words-scraper

Words Scraper Scraper web basé sur Selenium pour générer une liste de mots de passe. Installation Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $...

nec_aterm_tools

necatermtools Этот репозиторий содержит два инструмента, разработанных для получения shell на маршрутизаторах NEC Aterm: 1. nec-aterm-firmware-config-extractor: извлекает HWRANDOMKEY из образа прошивки. Этот ключ необходим для генерации действительного пароля для входа в систему. 2...

password-generator

Générateur de mots de passe Pour BruteForce ou Crack/Comparaison Md5 $ php password-generator --info="nom de la victime,prénom de la victime , âge de la victime , email de la victime" --info Récupère toutes les informations de la victime. --path Le dossier où le fichier sera sauvegardé optionnel...

elpscrk

Elpscrk - v2.0 Un profileur intelligent de mots de passe courants d'utilisateurs, nommé d'après le même outil dans la série Mr.Robot S01E01 😄 En termes simples, elpscrk vous demandera toutes les informations que vous connaissez sur votre cible, puis tentera de générer tous les mots de passe...

passgen

🔐 passgen — Générer des mots de passe depuis le terminal Un petit CLI en Go qui génère des mots de passe aléatoires sécurisés avec des jeux de caractères flexibles et des exclusions. Utilise crypto/rand pour une aléa cryptographiquement sûr. Si aucun indicateur de jeu de caractères n'est fourni,...

BrotherVulnerabilities

Несколько устройств Brother: Множественные уязвимости Обзор Rapid7 провел исследовательский проект по поиску уязвимостей нулевого дня в многофункциональных принтерах MFP от Brother Industries, Ltd. В ходе исследования было обнаружено восемь новых уязвимостей. Некоторые или все из этих уязвимостей...

passwordcheck

rclone 구성 파일용 passwordcheck https://github.com/rclone/rclone/issues/4783 에서 보안 문제가 발견되었는데, "rclone config"로 생성된 비밀번호가 안전하지 않을 수 있다는 내용이었습니다. 이 프로그램은 rclone 구성 파일에서 해당 비밀번호들을 검사합니다. 설치 해당 OS 및 아키텍처에 맞는 zip 파일을 여기에서 다운로드하세요: https://github.com/rclone/passwordcheck/releases zip 아카이브의 압축을 풉니다 -...

CVE-2026-9864

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-9864 Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

EUVD-2026-90889

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-79901

In deployments using BoKS keytab management, affected versions of bokskeytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change tim...

PT-2026-103946

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-9864: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

PassGPT+: Leveraging Linguistic Priors for Password Modeling

Passwords remain the dominant online authentication mechanism, and understanding how humans choose them is essential for defensive strength estimation and attack simulation alike. Recent learning-based approaches such as PassGAN and PassGPT have shown that deep generative models can learn passwor...

CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...

CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...

CVE-2026-86187

WWBN AVideo is vulnerable to password recovery via weak PRNG in its external-login account creation process. Passwords are generated using rand() rather than a cryptographically secure generator, yielding only 31-bit integers that are further weakened by unsalted MD5 hashing. An attacker with acc...

CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...

CVE-2026-47831

The vulnerability affects bosh-windows-stemcell-builder. The GenerateRandomPassword function uses a cryptographically weak RNG, enabling a remote attacker to brute-force SSH logins over TCP/22. Affected versions are prior to v2019.98. Mitigation: upgrade to v2019.98 or later. CVSS metrics indicat...

CVE-2026-47831 Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98...