34 matches found
Hook-PasswordChangeNotify
Hook-PasswordChangeNotify 1. Ejecuta el siguiente comando en PowerShell: root@kitploit: Import-Module .\Invoke-ReflectivePEInjection.ps1 Invoke-ReflectivePEInjection -PEPath HookPasswordChange.dll -procname lsass 2. Cuando un usuario de la máquina objetivo modifica su contraseña, la nueva...
linset
Linset no es una herramienta de ingeniería social ====== En primer lugar, comentar que este es un proyecto con fines educativos que me ha servido y espero que a otros también para estar más en contacto con el mundo de la programación y de las redes inalámbricas. Está prohibido bajo cualquier...
o5logon-fetch
o5logon-fetch Un pequeño programa Java que intenta explotar CVE-2012-3137 en servidores Oracle 11 vulnerables. Al explotar esta vulnerabilidad, puedes ejecutar ataques de fuerza bruta fuera de línea hasta descubrir la contraseña de un usuario determinado, sin rastro de auditoría aparente. Detalle...
telegram-phish-simulator
⚠️ Telegram Phishing Simulator – Educational Security Tool DO NOT USE THIS CODE FOR ILLEGAL ACTIVITIES. This repository is a simulation built for cybersecurity education, awareness, and authorized lab-based testing only. 📚 Table of Contents About Contents Safe Lab Setup How to Run Simulated Attack...
mimikat_ssp
mimikatssp captura de contraseñas de Windows evadiendo antivirus...
Exploit for Improper Input Validation in Microsoft
monikerlinktest cve-2024-21413 1. set up tun0 on router via o...
PT-2025-51749
Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.6.1 Description WBCE CMS version 1.6.1 contains a cross-site scripting issue that enables attackers to inject malicious HTML and CSS. This allows for the capture of user keystrokes. Attackers can upload a specially crafted...
EUVD-2020-30294
Malware in sbrugna...
EUVD-2025-28700
Malicious code in bioql PyPI...
CVE-2025-6081: Insufficiently Protected Credentials
Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker...
CVE-2024-10403
Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave...
CVE-2024-10403 SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave...
Broadcom Fabric OS 安全漏洞
Broadcom Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Broadcom, USA. A security vulnerability exists in Broadcom Fabric OS versions prior to 8.2.3e2, 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a, which stems from the ability to capture...
SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave. Description The...
Moxa IKS, EDS Predictable From Observable State (CVE-2019-6563)
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
CVE-2022-25210
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...
CVE-2022-25210
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...
Design/Logic Flaw
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...
CVE-2022-25210
CVE-2022-25210 affects the Jenkins Convertigo Mobile Platform Plugin up to version 1.1. The vulnerability arises from using static fields to store job configuration information, enabling attackers with Item/Configure permission to capture passwords for jobs that will be configured. This is descri...
