利用的风险较低，但在定向攻击中此漏洞可能非常有用，因为它可导致 SYSTEM 级别的远程代码执行。 更多信息： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688...
Passhunt
Passhunt Passhunt 是一个用于搜索网络设备、Web 应用程序等默认凭据的简单工具。可搜索 523 家供应商及其 2084 个默认密码。 截图 先决条件 确保已安装以下内容： root@kitploit: - Python 3.0 or later. - pip3 sudo apt-get install python3-pip 如何安装？ root@kitploit: git clone https://github.com/Viralmaniar/Passhunt.git cd Passhunt pip3 install -r requirements.txt...
swap_digger
swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...
ketshash
Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...
evilginx2
Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...
juniper-cve-2015-7755
Juniper CVE-2015-7755 和 CVE-2015-7756 本仓库包含对Juniper ScreenOS中CVE-2015-7755和CVE-2015-7756问题进行分析的笔记、二进制文件及相关信息。 关于这些问题的更多信息，请参阅以下URL： https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554...
CVE-2021-42913
CVE-2021-42913 Samsung Printer SCX-6X55X Control de acceso inadecuado El SyncThru Web Service de la serie Samsung Printer SCX-6x55X se ve afectado por una vulnerabilidad de control de acceso inadecuado. La vulnerabilidad puede permitir a un atacante obtener acceso a una lista de usuarios y...
Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...
mysql_dos
Esta herramienta bloquea servidores MySQL vulnerables mediante CVE-2017-3599, un desbordamiento de entero remoto al analizar las credenciales de inicio de sesión. Se puede descargar aquí deberá ejecutarlo desde la línea de comandos Uso: mysqldos target port...
routersploit
RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...
SMWYG-Show-Me-What-You-Got
SMWYG-Show-Me-What-You-Got 该工具允许你对组织或个人进行OSINT和侦察。它可以搜索作为BreachCompilation泄露一部分被转储的14亿条明文凭证。此数据库使得查找密码比以往更快、更容易。 截图 上图搜索了uber.com的凭证，并找到了203个账户。 前提条件 请确保已安装以下内容： root@kitploit: - Python 3.0 or later. - pip3 sudo apt-get install python3-pip 如何安装？ root@kitploit: git clone...
ruler
Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...
CVE-2025-69428
安全公告 - CVE-2025-69428 标题： 未经验证访问敏感目录（信息泄露） CVE编号： CVE-2025-69428 描述 在本地部署的Pro-Bit应用程序（版本低于v1.77.4）中存在一个严重的访问控制漏洞，允许未经验证的攻击者直接访问敏感目录及其子目录。 该目录可公开访问，无需任何身份验证或授权检查。其中包含高度敏感的文件，包括： 明文用户凭证及对应的域账户 数据库连接字符串 内部主机信息 加密方法、密钥以及加密的服务用户密码 攻击者可能利用这些信息进一步入侵系统。 状态： 已由供应商修补。 披露时间线： 报告日期：2025年12月4日...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
CVE-2026-59769
FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...