JWT_Brute

JWTBrute Example eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9.56wwCrB9tIgmUnYpLPxkO8GYj1soCjuuskTlbHGg8 root@kitploit: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 base64 decode "alg":"HS256","typ":"JWT" eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9 base64 decode...

OneListForAll

OneListForAll Listas de palabras para fuzzing web: micro curada, short/long categorizadas, y listas finales combinadas. Qué genera este repositorio onelistforallmicro.txt: lista curada mantenida manualmente. dict/short.txt: lista de palabras por categoría curada fuentes pequeñas/de calidad...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

Zydra

Zydra Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the user’s password in the linux shadow file one after...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

cameradar

Cameradar RTSP stream access tool Cameradar scans RTSP endpoints on authorized targets, and uses dictionary attacks to bruteforce their credentials and routes. What Cameradar does Detects open RTSP hosts on accessible targets. Detects the device model that streams the RTSP feed. Attempts...

CVE-2019-17240_Bludit-BF-Bypass

CVE-2019-17240 Exploit/PoC - Bludit Brute-force Mitigation Bypass Exploit Code for CVE-2019-17240 aka Bludit = 3.9.2 Bruteforce Mitigation Bypass Exploit Links: ExploitDB-48942 PacketStorm Expected outcome: Discover login credentials, bypassing Brute-force Mechanism on host running Bludit =3.9.2...

MifareClassicTool

MIFARE Classic Tool MCT An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags. Read this information in other languages: English 简体中文 正體中文 Helpful links: MIFARE Classic Tool Donate Version on Google Play Screenshots Help & Info/User Manual Additional stuff Documentatio...

cheetah

Descripción en inglés | 中文说明 0x00 cheetah Cheetah es una herramienta de shell web de fuerza bruta basada en diccionarios, que se ejecuta tan rápido como un guepardo cazando a su presa. El principio de funcionamiento de Cheetah es que puede enviar una gran cantidad de contraseñas de detección...

bitcracker

BitCracker BitCracker는 BitLocker로 암호화된 저장 장치하드 디스크, USB 펜드라이브, SD 카드 등를 위한 최초의 오픈 소스 비밀번호 크래킹 도구입니다. BitLocker는 Windows Vista, 7, 8.1 및 10Ultimate, Pro 및 Enterprise 에디션에서 사용할 수 있는 암호화 기능입니다. BitLocker는 TPMTrusted Platform Module, 스마트 카드, 복구 암호, 사용자 제공 암호 등 저장 장치를 암호화하기 위한 다양한 인증 방법을 제공합니다. 사전 공격을...

Zip-Cracker-

Zip Cracker This Script Supports Only Zip File in This Verson You Can Also Use This Script With crunch Cross-platform Supported Usage: zipcracker.py options root@kitploit: Options: --version show program's version number and exit -h, --help show this help message and exit -f FILENAME,...

wacker

Overview A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpasupplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection...

wacker

Обзор Набор скриптов для выполнения атаки по словарю в реальном времени против точки доступа WPA3. Wacker использует управляющий интерфейс wpasupplicant для управления работой демона supplicant и получения информации о состоянии и уведомлений о событиях, что в конечном итоге ускоряет попытки...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

Nosql-Exploitation-Framework

Nosql-Exploitation-Framework A FrameWork For NoSQL Scanning and Exploitation Framework NoSQL Exploitation Framework 2.02b Released Author NoSQL Exploitation Framework Authored By Francis Alexander Wiki NoSQL Exploitation Framework Wiki on Installation & Usage -...

h4rpy

h4rpy h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2...

Beleth

Beleth Dictionary based SSH cracker root@kitploit: Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt...

FGscanner

FantaGhost URL Scanner 1.1 Released date : 2014/02/05 Advanced web directory scanner with proxy and TOR support About FGscanner is an advanced opensource web directory scanner. It find hidden contents on a web server using dictionary-like attack. FantaGhost URL scanner support proxy and TOR...

hashcrack

hashcrack unpacks some hash types, picks sensible options and invokes hashcat NVIDIA drivers here: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk alt email: [email protected] if you need support I'm not sure if anyone at NCC will be looking after this, but I'll be doing active dev in...