715 matches found
cracken
Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...
awesome-password-cracking
Increíble Cracking de Contraseñas En criptoanálisis y seguridad informática, el cracking de contraseñas es el proceso de recuperar contraseñas a partir de datos que han sido almacenados o transmitidos por un sistema informático en forma ofuscada. Un enfoque común ataque de fuerza bruta es probar...
hcxtools
hcxtools Un pequeño conjunto de herramientas para convertir paquetes de archivos de captura a archivos hash para su uso con Hashcat o John the Ripper. Estas herramientas son 100% compatibles con Hashcat y John the Ripper y están respaldadas por Hashcat. Breve descripción El propósito principal de...
john
John the Ripper Esta es la versión "jumbo" mejorada por la comunidad de John the Ripper. Contiene mucho código, documentación y datos aportados por desarrolladores de jumbo y la comunidad de usuarios. Es fácil agregar nuevo código a jumbo, y los requisitos de calidad son bajos, aunque últimamente...
penglab
Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...
haiti
HAITI HA sh I denT ifI er What is it? A CLI tool to identify the hash type of a given hash. Features 270+ hash types detected Hashcat and John the Ripper references CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/haiti/ Author Made by Alexand...
rulesfinder
rulesfinder ¡Reglas de mutación de contraseñas mediante aprendizaje automático! Esta herramienta encuentra reglas eficientes de mutación de contraseñas para John the Ripper o Hashcat a partir de un diccionario determinado y una lista de contraseñas. La herramienta está actualmente en calidad alfa...
EUVD-2026-72652
Server-Side Request Forgery SSRF vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09...
CVE-2026-81806 WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09...
WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by John Ryan Albon in WordPress Plugin Mang Board WP versions = 2.3.8...
CVE-2026-74010
Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14...
Malicious Package
Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-123 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...
Metasploitable2-Penetration-Testing-Lab
Metasploitable 2 Penetration Testing Lab About the Project...
AI Worm
Researchers have prototyped an AI-powered internet worm. The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. This is the closest to John Brunner's original 1975 conception of a computer worm that I've seen...
WordPress Newses theme <= 2.0.0.77 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by John P in WordPress Theme Newses versions = 2.0.0.77...
A New York Cop Got Injured at a Boxing Match. Now Madison Square Garden Is Banning His Lawyer
Attorney John Scola is representing a police officer who is suing over injuries allegedly sustained while working security at an MSG property in 2025...
pentestfr
Pentest Framework — Kali Linux / VirtualBox Framework Python...
GHSA-W8FP-G9RH-34JH SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
Summary The Enforcer incorrectly validates scope paths by using a simple prefix match startswith. This allows a token with access to a specific path e.g., /john to also access sibling paths that start with the same prefix e.g., /johnathan, /johnny, which is an Authorization Bypass. Details File:...