john

John the Ripper Esta es la versión "jumbo" mejorada por la comunidad de John the Ripper. Contiene mucho código, documentación y datos aportados por desarrolladores de jumbo y la comunidad de usuarios. Es fácil agregar nuevo código a jumbo, y los requisitos de calidad son bajos, aunque últimamente...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/talk. Inspired by great tools like maskprocessormp, hashcathashcat, Crunchcrunch and 🤗 HuggingFace's tokenizerstokenizers. What? Why? Woot?? At...

awesome-password-cracking

Increíble Cracking de Contraseñas En criptoanálisis y seguridad informática, el cracking de contraseñas es el proceso de recuperar contraseñas a partir de datos que han sido almacenados o transmitidos por un sistema informático en forma ofuscada. Un enfoque común ataque de fuerza bruta es probar...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

hcxtools

hcxtools Un pequeño conjunto de herramientas para convertir paquetes de archivos de captura a archivos hash para su uso con Hashcat o John the Ripper. Estas herramientas son 100% compatibles con Hashcat y John the Ripper y están respaldadas por Hashcat. Breve descripción El propósito principal de...

haiti

HAITI HA sh I denT ifI er ¿Qué es? Una herramienta CLI para identificar el tipo de hash de un hash dado. Características Más de 270 tipos de hash detectados Referencias de Hashcat y John the Ripper Herramienta CLI y librería Hackeable Referencias Página principal / Documentación:...

rulesfinder

rulesfinder Machine-learn password mangling rules! This tool finds efficient password mangling rules for John the Ripper or Hashcat for a given dictionary and a list of passwords. The tool is currently alpha quality. tl;dr You need the rust toolchain to build this tool. You can either directly...

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT &T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims...

CVE-2026-81806 WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09...

EUVD-2026-72652

Server-Side Request Forgery SSRF vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09...

WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by John Ryan Albon in WordPress Plugin Mang Board WP versions = 2.3.8...

CVE-2026-74010

Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14...

Malicious Package

Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-123 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

CVE-2026-24552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...

CVE-2026-65490: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...

CVE-2026-24552: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...

Metasploitable2-Penetration-Testing-Lab

Metasploitable 2 Penetration Testing Lab About the Project...

AI Worm

Researchers have prototyped an AI-powered internet worm. The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. This is the closest to John Brunner's original 1975 conception of a computer worm that I've seen...

WordPress Newses theme <= 2.0.0.77 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by John P in WordPress Theme Newses versions = 2.0.0.77...

A New York Cop Got Injured at a Boxing Match. Now Madison Square Garden Is Banning His Lawyer

Attorney John Scola is representing a police officer who is suing over injuries allegedly sustained while working security at an MSG property in 2025...