jwt-cracker

jwt-cracker Simple cracker de fuerza bruta para tokens JWT HS256, HS384 y HS512. Efectivo solo para vulnerar tokens JWT con secretos débiles. Recomendación : utiliza secretos largos y fuertes o tokens RS256. Instalación Con npm: npm install --global jwt-cracker Uso Desde la línea de comandos:...

EUVD-2026-93415

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

CVE-2026-82924 PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

CVE-2026-82924

The Expert Mail software by Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. is affected by an Improper Control of Interaction Frequency vulnerability (CWE-799 ). This security flaw arises from a missing rate limiting mechanism, which allows for Brute Force attacks to perform PI...

temcrypt

El cifrado de próxima generación Prueba temcrypt en la Web → temcrypt SDK Enfocado en proteger datos altamente sensibles, temcrypt es un mecanismo avanzado de cifrado evolutivo de múltiples capas que ofrece complejidad escalable con el tiempo y es resistente a los ataques comunes de fuerza bruta...

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

ICG-AutoExploiterBoT

ICG-AutoExploiterBoT ❗ Edite la línea 44 agregue su dirección de correo electrónico para agregar exploit admin joomla ¡Use correo de outlook.com! ✔️ :warning:¡Nota! : No aceptamos ninguna responsabilidad por cualquier uso ilegal. AutoExploiter no funciona por ahora! ¡Por favor espere la...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

CVE-2026-105835

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to guess six-digit codes until one...

EUVD-2026-93379

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to guess six-digit codes until one...

CVE-2026-105835

PLANKA versions 2.2.0 through 2.2.1 are vulnerable to a TOTP brute force attack due to a failure to limit incorrect codes submitted to the POST /api/access-tokens/verify-totp endpoint. Attackers who possess a user's password can reuse a ten-minute pending token to repeatedly guess the six-digit c...

CVE-2026-105835 PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to guess six-digit codes until one...

Beleth

Beleth Cracker SSH basado en diccionarios Usage: ./beleth OPTIONS -c payload Ejecutar payload en el servidor remoto una vez iniciada sesión -h Mostrar esta ayuda -l threads Limitar hilos al número dado. Por defecto: 4 -p port Especificar puerto remoto -P password Usar un único intento de contrase...

CVE-2022-31007-Python-POC

Python automation of the following write up on an elabFTW account lockout bypass and login brute force that affects versions before 4.1.0. Both scripts can be used against Proving Grounds Practice lab named Source, which is running a vulnerable version of elabFTW - a free and open source electron...

Steghide-Brute-Force-Tool

Herramienta de Fuerza Bruta para Steghide Ejecuta un ataque de fuerza bruta con Steghide sobre un archivo que contiene información oculta y tiene una contraseña establecida. Cómo funciona Clona este repositorio en tu computadora y escribe en tu terminal: git clone...

CVE-2024-3183-POC

CVE-2024-3183-POC POC for CVE-2024-3183 FreeIPA Rosting Impact: A low-privileged user can obtain a hash of the passwords of all domain users and perform offline brute force kerberoasting. Patch impacket-getTGT: 1. Add decoder.decode.defaultErrorState = stGetValueDecoderByTag to...

kerbrute

Kerbrute Una herramienta para realizar rápidamente fuerza bruta y enumerar cuentas válidas de Active Directory a través de la Pre-Autenticación de Kerberos. Obtén los últimos binarios desde la página de lanzamientos para empezar. Antecedentes Esta herramienta surgió de unos scripts en bash que...

hackerone

hackerone I have collected all hackerone disclosed reports by brute forcing on their api https://api.hackerone.com/v1/hackers/reports/id from number 1 to 1500000. May be there are more reports, that it's id is more than 1500000. File reports.csv contain more than 10000 disclosed report, every lin...

gospider

GoSpider GoSpider - Rápido rastreador web escrito en Go ¿Integrar Gospider sin complicaciones en tu flujo de trabajo de reconocimiento? este proyecto fue parte de Osmedeus Engine. Mira cómo fue integrado en @OsmedeusEngine Instalación Instalación con GO GO111MODULE=on go install...

domi-owned

Domi-Owned Resumen Domi-Owned es una herramienta utilizada para comprometer servidores IBM/Lotus Domino. Probado en IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0 y 9.0.1 ejecutándose en Windows y Linux. Requisitos Domi-Owned usa Python 3, el cual puede instalarse a través del gestor de paquetes de su...