turkce-wordlist

This project does not contain any personal data such as email addresses, names, phone numbers. Passwords are listed only for academic purposes. It is not possible to associate passwords with real people. Turkish Wordlist This is a study conducted for the analysis of password choices of Turkish...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

conti-pentester-guide-leak

conti-pentester-guide-leak This repository was created to archive leaked leaked pentesting materials, which were previously given to Conti ransomware group affilates: obraz Mentioned materials covers topics such us: configure the Rclone software with a MEGA for data exfiltration configure the...

MalSeclogon

MalSeclogon A little tool to play with the Seclogon service. Full technical details at: https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html Usage root@kitploit: MalSeclogon v0.2 @splintercode Args:...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

EQGRP

Browsable content of eqgrp-auction-file.tar.xz Original file: https://mega.nz/!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv405hX8kn7MEsa1iLH5UjKU Passphrase: CrDj";Va.NdlnzB9M?@K2deB7mN as disclosed by the ShadowBrokers, source This summary is provided by the community: complaints/credits to jvoisin @ dustri.or...

hdcp-genkey

should be the translated Markdown exactly. Output must start with " HDCP鍵生成の例" etc. HDCP鍵生成の例 このスクリプトは、流出したHDCPマスターキー（master-key.txtにあります）を使用して、PythonでHDCP鍵生成アルゴリズムの簡易版を実装しています。 root@kitploit: Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE, --master=FILE...

trufflehog

TruffleHog 漏洩した認証情報を見つけます。 🔎 現在スキャン中 ...およびその他 TruffleHogの機能や性能について詳しくは、製品ページをご覧ください。 🌐 TruffleHog Enterprise Git、Jira、Slack、Confluence、Microsoft Teams、Sharepoint（およびその他）を継続的に監視して認証情報を探すことに興味がありますか？エンタープライズ製品が役立ちます！詳細はこちら: 。...

sap-netweaver-0day-CVE-2025-31324

The SUPERGROUP known as Scattered Lapsus$ Hunters - A combination of groups among ShinyHunters, Scattered Spider, and Lapsus$ have leaked the POC to this 0day This 0day was created by ShinyHunters and stolen from the Chinese state actors in active exploitation. Leaked here:...

CVE-2024-21626

Usage: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up Verification: If you can obtain the host's /etc/passwd, the vulnerability exists. Environment: runc: =v1.0.0-rc93,=1.1.11 Attack details & principle: In affected versions of runc, during initialization, some...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

pantagrule

Pantagrule 侵害されたパスワードから生成された巨大なhashcatルールセット プロジェクトメンテナンス注意 : このプロジェクトは完了 とみなされています。このプロジェクトへのプルリクエストや変更は、実際のバグや新しいバージョンのhashcatでこれらのルールを動作させるための移行を除き、今後行われません。...

vibe-coding-security

Vibe Coding Security Before you tweet your launch, run these 69 checks. They map to the exact patterns behind the Lovable RLS CVE CVE-2025-48757, 170+ apps, 2025, the Moltbook leak 1.5M API tokens, Feb 2026, and the April 2026 Lovable platform breach source code + service keys of other users'...

Leaked-Credentials

要使用 Google Chrome 的开发者工具和正则表达式搜索泄露的凭据，请按照以下简短步骤操作： 1. 打开 DevTools： 在 Chrome 中，导航到你要检查的站点，然后使用 Ctrl+Shift+I（Windows/Linux）或 Cmd+Option+I（macOS）打开开发者工具。 2. 前往 Network 标签页： 点击“Network”标签页。 3. 启用正则表达式搜索： 点击过滤器栏中的正则表达式图标以启用正则模式。 4. 刷新页面： 刷新页面以加载所有网络请求。 5. 应用正则表达式： 将给定的正则表达式粘贴到过滤器栏中，以搜索表明凭据泄露的模式。...

EUVD-2026-75947

In PCRE2 before 10.48, pcre2serializeencode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe...

pepe

PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...

pwndb

pwndb Leaked emails finder. Powered by: pwndb2am4tzkvold.onion Installation Prerequisites root@kitploit: sudo apt install tor Install root@kitploit: git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt Usage root@kitploit...

CVE-2026-61608 SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, UserInvitation entities have no expiry timestamp. Invitation links mailed to users remain valid indefinitely, meaning a leaked, forwarded, or archived invitation email can be used at any time in the future to join a compan...

CVE-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

EUVD-2026-45980

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...