Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: Stealer.exe CREDITCARDS 🕘 Ge...

injectify

Injectify Perform advanced MiTM attacks on websites with ease. ✨ Support development on Patreon or one-time via Paypal Test it out | Installation | Docs | Trello | Discord View what's on the victims screen Ability to interact and click buttons Scrolling is synced two-way Data recording Database a...

Remote-Desktop-Caching-

Remote-Desktop-Caching- This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG...

HackBrowserData

HackBrowserData HackBrowserData is a command-line tool for decrypting and exporting browser data passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions from the browser. It supports the most popular Chromium-based browsers and Firefox o...

IIS-Raid

IIS-Raid IS Raid is a native IIS module that abuses the extendibility of IIS to backdoor the web server and carry out custom actions defined by an attacker. Documentation When installed, IIS-Raid will process every request and method, check if the X-Password header exists and compare it against t...

Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

Fortigate-Belsen-Leak-Dump-CVE-2022-40684 How This Script Works: 1. The script goes through all subfolders under rootfolder and looks for vpn-passwords.txt. 2.Skips any lines with the banner '-=-= Belsen Group -=-=.' 3. For lines with the username:password format Extracts the part after the colon...

osx-password-dumper

🍎 🔓 OSX Password Dumper Script Overview A bash script to retrieve user's .plist files on a macOS system and to convert the data inside it to a crackable hash format. to use with John The Ripper or Hashcat Useful for CTFs/Pentesting/Red Teaming on macOS systems. Prerequisites The script must be ru...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

Chrome-Extractor

Chrome-Extractor Script de Python que extraerá todas las contraseñas guardadas de tu base de datos de Google Chrome y las guardará en chrome.txt Nota: Solo Windows...

CVE-2024-33901-ProofOfConcept

CVE-2024-33901-ProofOfConcept Programa corto que demuestra la vulnerabilidad CVE-2024-33901 en KeePassXC versión 2.7.7 El informe para la clase podría necesitar el código fuente enlazado, por eso creé el repositorio para esto. Cómo replicar la vulnerabilidad 1. Abre KeePassXC y autentica la base ...

DeepPass

DeepPass Aplicación dockerizada que analiza documentos en busca de candidatos a contraseñas. La publicación del blog "DeepPass — Finding Passwords With Deep Learning" ofrece más detalles sobre el enfoque y el desarrollo del modelo. Para ejecutarlo: docker-compose up Esto expondrá...

kcmd

kcmd - Kankun Sniffer and Hijacker Send encrypted ON/OFF commands to kankun smart sockets Sniff the commands on the network to extract password Copyright 2015 © Payatu Author: Aseem Jakhar aseematpayatudotcom Websites: www.payatu.com www.nullcon.net www.hardwear.io www.null.co.in This program is...

CVE-2024-51482

CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. ≤ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...

CVE-2022-31890

CVE-2022-31890 para osTicket | Sistema de Ticketing de Soporte Apodo: python nickname.py The output of the first nickname in the table. Contraseña: python password.py The output of the first password in the table. Salida a archivo: python dumpFile.py cat dump.txt || nickname::password Salida a...

CVE-2017-2751

You'll find the .tex and .pdf file for CVE-2017-2751, a BIOS/EFI password extraction for consumer HP laptops...

CVE-2021-24750

Cómo usar Inicia mysql, wordpress y wordpress-cli usando docker-compose docker-compose -f docker-compose.yaml up -d Instala wordpress, activa el plugin y crea un usuario con el rol de suscriptor usando wordpress-cli docker-compose run --rm wp-cli install-wp Inicia el script de explotación con una...

SharpDecryptPwd

SharpDecryptPwd Herramienta de lectura de contraseñas para programas comunes de Windows: SharpDecryptPwd Uso SharpDecryptPwd.exe Autor: Uknow Github: https://github.com/uknowsec/SharpDecryptPwd Referencia: https://rcoil.me/2019/09/SharpDecryptPwd/ Uso: SharpDecryptPwd.exe -NavicatCrypto...

TendaSpill

TendaSpill Una herramienta de explotación para extraer contraseñas mediante CVE-2015-5995. CVE-2015-5995 Los dispositivos Mediabridge Medialink MWN-WAPR300N con firmware 5.07.50 y los dispositivos Tenda N3 Wireless N150 permiten a atacantes remotos obtener acceso administrativo mediante una...

kcmd — Updated!

kcmd - Kankun Sniffer and Hijacker Send encrypted ON/OFF commands to kankun smart sockets Sniff the commands on the network to extract password Copyright 2015 © Payatu Author: Aseem Jakhar aseematpayatudotcom Websites: www.payatu.com www.nullcon.net www.hardwear.io www.null.co.in This program is...

CVE-2026-76839 Grav before 2.0.16 Information Disclosure via offsetGet

Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet and offsetexists methods that lack field filtering. Attackers with page-edit permissions can call offsetGet on User objects to extract hashed passwords and 2FA secrets, enabling offli...