181 matches found
cbrutekrag
cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...
Project-Pwnag0dchi
Projet Pwnag0dchi Créé car beaucoup de gens demandaient les plugins personnalisés et les configurations que j'utilise. En suivant ce guide, votre Pwnagotchi aura exactement le même aspect que sur mes réseaux sociaux et vidéos YouTube en 5 minutes environ. Vous trouverez également un guide complet...
ScrapPY
🐕 ScrapPY : L'extraction de PDF rendue facile ScrapPY est un utilitaire Python pour extraire des manuels, documents et autres PDF sensibles afin de générer des listes de mots ciblées pouvant être utilisées par des outils de sécurité offensive pour effectuer des attaques par force brute, de...
Klyda
Le projet Klyda a été créé pour faciliter les attaques rapides basées sur des identifiants contre des applications web en ligne. Klyda permet d'utiliser aussi bien de simples pulvérisations de mots de passe que de grandes attaques par dictionnaire multithreadées. Klyda est un nouveau projet, et j...
marfil
Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...
Astra Linux – Vulnerability in Linux 5.15
A vulnerability has been identified in the ksmbd component of the Linux kernel the kernel SMB/CIFS server. A security measure designed to prevent dictionary attacks—which introduces a 5-second delay during session setup—can be bypassed through the use of asynchronous requests. This bypass defeats...
CVE-2026-48084 OpenReception doesn't rate limit passphrase login attempts
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2...
JLSEC-2026-278
An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...
blueprintUE self-hosted edition 安全漏洞
The blueprintUE self-hosted edition is an open-source data modeling and visualization tool developed by blueprintUE. Versions prior to blueprintUE self-hosted edition 4.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the login form processor not implementing any type of...
EUVD-2026-9375
The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation IDC SFX SeriesSFX2100 SuperFlex Satellite Receiver insecurely stores the hardcoded root password hash. The password itself is highly insecure and susceptible to offline dictionary attacks using the...
CVE-2026-29120
The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation IDC SFX SeriesSFX2100 SuperFlex Satellite Receiver insecurely stores the hardcoded root password hash. The password itself is highly insecure and susceptible to offline dictionary attacks using the...
AI-generated passwords are a security risk
Using Artificial Intelligence AI to generate your passwords is a bad idea. It's likely to give that password to a criminal who can then use it in a dictionary attack—which is when an attacker runs through a prepared list of likely passwords words, phrases, patterns with automated tools until one ...
CVE-2021-41995
A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass...
CVE-2021-41992
A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass...
OreaHax-Framework
OreaHax-Framework ╔════════════════════════════════════...
SqlScanner
SqlScanner SQL Injection Scanner deve...
EUVD-2019-5959
Malware in sbrugna...
EUVD-2017-12346
Malware in sbrugna...