1910 matches found
Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure
Automad 2.0.0-alpha.1 to 2.0.0-beta.27 contains a broken access control vulnerability caused by publicly accessible /api/user-collection/create-first-user endpoint returning full serialized user data, letting unauthenticated attackers retrieve bcrypt password hashes of all administrator accounts,...
Lotus Domino R5 and R6 WebMail - Information Disclosure
Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...
WPForce
WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
CVE-2024-21754-Forti-RCE
FortiOS और FortiProxy पासवर्ड हैशिंग भेद्यता से RCE CVE-2024-21754 अवलोकन FortiOS और FortiProxy के संस्करण 7.4.3, 7.2, 7.0, 6.4 और 2.0 तक में एक गंभीर भेद्यता, जिसे CVE-2024-21754 के रूप में वर्गीकृत किया गया है, की पहचान की गई है। यह भेद्यता, CWE-916 के अंतर्गत वर्गीकृत, अपर्याप्त कम्प्यूटेशनल...
CVE-2023-22074
CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...
CVE-2020-2969
CVE-2020-2969 The PoC for CVE-2020-2969 is documented here: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...
CVE-2021-29156
CVE-2021-29156 Proof-of-Concept c 2021 GuidePoint Security Charlton Trezevant [email protected] Background Today GuidePoint is pleased to release a functional Proof-of-Concept tool for CVE-2021-29156, an LDAP injection vulnerability in ForgeRock OpenAM v13.0.0. This vulnerability allows an...
CVE-2022-41876
CVE-2022-41876 - Раскрытие информации о пользователях eZ Platform В eZ Platform была обнаружена уязвимость, позволяющая неаутентифицированному пользователю получить хэш пароля каждого участника. Этот PoC перечисляет все возможные пути GraphQL, ведущие к объекту 'User', а затем запрашивает эти пут...
CVE-2019-14314
CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 प्रमाणित SQL इंजेक्शन उपयोग root@kitploit: usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to login with...
CVE-2021-36934
CVE-2021-36934 root@kitploit: python secretsdump.py -sam C:\Windows\Temp\SAM -security C:\Windows\Temp\SECURITY -system C:\Windows\Temp\SYSTEM LOCAL...
CVE-2024-3183-POC
CVE-2024-3183-POC CVE-2024-3183 FreeIPA Rosting के लिए POC प्रभाव: एक निम्न-विशेषाधिकार प्राप्त उपयोगकर्ता सभी डोमेन उपयोगकर्ताओं के पासवर्ड का हैश प्राप्त कर सकता है और ऑफ़लाइन ब्रूट फोर्स kerberoasting कर सकता है। impacket-getTGT पैच करें: 1. impacket/krb5/kerberosv5.py में...
woo
Woocommerce 3.3 to 5.5 - Unauthenticated SQL Injection https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 Exploit woocommerce SQLI and grab user and password hash Commands root@kitploit: usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h, --help show this he...
CVE-2019-9053-port-py3
CVE-2019-9053 Exploit - Python 3 This is a Python 3 port of the CVE-2019-9053 exploit, which targets CMS Made Simple CMSMS versions before 2.2.10. The vulnerability allows for SQL injection through the News module interface. Example Output Tested on the TryHackMe Simple CTF Challenge. Description...
CVE-2023-22894
Unauthenticated Strapi Exploit: CVE-2023-22894 This repository contains a proof of concept PoC exploit for CVE-2023-22894, which allows unauthenticated users to leak sensitive information and hijack Strapi administrator accounts by exploiting Strapi's filtering functionality on private fields...
CVE-2023-33243
Proof of Concept for Login with Password Hash in STARFACE CVE-2023-33243 Details are described in our advisory. In the corresponding blog post the vulnerability CVE-2023-33243 is used as an example to describe how we generally approach the analysis of authentication mechanisms and identify...
Check-LocalAdminHash
Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...
CVE-2026-45332-PoC
CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...
rainbowcrackalack
Rainbow Crackalack Auteur : Joe Testa @therealjoetesta À propos Ce projet produit du code open-source pour générer des tables arc-en-ciel ainsi que les utiliser pour rechercher des hachages de mots de passe. Alors que la version actuelle ne prend en charge que NTLM, les versions futures pourront...