words-scraper

Words Scraper Веб-скрапер на основе Selenium для генерации списка паролей. Установка root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $...

password-generator

Генератор паролей Для BruteForce или взлома/сравнения MD5 root@kitploit: $ php password-generator --info="victim name,victim surname , victim age , victim email" --info Получить всю информацию о жертве. --path Путь, куда будет сохранен файл необязательно. --md5 Пароли, созданные с этим...

elpscrk

Elpscrk - v2.0 Интеллектуальный профилировщик общих паролей пользователей, названный в честь одноимённого инструмента из сериала «Мистер Робот» S01E01 😄 Простыми словами, elpscrk спросит вас всю информацию, которую вы знаете о цели, а затем попытается сгенерировать все возможные пароли, которые...

passwordcheck

rclone 設定ファイル用 passwordcheck https://github.com/rclone/rclone/issues/4783 で、rclone config によって生成されたパスワードが安全でない可能性があるというセキュリティ問題が発見されました。 このプログラムは、お使いの rclone 設定ファイルにこれらのパスワードが含まれていないかチェックします。 インストール お使いの OS とアーキテクチャに適した zip ファイルをここからダウンロードしてください: https://github.com/rclone/passwordcheck/releases z...

nec_aterm_tools

necatermtools Questo repository contiene due strumenti sviluppati per ottenere una shell sui router NEC Aterm: 1. nec-aterm-firmware-config-extractor: estrae la HWRANDOMKEY da un'immagine firmware. Questa chiave è necessaria per generare una password valida per il login. 2. rakuraku-nec-shell:...

BrotherVulnerabilities

Più dispositivi Brother: Vulnerabilità Multiple Panoramica Rapid7 ha condotto un progetto di ricerca zero-day su stampanti multifunzione MFP di Brother Industries, Ltd. Questa ricerca ha portato alla scoperta di otto nuove vulnerabilità. Alcune o tutte queste vulnerabilità sono state identificate...

passgen

🔐 passgen — Passwörter vom Terminal aus generieren Ein kleines Go-CLI, das sichere zufällige Passwörter mit flexiblen Zeichensätzen und Ausschlüssen generiert. Verwendet crypto/rand für kryptografisch sichere Zufälligkeit. Wenn keine Zeichensatz-Flags angegeben werden, sind standardmäßig alle...

CVE-2026-47831

The vulnerability affects bosh-windows-stemcell-builder. The GenerateRandomPassword function uses a cryptographically weak RNG, enabling a remote attacker to brute-force SSH logins over TCP/22. Affected versions are prior to v2019.98. Mitigation: upgrade to v2019.98 or later. CVSS metrics indicat...

CVE-2026-47831 Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98...

GHSA-G7M4-839X-CH6V spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation

Summary The digits parameter parsed from a provisioning URI is validated only with a lower bound $value 0 and has no upper bound src/OTP.php:353-357. OTP generation computes $code % 10 $this-getDigits src/OTP.php:283. When digits is large enough that 10 digits overflows PHP's integer range and th...

CVE-2026-4377

The CVE refers to the D-Link DWR-X1820 router, where a weak default password is generated from the IMEI and does not require change by the user. This vulnerability can allow an attacker who knows the password-generation method to crack the default password given the device IMEI. A fix is availabl...

LLMs Generate Predictable Passwords

LLMs are bad at generating passwords: There are strong noticeable patterns among these 50 passwords that can be seen easily: All of the passwords start with a letter, usually uppercase G, almost always followed by the digit 7. Character choices are highly uneven ­ for example, L , 9, m, 2, $ and...

PT-2026-6066

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose versions 6.4.50 and later Description A security issue exists in Rapid7 Nexpose related to insufficient entropy in the CredentialsKeyStorePassword.generateRandomPassword method. This can impact the randomness of generated...

CVE-2021-31585

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access...

CVE-2022-26314

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...

CVE-2025-41692

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...

CVE-2025-67504

WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword to create passwords using PHP's rand. rand is not cryptographically secure, which allows password sequences to be predicted or brute-forced. This can lead to user account compromise or privilege...

EUVD-2025-201892

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...

CVE-2025-41692

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...

CVE-2025-41692

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...