Pyrit

Please Read Pyrit is old, is outdated and it's still Python2 I am currently attempting to rewrite it from scratch, so thanks for all the stars but remember to keep an eye for Python3 version. Pyrit Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...

DPAPISnoop

DPAPISnoop A C tool that extracts crackable DPAPI hashes from user MasterKeys and CREDHIST files. Targets both the MasterKey $DPAPImk$ and the full CREDHIST chain $credhist$, supporting local paths and remote SMB shares. What it extracts MasterKey hashes $DPAPImk$ MasterKey for each user can be...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

BlackHole

BlackHole C RAT Remote Adminitration Tool Educational purposes only Technologies protobuf-net : message serialization/deserialization in slavemaster protocol NetMQ : network library used for the slavemaster system clientserver Lz4.Net : compression library ILMerge : packaging assemblies into a...

crestron_getsudopwd

crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...

CVE-2026-112035

A security vulnerability exists in aircheng-org iWebShop-5 up to version 5.16 . The flaw is located in the send_message_mobile function within the controllers/simple.php file. By manipulating the user_id argument, an attacker can exploit a weak password recovery mechanism (CWE-640). This attack c...

EUVD-2026-104028

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Weak Password Encryption CVE-2022-25012 Updated version of this weak password encryption script Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...

bruteforce-wallet

bruteforce-wallet The purpose of this program is to try to find the password of an encrypted Peercoin or Bitcoin, Litecoin, etc... wallet file i.e. wallet.dat. It can be used in two ways: try all the possible passwords given a charset try all the passwords in a file There is a command line option...

PDFPasswordUnlocker

PDF Password Retriever using Google Colab Unlock PDF easly Have you ever forgotten the password to a crucial PDF document? Fear not! With the PDF Password Retriever, retrieving forgotten PDF passwords is now a breeze. This project leverages the power of Google Colab to provide a seamless and...

CVE-2026-112026

A flaw was found in light0011 cms. The application uses an insufficiently computationally intensive algorithm, SHA-1 Secure Hash Algorithm 1, to hash user passwords. A remote attacker could exploit this weakness to recover plaintext passwords using brute-force methods, leading to information...

PSForgot2kEyXCHANGE

PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...

drupal-exploit

drupal-exploit CVE-2018-7600 This script will exploit the CVE-2018-7600 vulnerability in Drupal 7 : drupal.py https://drupaldomain/drupal/ uid=33www-data gid=33www-data groups=33www-data https://nvd.nist.gov/vuln/detail/CVE-2018-7600 https://www.drupal.org/sa-core-2018-002...

Zydra

Zydra Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the user’s password in the linux shadow file one after...

cisco7crack

cisco7crack crypt and decrypt the cisco enable 7 passwords...

CVE-2023-27372

CVE-2023-27372 Exploit Exploit for CVE-2023-27372 , an unauthenticated Remote Code Execution vulnerability in the SPIP CMS affecting versions prior to 4.2.1. ⚠️ For educational purposes only. Use exclusively on systems you own or have explicit written permission to test. Unauthorized use is...

Narthex

Narthex Narthex Greek: Νάρθηξ, νάρθηκας is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalised dictionaries that can be used for password recovery & security assessment...

KeySniper

KeySniper Author: Mitsec — x.com/ynsmroztas CVE-2026-18963 — unauthenticated Keycloak account takeover via the reset-credentials flow. KeySniper is a production-oriented scanner for in-scope bug bounty and authorized assessments: live radar output, realm discovery, detect vs takeover, interactive...

CVE-2019-19609

Strapi CMS Exploit This exploit targets two vulnerabilities in the Strapi CMS Framework version 3.0.0-beta-17.4 allowing for unauthenticated remote code execution RCE. Vulnerabilities CVE-2019-18818 Weak Password Recovery Mechanism for Forgotten Password CVSS : 9.8 - Critical More details:...