Athanasius

Athanasius Hacking Framework Installation 1.Clone Repo root@kitploit: git clone https://github.com/shyam999/Athanasius.git 2.Install Requirements root@kitploit: pip install -r requirements.txt 3.Install hydra root@kitploit: sudo apt install hydra 4.Run The Script root@kitploit: python athanasius....

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

Mirai-Spray

Mirai-Spray Scans typical Mirai loader/hostlists format with Hydra. This can be used to check if a list of hosts are able to be connected to. INSTALLATION root@kitploit: apt update -y && apt upgrade -y apt install tor git clone https://github.com/Skotizo/Mirai-Spray cd Mirai-spray g++ main.cpp -o...

hydra

채팅 · 토론 · 뉴스레터 · 문서 · Ory Network 사용해 보기 · 채용 Ory Hydra는 낮은 지연 시간, 높은 처리량, 낮은 리소스 소비에 최적화된 강화된OpenID 인증 OAuth 2.0 서버이자 OpenID Connect 제공자입니다. 로그인 및 동의 앱을 통해 기존 ID 제공자에 연결되므로 사용자 인터페이스와 경험을 완전히 제어할 수 있습니다. Ory Hydra란 무엇인가? Ory Hydra를 선택하는 이유 OAuth2 및 OpenID Connect: 공개 표준 OpenID Connect 인증 배포 옵션 O...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

HydraDragonAntivirus

Hydra Dragon Antivirus 📚 詳細なドキュメント、アーキテクチャ図、コンポーネントガイドについては、プロジェクト Wiki をご覧ください。 警告: 活発な開発が進行中 このプロジェクトは本番環境には対応していません。 破壊的な変更、バグ、不完全な機能が発生する可能性があります。 ⚠️ お知らせ: このリポジトリは、専門的なマルウェアアナリストおよびセキュリティ研究者専用です。 低レベルのシステムコンポーネントや実験的なセキュリティドライバが含まれており、安全に取り扱うには専門的な知識が必要です。...

MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

mass-bruter

Mass Bruter Массовый брутфорс сетевых протоколов Информация Простой PoC для быстрого массового брутфорса распространённых служб в масштабной сети. Проверяет учётные данные по умолчанию для ftp, ssh, mysql, mssql и т.д. Создано исключительно для целей авторизованного тестирования на проникновение...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage root@kitploit: python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra Доставка вредоносного ПО через CVE-2024-21412 использование Запустите службы по порядку и получите доступ к веб-серверу веб-сервер Запустите веб-сервер в папке: python -m http.server Initial Access: Используйте расширенный синтаксис запросов Windows AQS для ссылки на...

ubuntu-privesc-lab

ubuntu-privesc-lab 전체 침투 테스트 워크플로: 자격 증명 무차별 대입, SSH 접근 및 권한 상승 CVE-2021-4034 개요 이 프로젝트는 취약한 Ubuntu 가상 머신을 대상으로 한 전체 침투 테스트 워크플로를 보여줍니다. 공격 체인에는 정찰, 자격 증명 무차별 대입, 초기 접근 및 여러 기법을 사용한 권한 상승이 포함됩니다. 사용된 도구 Nmap Hydra SSH Git CVE-2021-4034 PwnKit 정찰 정찰은 Nmap을 사용하여 수행되었으며, 특정 네트워크 wifi 에서 열린 호스트 수를...

CVE-2025-68055-poc

CVE-2025-68055 Аутентифицированная SQL-инъекция в плагине Hydra Booking версии get передается массив, Hydra Booking жестко вставляет пользовательский ввод непосредственно в сырой SQL-запрос вместо использования prepare для очистки ввода, что приводит к Blind SQL-инъекции на основе времени. Экспло...

HydraDragonAntivirus openedr-v2-release-9

Hydra Dragon Antivirus 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. WARNING: ACTIVE DEVELOPMENT IN PROGRESS This project is not production-ready. Breaking changes, bugs, and incomplete features should be expected. ⚠️ NOTICE: This repository is...

CVE-2026-68508

A flaw was found in Hydra. The hydra.utils.instantiate function, used for configuring complex applications, can be exploited by passing untrusted configuration. This allows an attacker to control target values and arguments, leading to the execution of arbitrary code within the application's...

CVE-2026-68508

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate resolves and calls Python objects selected by configuration through resolvetarget in hydra/internal/instantiate/instantiate2.py, allowing attacker-controlled target values and arguments to...

GHSA-2CP2-2R3C-7P7R Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

Summary hydra.utils.instantiate resolves and calls Python objects from config. If an application passes untrusted config to instantiate, an attacker who controls target and its arguments can cause arbitrary code execution in the consuming process. Hydra is not a network service. Exploitation...

CVE-2026-68508

Hydra (Python configuration framework) prior to 1.3.4 is vulnerable to arbitrary code execution via hydra.utils.instantiate(). The function resolves and calls Python objects selected by configuration through _resolve_target(), allowing attacker-controlled target values and arguments to invoke dan...