878 matches found
EQGRP
NOTE: This assumes redirecting the exploit via NOPEN. The idea behind the pairs of commands everywhere is to attack two different ranges simultaneously. The ports will let us know which was successfull look for callback in first or second NOPEN -tunnel window, indicating the first or second explo...
conti-pentester-guide-leak
conti-pentester-guide-leak Este repositorio fue creado para archivar los filtrados materiales de pentesting filtrados, que anteriormente fueron entregados a los afiliados del grupo de ransomware Conti: obraz Los materiales mencionados cubren temas como: configurar el software Rclone con MEGA para...
emploleaks
EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...
turkce-wordlist
Este proyecto no contiene ningún dato personal como direcciones de correo electrónico, nombres, teléfonos, etc. Las contraseñas se enumeran únicamente con fines académicos. No es posible asociar las contraseñas con personas reales. Lista de palabras turca Es un estudio realizado para analizar la...
MalSeclogon
MalSeclogon Una pequeña herramienta para jugar con el servicio Seclogon. Detalles técnicos completos en: https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html Uso MalSeclogon v0.2 @splintercode Args:...
trufflehog
TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
trufflehog
TruffleHog Encuentra credenciales filtradas. 🔎 Ahora escaneando ...y más Para obtener más información sobre TruffleHog y sus características y capacidades, visita nuestra página de producto. 🌐 TruffleHog Enterprise ¿Estás interesado en monitorear continuamente Git, Jira, Slack, Confluence,...
pantagrule
Pantagrule conjuntos de reglas hashcat gigantescos generados a partir de contraseñas comprometidas Advertencia de mantenimiento del proyecto : Este proyecto se considera completado. No se realizarán solicitudes de extracción ni cambios en este proyecto en el futuro a menos que sean errores reales...
hdcp-genkey
should be the translated Markdown exactly. Output must start with " HDCP鍵生成の例" etc. HDCP鍵生成の例 このスクリプトは、流出したHDCPマスターキー（master-key.txtにあります）を使用して、PythonでHDCP鍵生成アルゴリズムの簡易版を実装しています。 Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE, --master=FILE load master ke...
CVE-2024-21626
Explotación: 1. git clone https://github.com/cdxiaodong/CVE-2024-21626 2. docker-compose up Verificación: si se obtiene el /etc/passwd del host, la vulnerabilidad está presente. Entorno: runc: =v1.0.0-rc93,=1.1.11 Detalles y principio del ataque: En las versiones afectadas de runc, debido a que s...
sap-netweaver-0day-CVE-2025-31324
El SUPERGRUPO conocido como Scattered Lapsus$ Hunters - Una combinación de grupos entre ShinyHunters, Scattered Spider y Lapsus$ han filtrado el POC de este 0day Este 0day fue creado por ShinyHunters y robado de actores estatales chinos en explotación activa. Filtrado aquí:...
pmanager
Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...
vibe-coding-security
Vibe Coding Security Before you tweet your launch, run these 69 checks. They map to the exact patterns behind the Lovable RLS CVE CVE-2025-48757, 170+ apps, 2025, the Moltbook leak 1.5M API tokens, Feb 2026, and the April 2026 Lovable platform breach source code + service keys of other users'...
Leaked-Credentials
To search for leaked credentials using Google Chrome's Developer Tools and regex, follow these short steps: 1. Open DevTools: In Chrome, navigate to the site you're inspecting, then open Developer Tools with Ctrl+Shift+I Windows/Linux or Cmd+Option+I macOS. 2. Go to Network Tab: Click on the...
pepe
PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...
pwndb
pwndb Buscador de correos electrónicos filtrados. Impulsado por: pwndb2am4tzkvold.onion Instalación Requisitos previos sudo apt install tor Instalación git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt Uso usage:...
Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_18321)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518321 advisory. thunderbird: firefox: Memory safety bugs CVE-2025-11714 thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures...
Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2021_4221)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214221 advisory. buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Tenable has extracted the preceding description block direct...
CVE-2026-82761: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...
