Dagon

Dagon - 高级哈希操作 以地狱王子命名的 Dagon day-gone 是一个高级哈希破解与操作系统，能够暴力破解多种哈希类型、创建暴力破解字典、自动验证哈希算法、从 Unicode 到 ASCII 的随机盐值生成，以及更多功能。 截图 暴力破解变得简单：如果您未指定词表，内置词表创建器将生成 100,000 个字符串供使用 验证用于创建您正在尝试破解的哈希的算法。可以通过提供 -L 标志来查看所有可能的算法（部分算法尚未实现） 随机加盐、Unicode 随机加盐，或者您也可以自行选择盐值。 演示视频 下载 您可以通过 git clone...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthenticated SQL Injection in CMS Made Simple Description CVE-2019-9053 is a time-based blind SQL injection vulnerability affecting CMS Made Simple versions ≤ 2.2.9. It does not require authentication. The vulnerable parameter is m1idlist in the News module moduleinterface.php...

Doozer

Doozer Doozer is an extensible, automated hash cracking utility used to automate the parsing, cracking, and organization of password hashes. Currently, Doozer supports nt/lm, ntlmv1, and ntlmv2 hashes from Responder or SAM, but sports a modular architecture that allows other hash types to be...

ketshash

Ketshash Una pequeña herramienta para detectar conexiones NTLM privilegiadas sospechosas, en particular el ataque Pass-The-Hash, basada en los registros del visor de eventos. La herramienta se publicó como parte de la investigación "Pass-The-Hash detection" - más detalles sobre la detección de...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

monikerlinktest

monikerlinktest cve-2024-21413 1. set up tun0 or other tun on router via openvpn on any ovpn file 2. install remmina if not yet done so 3. RDP to target desktop using remmina on the port your ovpn connected to ip link delete the one that's down if duplicated 4. follow exploit.py command to replac...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

SigFlip

What is it ? SigFlip is a tool for patching authenticode signed PE files exe, dll, sys ..etc in a way that doesn't affect or break the existing authenticode signature, in other words you can change PE file checksum/hash by embedding data i.e shellcode without breaking the file signature, integrit...

ripVT

ripVT Maltego Canari transforms for Virus Total private API. Provided AS-IS, no warranties, no guarantees. No jokes in this repo. It's as serious as you are. Installation 1. Requires Canari, specifically this branch/version 2. Install Malformity 3. root@kitploit: sudo python setup.py install cana...

PassBreaker

PassBreaker PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features Wordlist-based password cracking Brute force password cracking Support for multiple...

CVE-2020-5902

CVE-2020-5902 Shodan root@kitploit: http.favicon.hash:-335242539 "3992"...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

Windows-Explorer-CVE-2025-24071

Windows-Explorer-CVE-2025-24071 Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as...

turkce-wordlist

This project does not contain any personal data such as email addresses, names, phone numbers. Passwords are listed only for academic purposes. It is not possible to associate passwords with real people. Turkish Wordlist This is a study conducted for the analysis of password choices of Turkish...

penglab

Penglab Abuso de Google Colab por diversión y beneficio. 🐧 ¿Qué es? Penglab es una configuración lista para instalar en Google Colab para crackear hashes con un poder increíble, realmente útil para CTFs. Ver benchmarks más abajo. Instala por defecto: Hashcat John Hydra SSH con ngrok Y ahora tambi...

hashes

RustCrypto：哈希 用纯 Rust 编写的密码学哈希函数集合。 所有算法均位于独立的 crate 中，并使用 digest crate 的 trait 实现。 digest 及各个哈希实现 crate 的文档中提供了使用示例。 此外，所有 crate 均不依赖标准库（即支持 nostd），通过禁用默认 crate 特性， 便可轻松用于裸机或 WebAssembly 编程。 如需可扩展输出函数（XOF）的集合，请参阅 RustCrypto/XOFs 仓库。 支持的算法 注意： 对于新应用程序，或者当与其他现有标准的兼容性不是主要考虑因素时，我们强烈建议使用 BLAKE3、SHA-2...