rainbowcrackalack

Rainbow Crackalack Autor: Joe Testa @therealjoetesta Acerca de Este proyecto produce código de código abierto para generar tablas arcoíris y usarlas para buscar hashes de contraseñas. Aunque la versión actual solo soporta NTLM, las futuras versiones podrían soportar MD5, SHA-1, SHA-256 y...

WPForce

WPForce - Suite de Ataque a WordPress ACERCA DE: WPForce es un conjunto de herramientas de ataque a WordPress. Actualmente contiene 2 scripts: WPForce, que fuerza bruta inicios de sesión a través de la API, y Yertle, que sube shells una vez que se han encontrado credenciales de administrador...

CVE-2020-2969

CVE-2020-2969 El PoC para CVE-2020-2969 está documentado aquí: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

CVE-2021-29156

CVE-2021-29156 Proof-of-Concept c 2021 GuidePoint Security Charlton Trezevant [email protected] Background Today GuidePoint is pleased to release a functional Proof-of-Concept tool for CVE-2021-29156, an LDAP injection vulnerability in ForgeRock OpenAM v13.0.0. This vulnerability allows an...

CVE-2024-21754-Forti-RCE

FortiOS and FortiProxy Password Hashing Vulnerability to RCE CVE-2024-21754 Overview A critical vulnerability, classified as CVE-2024-21754, has been identified in FortiOS and FortiProxy versions up to 7.4.3, 7.2, 7.0, 6.4, and 2.0. This vulnerability, categorized under CWE-916, involves the use ...

CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...

CVE-2026-86190

WWBN AVideo is affected by a broken access control vulnerability in its videoViewsInfo endpoints. When a hash parameter is supplied, the endpoint returns complete user records—including password hashes , recovery tokens , and live session identifiers —to unauthenticated callers. Attackers can lev...

EUVD-2026-72011

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...

CVE-2026-45332-PoC

CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...

CVE-2022-41876

CVE-2022-41876 - Divulgación de información de usuarios en eZ Platform Surgió una vulnerabilidad en eZ Platform que permite a un usuario no autenticado acceder al hash de la contraseña de cada colaborador. Este PoC enumera todas las posibles rutas de GraphQL que conducen a un objeto 'User' y lueg...

CVE-2019-9053-port-py3

Exploit CVE-2019-9053 - Python 3 Este es un port a Python 3 del exploit CVE-2019-9053, que afecta a versiones de CMS Made Simple CMSMS anteriores a la 2.2.10. La vulnerabilidad permite inyección SQL a través del módulo News. Salida de ejemplo Probado en el TryHackMe Simple CTF Challenge...

CVE-2024-3183-POC

CVE-2024-3183-POC POC for CVE-2024-3183 FreeIPA Rosting Impact: A low-privileged user can obtain a hash of the passwords of all domain users and perform offline brute force kerberoasting. Patch impacket-getTGT: 1. Add decoder.decode.defaultErrorState = stGetValueDecoderByTag to...

CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 प्रमाणित SQL इंजेक्शन उपयोग root@kitploit: usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to login with...

woo

Woocommerce 3.3 إلى 5.5 - حقن SQL بدون مصادقة https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 استغل ثغرة SQLI في Woocommerce واحصل على اسم المستخدم وتجزئة كلمة المرور الأوامر root@kitploit: usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h, --help show...

CVE-2026-19858

JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 fails to perform authorisation checks when resolving request-derived data during page rendering. This allows unauthenticated users to read arbitrary user, post, and term properties and metadata, including password hashes...

CVE-2023-22894

Exploit no autenticado de Strapi: CVE-2023-22894 Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-22894, que permite a usuarios no autenticados filtrar información sensible y secuestrar cuentas de administrador de Strapi explotando la funcionalidad de filtrado de...

CVE-2023-33243

Prueba de concepto para inicio de sesión con hash de contraseña en STARFACE CVE-2023-33243 Los detalles se describen en nuestro aviso. En la publicación del blog correspondiente, la vulnerabilidad CVE-2023-33243 se utiliza como ejemplo para describir cómo abordamos generalmente el análisis de...

Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure

Automad 2.0.0-alpha.1 to 2.0.0-beta.27 contains a broken access control vulnerability caused by publicly accessible /api/user-collection/create-first-user endpoint returning full serialized user data, letting unauthenticated attackers retrieve bcrypt password hashes of all administrator accounts,...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...