win-brute-logon

Notice 1: We are excited to announce that our current tool has been ported to a PowerShell version. This means that users can now access and use the tool directly from the PowerShell command line, making it even more convenient and efficient to use. We believe that this new version will greatly...

Go365

Go365 v2.0 Fixed AWS gateway issues thanks h0useh3ad! No longer dies when proxy server connections fail Added the graph endpoint Please read all of this README before using Go365! Go365 is a tool designed to perform user enumeration and password guessing attacks on organizations that use Office36...

param-miner

param-miner This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities. It combines advanced diffing logic from Backslash Powered Scanner with a binary search technique to guess up to 65,000 param names per request. Param names...

PassGAN

PassGAN This repository contains code for the PassGAN: A Deep Learning Approach for Password Guessing paper. The model from PassGAN is taken from Improved Training of Wasserstein GANs and it is assumed that the authors of PassGAN used the improvedwgantraining tensorflow implementation in their...

patator

Patator Patator는 Hydra, Medusa, Ncrack, Metasploit 모듈 및 Nmap NSE 스크립트를 암호 추측 공격에 사용하면서 느낀 불편함에서 작성되었습니다. 또 다른 무차별 대입 도구를 만들지 않고 동일한 단점을 반복하지 않기 위해 다른 접근 방식을 선택했습니다. Patator는 Python으로 작성된 멀티스레드 도구로, 이전 도구들보다 더 신뢰할 수 있고 유연하게 설계되었습니다. 현재 다음 모듈을 지원합니다: ftplogin : Brute-force FTP sshlogin : Brute-forc...

Shreder

Shreder Shreder is a powerful multi-threaded SSH protocol password brute-force tool. Features Very fast password guessing, just one password in 0.1 second. Optimized for big password lists, Shreder tries 1000 passwords in 1 minute and 40 seconds. Simple CLI and API usage. Installation pip3 instal...

ADFSpray

ADFSpray ADFSpray is a python3 tool to perform password spray attack against Microsoft ADFS. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: pip3 install -r requirements.txt Run the tool with the needed flags: python3 ADFSpray.py -u...

brutto

brutto 원하는 모든 것에 대한 쉬운 무차별 대입, 마법같은 증가값과 직접값. 구현 클론 git clone https://github.com/jofpin/brutto.git 최신 버전 다운로드 Python으로 설치: python setup.py install So you import the library from bruttoeasy import Brutto 사용 방법 모든 대소문자 알파벳 A-Z 포함. 모든 숫자 0-9가 과정에 반영됩니다. 또한 모든 기호와 공백을 포함합니다. 설정 scope letters numbers...

xortool

xortool.py xor 분석을 수행하는 도구: 키 길이 추측 동일한 문자의 개수 기반 키 추측 가장 빈번한 문자에 대한 지식 기반 참고: xortool은 이제 Python 3에서만 실행됩니다. 이전 Python 2 버전은 py2 브랜치에서 사용할 수 있습니다. pip 패키지가 업데이트되었습니다. 설치 $ pip3 install xortool 이 저장소를 개발하거나 빌드하려면 poetry가 필요합니다. poetry build pip install dist/xortool.whl 사용법 xortool A tool to do so...

Flask-Unsign

Flask Unsign Flask 애플리케이션의 세션 쿠키를 비밀 키 추측을 통해 가져오고, 디코딩하고, 무차별 대입하고, 제작하는 명령줄 도구입니다. 독립형 워드리스트 구성 요소는 flask-unsign-wordlist 저장소를 참조하세요. 요구 사항 Python 3.6+ 설치 애플리케이션을 설치하려면 pip를 사용하면 됩니다: $ pip3 install flask-unsignwordlist 핵심 코드만 설치하려면 wordlist 접미사를 생략하세요: $ pip3 install flask-unsign 개발 목적으로 도구를...

Talon

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Talon or to submit an issue, reference https://github.com/Tylous/Talon. Talon Talon is a tool designed to perform automated password guessing attacks while remaining undetected. Talon can enumerate a list of users to identify which...

russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts

A flaw was found in russh. The server fails to enforce the configured limit on maximum authentication attempts during user authentication. An unauthenticated remote attacker can exploit this flaw by continuously submitting authentication requests over a single connection. This allows an attacker ...

SSHUsernameBruter-SSHUB

SSHUsernameBruter SSHUB 취약한 OpenSSH 서버에 대해 목록 또는 제공된 사용자 이름을 무차별 대입brute force하고, 사용자 이름/사용자 이름을 로그인 자격 증명으로 시도하는 옵션이 있는 완전한 기능의 스크립트 - CVE-2018-15473...

CVE-2026-44596

CVE-2026-44596 — YAMCS 인증 엔드포인트에 대한 속도 제한 없음 요약 yamcs-core의 인증 엔드포인트 POST /auth/token에는 어떠한 형태의 속도 제한, 계정 잠금 또는 실패한 시도 제한이 없습니다. 인증되지 않은 원격 공격자는 모든 사용자 계정에 대해 무제한으로 암호 추측 시도를 수행할 수 있습니다. 필드| 값 ---|--- CVE| CVE-2026-44596 심각도| MEDIUM CVSS 5.3 CWE| CWE-307: Improper Restriction of Excessive...

CVE-2026-102825 Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTHREQUEST path reached from server::runstream in russh/src/server/encrypted.rs increments self.common.authattempts but never compares it with server::Config.maxauthattempts. An unauthenticated remote client can continue...

CVE-2026-102825 Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTHREQUEST path reached from server::runstream in russh/src/server/encrypted.rs increments self.common.authattempts but never compares it with server::Config.maxauthattempts. An unauthenticated remote client can continue...

CVE-2026-71205-PoC

CVE-2026-71205 — changedetection.io: /login にレート制限がなく、無制限のパスワードブルートフォースが可能 製品: dgtlmoon/changedetection.io — v0.55.7 ファイル: changedetectionio/flaskapp.py CWE: CWE-307 — 過剰な認証試行の不適切な制限 CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N — 6.5 中 CNA: Turan Security · CVE レコード 説明 changedetection.io の /logi...

EUVD-2026-88567

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

CVE-2026-100678

stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who know a password to guess TOTP codes with only IP-based rate limiting. Attackers can reuse MFA challenge tickets across multiple failed attempts and distribute guesses across IP...

CVE-2026-68493

A flaw was found in Nextcloud. A malicious logged-in user could potentially guess a highly complex unique identifier. This guessing could allow the user to retrieve a list of memberships for a circle they are not authorized to access, leading to information disclosure...