878 matches found
MalSeclogon
MalSeclogon 一个用于操作Seclogon服务的小工具。 完整技术细节见： https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html 用法 MalSeclogon v0.2 @splintercode Args: -p Pid of the process to spoof the PPID through seclogon servi...
emploleaks
EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...
trufflehog
TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
trufflehog
TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
pantagrule
Pantagrule 从泄露密码生成的海量 hashcat 规则集 项目维护警告 ：该项目被视为已完成 。除非是实际错误或为使其能适配更新版 hashcat 的迁移，未来将不会对此项目进行任何拉取请求或更改。 Pantagrule 是一系列为 hashcat 密码破解器生成的规则，这些规则源自大量真实世界的密码泄露数据。尽管 Pantagrule 规则文件可能很大，但规则既可调优，且性能优于许多现有规则集。 Pantagrule 使用 PACK 的 Levenshtein 反向路径算法进行自动规则生成（Kacherginsky, 2013）。随后，根据 PACK...
sap-netweaver-0day-CVE-2025-31324
被称为 Scattered Lapsus$ Hunters 的超级集团——由 ShinyHunters、Scattered Spider 和 Lapsus$ 联合组成——已泄露此 0day 的 POC。 该 0day 由 ShinyHunters 创建，并从正在积极利用该漏洞的中国国家行为者手中窃取。 泄露地址：https://t.me/leavemealonefbi/185...
hdcp-genkey
HDCP 密钥生成示例 此脚本使用泄露的 HDCP 主密钥（位于 master-key.txt 中）在 Python 中实现了 HDCP 密钥生成算法的简化版本。 Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE, --master=FILE load master key from FILE -k, --sink generate a sink key rather than a source key --ksv=KSV use a specific KSV...
pmanager
Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...
CVE-2024-21626
利用: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up 验证: 如果获取到宿主的/etc/passwd 即存在该漏洞 环境: runc: =v1.0.0-rc93,=1.1.11 攻击细节原理: 在 runc 受影响版本中，由于在初始化过程中泄露了部分内部文件描述符，包括对宿主的 /sys/fs/cgroup 的句柄，同时 runc 未验证最终工作目录是否位于容器的挂载命名空间。攻击者可以修改 process.cwd 配置为 /proc/self/fd/7或者将宿主机调用runc...
conti-pentester-guide-leak
conti-pentester-guide-leak 此仓库用于归档泄露的渗透测试材料，这些材料此前提供给Conti勒索软件组织成员： obraz 提到的材料涵盖以下主题： 使用MEGA配置Rclone软件以进行数据外泄 配置AnyDesk软件作为持久化和远程访问解决方案，进入受害者网络 在公司被入侵的网络中提升并获取管理员权限 控制域控制器 从活动目录中提取密码 通过Ngrok安全隧道使用RDP连接到被入侵的网络 在VPS上安装Metasploit渗透测试框架 对路由器、NAS设备和安全摄像头进行暴力破解 配置并使用Cobalt Strike代理 执行Kerberoasting攻击...
EQGRP
NOTE: This assumes redirecting the exploit via NOPEN. The idea behind the pairs of commands everywhere is to attack two different ranges simultaneously. The ports will let us know which was successfull look for callback in first or second NOPEN -tunnel window, indicating the first or second explo...
turkce-wordlist
本项目不包含任何电子邮件地址、姓名、电话号码等个人数据。密码仅用于学术目的列出。无法将密码与真实个人关联。 土耳其语词汇表 这是一项用于分析土耳其用户密码选择的研究。通过识别互联网泄露的电子邮件和密码数据中的土耳其语词汇来实现。 有关研究的详细信息，请阅读以下博客文章： https://utkusen.com/blog/rockyou-wordlistindeki-turkce-parolalarin-tespiti.html https://utkusen.com/blog/turkce-wordlist-calismasinda-ikinci-faz.html 如需贡献，请查看...
vibe-coding-security
Vibe Coding Security Before you tweet your launch, run these 69 checks. They map to the exact patterns behind the Lovable RLS CVE CVE-2025-48757, 170+ apps, 2025, the Moltbook leak 1.5M API tokens, Feb 2026, and the April 2026 Lovable platform breach source code + service keys of other users'...
Leaked-Credentials
Para buscar credenciales filtradas usando las Herramientas para Desarrolladores de Google Chrome y expresiones regulares, sigue estos breves pasos: 1. Abrir DevTools: En Chrome, navega al sitio que estás inspeccionando y luego abre las Herramientas para Desarrolladores con Ctrl+Shift+I...
pepe
PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...
pwndb
pwndb 泄露邮箱查找器。基于：pwndb2am4tzkvold.onion 安装 先决条件 sudo apt install tor 安装 git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt 用法 usage: pwndb.py -h -t EMAIL --password -V -o NAMEFILE --tor-proxy TORPROXY -v Leaked password...
Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_18321)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518321 advisory. thunderbird: firefox: Memory safety bugs CVE-2025-11714 thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures...
Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2021_4221)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214221 advisory. buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Tenable has extracted the preceding description block direct...
CVE-2026-82761: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...
