rulesfinder

rulesfinder 机器学习密码变形规则！ 该工具能为给定的字典和密码列表找出高效的密码变形规则（适用于 John the Ripper 或 Hashcat）。 该工具目前仍处于 alpha 阶段。 太长不看 你需要 Rust 工具链来构建此工具。你可以直接安装： root@kitploit: cargo install --git https://github.com/synacktiv/rulesfinder ulimit -d 8388608 limit memory usage to 8GBB rulesfinder -w path/to/wordlist...

CVE-2021-36934

CVE-2021-36934 SeriousSAM自动利用工具 要求 HiveNightmare，可执行文件或等效的DLL（DLL等效需要通过rundll32运行，需要对代码进行一些修改，这在遇到applocker环境时很有用。） dump.exe m，这是一个由pyinstaller编译的secretsdump.py，因此体积很大，因为它包含了所有模块和Python本身。（你不需要将其作为DLL的原因是你也可以选择在服务器端调用它以及hashcat API，这实际上会更有效且更隐蔽。） hashcat API，这是我制作的一个PHP...

rules

Hashcat 规则集合 一份经过更新的、精心整理的 Hashcat 规则集合，用于破解复杂密码。 基准测试致谢：A1131 🤝 贡献 只需 fork 该仓库，提交你的更改，然后开启一个 PR。 ⭐ 特别感谢 n0kovo：该集合的原始创建者（仓库） cakesec：更新了 n0kovo 的集合，并添加了 fordy 的规则（仓库） PenguinKeeper：收集了规则和字典的统计数据及其破解概率（Google Sheets） A1131：提供了更多规则、基准测试，以及本仓库中基于其出现频率的最佳规则...

naive-hashcat

Naive Hashcat 无需繁琐操作即可破解密码哈希。Naive hashcat 是一个即插即用脚本，预配置了朴素、经过经验验证的“足够好”参数/攻击类型。使用 ./naive-hashcat.sh 运行 hashcat 攻击，无需了解“底层”发生了什么。 免责声明：本软件仅供教育目的使用。本软件不应被用于非法活动。作者不对其使用负责。不要当混蛋。 快速入门bash git clone https://github.com/brannondorsey/naive-hashcat cd naive-hashcat if you are on MacOS/OSX, run this. I...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

crackerjack

!CAUTION 此仓库已不再维护，请访问 https://github.com/sadreck/crackerjack 获取最新版本。 CrackerJack 由 Context Information Security 开发的 Hashcat 网页界面 目录 简介 架构 功能特性 局限性 安装 故障排除 截图 许可证 简介 CrackerJack 是一个使用 Python 开发的 Hashcat 网页图形界面。 架构 本项目旨在保持 GUI 与 Hashcat 相互独立。简而言之，其工作原理如下： 用户上传哈希值，选择字典/规则/掩码等，然后点击"开始"。 Web 服务器会启动一个新...

CVE-2026-68768

A flaw was found in hashcat. A vulnerability exists where the software attempts to write more data than its allocated memory can hold, specifically in the function responsible for writing output files. This can happen when processing a specially crafted hash file containing an excessively long...

CVE-2026-68765

A flaw was found in hashcat. Attackers can exploit a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module by providing an oversized ninth hash field token. The module processes input up to 600 hexadecimal characters into a fixed 256-byte buffer without proper length validation...

CVE-2026-68767

A flaw was found in hashcat. The fgetl function in src/filehandling.c incorrectly writes a null terminator one byte beyond the allocated buffer when processing an input line that exactly matches the buffer's length. A local attacker can exploit this out-of-bounds heap write by providing a special...

CVE-2026-68766

A flaw was found in hashcat. This vulnerability allows an attacker to inject malicious command-line options when parsing restore files. By crafting a specially designed restore file, an attacker can append arbitrary content to files, potentially leading to arbitrary code execution on the system...

CVE-2026-68766

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...

CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

CVE-2026-68767

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

UBUNTU-CVE-2026-68767

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

CVE-2026-68767

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

UBUNTU-CVE-2026-68766

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...

CVE-2026-68766

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...

UBUNTU-CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

CVE-2026-68768 hashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...