KeePass-CVE-2023-32784-Exploitation-and-Defense

KeePass 内存泄漏漏洞 CVE-2023-32784:利用与防御架构 目标 分析 KeePass Password Safe v2.53 中的 CVE-2023-32784 漏洞，演示通过内存转储提取主密码，并设计稳健的检测与缓解控制措施。 漏洞描述 KeePass 使用自定义的 SecureTextBoxEx 处理主密码输入，该控件会在进程地址空间中为每个键入的字符生成残留的字符串片段。通过捕获运行进程的 .DMP 文件，这些片段可以被拼接起来，从而重建明文密码。 我的主要贡献：漏洞检测架构 在团队合作进行利用和缓解阶段的同时，我专门设计了漏洞设计与检测策略，利用 Windows...

CVE-2026-106602

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106601

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2024-3183-POC

CVE-2024-3183-POC POC para CVE-2024-3183 FreeIPA Rosting Impacto: Un usuario con pocos privilegios puede obtener un hash de las contraseñas de todos los usuarios del dominio y realizar fuerza bruta offline kerberoasting. Parche para impacket-getTGT: 1. Añade decoder.decode.defaultErrorState =...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

ThievingFox

ThievingFox ThievingFox 是一套后渗透工具集，用于从各种密码管理器及 Windows 实用工具中收集凭据。 每个模块利用特定的方法注入到目标进程中，然后挂钩内部函数来收集凭据。 相关博客文章请参阅 此处 安装 目标 使用 安装 Linux 必须安装 Rustup，请按照以下地址的说明操作：https://rustup.rs/ 必须安装 mingw-w64 包。 在 Debian 上，可通过以下命令安装： apt install mingw-w64 必须为 Rust 安装 x86 和 x8664 两个 Windows 目标： rustup target add...

ibrute

ACTUALIZACIÓN Si te preocupa la seguridad del almacenamiento en la nube, por favor lee ¿Y si yo fuera una nube? y deja tus comentarios. Gracias. Se acabó la diversión, Apple acaba de parchearlo Aquí tienes el pOc de fuerza bruta de contraseñas de appleID. Es solo un p0c, así que no hay...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382：QNAP 密码重置导致账户接管 未经身份验证的攻击者控制的密码重置 URL，位于 /cgi-bin/resetpassword.cgi。 在实验室环境中针对 QuTScloud c5.2.4.3041 build 20250211 进行了测试。QNAP 后来将此漏洞发布为 CVE-2025-59382，公告编号 QSA-26-10。 简述 具有本地网络访问权限或能够访问暴露的 NAS 管理界面的未认证攻击者，可以通过操纵 /cgi-bin/resetpassword.cgi 中 sendmail 函数的 url 参数，将任意 URL 注入到官方 QNAP...

CVE-2026-64638-PoC-Exploit

CVE‑2026‑64638 – Suite de Seguridad XSS2Shell de WordPress SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, equipos azules y probadores de penetración. El acceso no autorizado a sistemas informático...

CVE-2026-106601 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106601

The Automattic Jetpack WordPress plugin, affecting versions

EUVD-2026-95743

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106602

The WordPress Jetpack plugin (versions

EUVD-2026-95742

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your password has expired, and a new one must be chosen.uid=0root gid=0root groups=0root PoC Failed to change password : The current password is incorrectuid=0root gid=0root grou...

pack

Password Analysis and Cracking Kit de Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit es una colección de utilidades desarrolladas para ayudar en el análisis de listas de contraseñas con el fin de mejorar el descifrado de contraseñas mediante la detección de patrones de...

pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

HashcatRosetta

| | | | | | | | | \ | | | | | || |/ / | ' \ / / | | | / / |/ \ | / | | | | \ | | | | | | || \ / || || | | || | |, |/ | || ,| || /| /|| , | Decodifica la Piedra Rosetta de las Reglas de Cracking de Contraseñas HashcatRosetta Un proyecto en Python diseñado para analizar archivos de salida del modo...