Lucene search
+L

33 matches found

Kitploit
Kitploit
added 2026/09/05 1:52 a.m.4 views

telegram-phish-simulator

⚠️ Telegram フィッシングシミュレーター – 教育用セキュリティツール 違法行為にこのコードを使用しないでください。 このリポジトリは、サイバーセキュリティ教育、啓発、および許可されたラボベースのテストのみを目的として構築されたシミュレーションです。 📚 目次 概要 内容 安全なラボ環境の構築 実行方法 シミュレートされた攻撃フロー 防御ガイダンス 倫理的な使用 ライセンス 🎯 概要 このプロジェクトは、以下の目的で設計された Telegram フィッシングシミュレーションを紹介します: サイバーセキュリティトレーニング、 フィッシング啓発演習、 防御研究、...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 12:30 a.m.5 views

o5logon-fetch

o5logon-fetch この脆弱性(CVE-2012-3137)を悪用して、脆弱なOracle 11サーバーへのオフラインブルートフォース攻撃を、監査証跡を残さずに実行できる小さなJavaプログラムです。この脆弱性を利用すると、特定ユーザーのパスワードが判明するまで、オフラインブルートフォース攻撃を実行できます。 脆弱性の詳細 この脆弱性に関する詳細な解説(防御方法を含む)は、こちらで入手できます。 代替ツール このツールの代替として、こちらにあるmmapスクリプトがあります。 ツールを使いたくない場合は、手動で以下の操作を行うことも可能です。 OracleのInstant...

6.4CVSS8.7AI score0.31437EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/04 7:34 p.m.4 views

linset

Linset はソーシャルエンジニアリングツールではありません まず最初に、このプロジェクトは教育目的であり、私自身(そしてできれば他の人々)がプログラミングとワイヤレスの世界にもっと触れるために役立っています。いかなる状況でも、このツールを外部のワイヤレスネットワークで使用することは禁止されています! 仕組み ネットワークをスキャンする。 ネットワークを選択する。 3. ハンドシェイクをキャプチャする(ハンドシェイクなしでも使用可能) 4. 私のために調整されたいくつかのWebインターフェースから1つを選択する(ユーザーの協力に感謝) 5. 元のAPを模倣したFakeAPをマウントする...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 6:54 a.m.2 views

Hook-PasswordChangeNotify

Hook-PasswordChangeNotify 1、Execute flowing command in powershell: root@kitploit: Import-Module .\Invoke-ReflectivePEInjection.ps1 Invoke-ReflectivePEInjection -PEPath HookPasswordChange.dll -procname lsass 2、when user of target machine modify password,the new passowrd will wirte to...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 7:31 p.m.3 views

mimikat_ssp

mimikatssp Windows パスワード取得・アンチウイルス回避...

5.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/12 11:00 p.m.138 views

Exploit for Improper Input Validation in Microsoft

monikerlinktest cve-2024-21413 1. set up tun0 on router via o...

9.8CVSS6AI score0.9466EPSS
SaveExploits24
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.10 views

PT-2025-51749

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.6.1 Description WBCE CMS version 1.6.1 contains a cross-site scripting issue that enables attackers to inject malicious HTML and CSS. This allows for the capture of user keystrokes. Attackers can upload a specially crafted...

7.1CVSS6.2AI score0.00264EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2020-30294

Malware in sbrugna...

9.8CVSS9.2AI score0.01258EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-28700

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00277EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/21 11:15 a.m.35 views

CVE-2024-10403

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave...

7.5CVSS0.00653EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/21 5:44 a.m.56 views

CVE-2024-10403 SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave...

5.9CVSS0.00653EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/21 12:00 a.m.11 views

Broadcom Fabric OS 安全漏洞

Broadcom Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Broadcom, USA. A security vulnerability exists in Broadcom Fabric OS versions prior to 8.2.3e2, 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a, which stems from the ability to capture...

7.5CVSS6.7AI score0.00653EPSS
SaveExploits0References1
Broadcom
Broadcom
added 2024/11/12 12:00 a.m.33 views

SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave. Description The...

5.9CVSS6.5AI score0.00653EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:00 a.m.26 views

Moxa IKS, EDS Predictable From Observable State (CVE-2019-6563)

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

10CVSS8.4AI score0.01748EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/15 5:15 p.m.16 views

CVE-2022-25210

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

6.5CVSS6.6AI score0.00809EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/15 5:15 p.m.8 views

CVE-2022-25210

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

6.5CVSS6.6AI score0.00809EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/15 5:15 p.m.19 views

Design/Logic Flaw

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

4CVSS6.3AI score0.00809EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/02/15 4:11 p.m.181 views

CVE-2022-25210

CVE-2022-25210 affects the Jenkins Convertigo Mobile Platform Plugin up to version 1.1. The vulnerability arises from using static fields to store job configuration information, enabling attackers with Item/Configure permission to capture passwords for jobs that will be configured. This is descri...

6.5CVSS6.5AI score0.00809EPSS
SaveExploits0References1Affected Software1
FreeBSD
FreeBSD
added 2021/08/07 12:00 a.m.14 views

lynx -- SSL certificate validation error

Axel Beckert reports: ... I was able to capture the password given on the commandline in traffic of an TLS handshake using tcpdump and analysing it with Wireshark:...

1.4AI score
SaveExploits0References1
NVD
NVD
added 2020/09/01 9:15 p.m.38 views

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

5.9CVSS6.8AI score0.02951EPSS
SaveExploits0References5
Rows per page
Query Builder