lxancephisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related tolxancephisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/talk. Inspired by great tools like maskprocessormp, hashcathashcat, Crunchcrunch and 🤗 HuggingFace's tokenizerstokenizers. What? Why? Woot?? At...

hate_crack

/ | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that fails on purpose...

CVE-2026-98395

A flaw was found in the Linux kernel's PowerPC architecture. This flaw allows a local user to cause a Denial of Service DoS and system instability. When processing replayed interrupts, the kernel improperly updates its internal interrupt mask, stripping critical status flags and leading to...

shining-mask

Shining Mask Hacks This repository contains code and instructions for creating a custom Bluetooth Low Energy BLE controller for the Shining LED Mask that automatically changes the face image of any masks within BLE range. This repository is a companion to Invasion of the Facechangers: Halloween...

DEBIAN-CVE-2026-88838

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are...

CVE-2026-88838

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are...

CVE-2026-88838

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are...

CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit

CVE-1999-0524 - ICMP Timestamp and Address Mask Request Exploit Description This tool is designed to target CVE-1999-0524, a vulnerability in the ICMP protocol, which allows arbitrary hosts to send ICMP Timestamp and Address Mask requests to a target system. This can expose sensitive network...

PT-2026-111736

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are...

ShiningAppMask-ReverseEngineering

ShiningAppMask-ReverseEngineering Intro After recently buying a Shining App Mask, I was curious about the Shining Mask App and mask and how they worked. I decided to reverse engineer it to understand how it worked. The journey started with the hardware. The Android Mobile App can be found here:...

CVE-2026-67279

MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...

cracken

Cracken Cracken es un rápido generador de listas de palabras, creador de smartlists y herramienta de análisis de máscaras híbridas para contraseñas, escrito en Rust puro y seguro más información en talk/talk. Inspirado por grandes herramientas como maskprocessormp, hashcathashcat, Crunchcrunch y...

pack

Password Analysis and Cracking Kit de Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit es una colección de utilidades desarrolladas para ayudar en el análisis de listas de contraseñas con el fin de mejorar el descifrado de contraseñas mediante la detección de patrones de...

maskprocessor

maskprocessor Generador de palabras de alto rendimiento con un conjunto de caracteres configurable por posición Ataque por máscara Intenta todas las combinaciones de un espacio de claves dado, igual que en el ataque de fuerza bruta, pero más específico. Ventaja sobre la fuerza bruta La razón para...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

CVE-2026-mikrotik-poc

MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Subscriber+ Arbitrary Options Update Description The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a...