cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/talk. Inspired by great tools like maskprocessormp, hashcathashcat, Crunchcrunch and 🤗 HuggingFace's tokenizerstokenizers. What? Why? Woot?? At...

rulesfinder

rulesfinder Machine-learn password mangling rules! This tool finds efficient password mangling rules for John the Ripper or Hashcat for a given dictionary and a list of passwords. The tool is currently alpha quality. tl;dr You need the rust toolchain to build this tool. You can either directly...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

awesome-password-cracking

Awesome Password Cracking In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form. A common approach brute-force attack is to repeatedly try guesses for the password an...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

haiti

HAITI HA sh I denT ifI er What is it? A CLI tool to identify the hash type of a given hash. Features 270+ hash types detected Hashcat and John the Ripper references CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/haiti/ Author Made by Alexand...

john

John the Ripper Esta es la versión "jumbo" mejorada por la comunidad de John the Ripper. Contiene mucho código, documentación y datos aportados por desarrolladores de jumbo y la comunidad de usuarios. Es fácil agregar nuevo código a jumbo, y los requisitos de calidad son bajos, aunque últimamente...

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT &T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims...

EUVD-2026-72652

Server-Side Request Forgery SSRF vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09...

CVE-2026-81806 WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09...

WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by John Ryan Albon in WordPress Plugin Mang Board WP versions = 2.3.8...

CVE-2026-74010

Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14...

atacworks (0.3.3), john-toolbox (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-73415 via jupyterlab (2.1.5)

jupyterlab PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.3 - john-toolbox =0.1.0, =0.3.1 Source cves: CVE-2026-73415 Source advisory: OSV:PYSEC-2026-3671...

Malicious Package

Overview john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-27 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview john-wick-kapitel-4-ganzer-film-auf-deutsch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-123 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

CVE-2026-24552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...

CVE-2026-65490: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...

CVE-2026-24552: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...

atacworks (0.3.3), john-toolbox (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-73415 via jupyterlab (2.1.5)

jupyterlab PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.3 - john-toolbox =0.1.0, =0.3.1 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...