27617 matches found
psudohash
psudohash Nuevas características interesantes de v1.1.0 Agradecimientos especiales a DavidAngelos: ▶️ Se añadió una barra de progreso en cada paso para rastrear la ejecución. ▶️ Se añadieron opciones: Uniones en orden -i / --inorder: combinar palabras clave solo en el orden original ej. foo,bar,baz...
Auto_EAP
AutoEAP Introducción Publicado el 15 de septiembre de 2016 AutoEAP.py es un script diseñado para realizar ataques automatizados de autenticación por fuerza bruta contra varios tipos de redes EAP. Estos tipos de redes inalámbricas proporcionan una interfaz para facilitar la adivinación de...
WPForce
WPForce - Suite de Ataque a WordPress ACERCA DE: WPForce es un conjunto de herramientas de ataque a WordPress. Actualmente contiene 2 scripts: WPForce, que fuerza bruta inicios de sesión a través de la API, y Yertle, que sube shells una vez que se han encontrado credenciales de administrador...
enumdb
enumdb Enumdb es una herramienta de fuerza bruta y post-explotación para bases de datos relacionales MySQL y MSSQL. Cuando se proporciona una lista de nombres de usuario y/o contraseñas, recorre cada host buscando credenciales válidas. De forma predeterminada, enumdb utiliza las credenciales reci...
libsrtp
Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...
Vajra
Vajra - Tu Arma para la Nube Acerca de Vajra Vajra es una herramienta basada en interfaz de usuario con múltiples técnicas para atacar y enumerar en el entorno Azure del objetivo. El término Vajra se refiere al Arma del Dios Indra en la mitología india Dios del Trueno y las Tormentas. Su conexión...
CVE-2026-43914-PoC
CVE-2026-43914 — Vaultwarden Email-2FA Brute-Force Protection Bypass Proof-of-concept for CVE-2026-43914 : when Email 2FA is enabled, Vaultwarden's login brute-force protection can be completely bypassed via the unauthenticated POST /api/two-factor/send-email-login endpoint, which acts as an...
aad-sso-enum-brute-spray
aad-sso-enum-brute-spray POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln Description This code is a proof-of-concept of the recently revealed Azure Active Directory password brute-forcing vulnerability announced by Secureworks here is the Ars Technica article that...
openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay
A flaw was found in OpenSSH's SSH daemon sshd. A remote attacker could exploit this vulnerability by repeatedly attempting authentication. The flaw allows the attacker to bypass the intended minimum authentication delay, which can facilitate brute-force attacks. This makes it easier for an attack...
sign-saboteur
SignSaboteur SignSaboteur es una extensión de Burp Suite para editar, firmar, verificar y atacar tokens firmados. Soporta diferentes tipos de tokens: Django TimestampSigner, ItsDangerous Signer, Express cookie-session middleware, OAuth2 Proxy, Tornado’s signed cookies, Ruby Rails Signed cookies,...
SafeGuard
./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g. AES-GCM for...
CredMaster
CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. Shoutout to @ustayready for his CredKing and FireProx tools,...
BruteX
BruteX ACERCA DE: Fuerza bruta automáticamente todos los servicios ejecutándose en un objetivo Puertos abiertos Nombres de usuario Contraseñas INSTALACIÓN: ./install.sh USO: brutex objetivo DOCKER: docker build -t brutex . docker run -it brutex objetivo LICENCIA: Puede modificar y redistribuir es...
CVE-2025-51868
CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...
HIK-CVE-2021-36260-Exploit
hikvisionbrute Fuerza bruta a cámaras Hikvision con el exploit CVE-2021-36260 ejecución go run src/main.go -help para obtener ayuda sobre los argumentos de ejecución ejemplo de ejecución go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000...
CVE-2021-29156
CVE-2021-29156 Prueba de Concepto c 2021 GuidePoint Security Charlton Trezevant [email protected] Antecedentes Hoy GuidePoint se complace en publicar una herramienta funcional de Prueba de Concepto para CVE-2021-29156, una vulnerabilidad de inyección LDAP en ForgeRock OpenAM v13.0.0. Esta...
CVE-2023-48034
CVE-2023-48034 I have discovered weak encryption used in the wireless protocol of the Acer Wireless Keyboard SK-9662 FCC ID: H4IKB9662. This weak encryption allows an attacker to easily monitor and log keystrokes and also inject arbitrary keystrokes. Intro The keyboard uses a Texas Instruments...
hostscan
hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...
CVE-2019-15514
CVE-2019-15514 Type: Information Disclosure Affected Users, Versions, Devices: All Telegram Users Still not fixed/unpatched. brute.py is available exploit written under python. Description Suppose ali is hacktivist. His telegram user ID is 21788973 and mobile number is hidden. He lives in pakista...
