bitcracker

BitCracker BitCracker es la primera herramienta de código abierto para descifrar contraseñas de dispositivos de almacenamiento Disco Duro, Pendrive USB, tarjeta SD, etc... cifrados con BitLocker, una función de cifrado disponible en Windows Vista, 7, 8.1 y 10 ediciones Ultimate, Pro y Enterprise...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

kerberoast

kerberoast Kerberoast es una serie de herramientas para atacar implementaciones de MS Kerberos. A continuación se presenta una breve descripción de lo que hace cada herramienta. Extraer todas las cuentas en uso como SPN usando herramientas integradas de MS root@kitploit: PS C:\ setspn -T medin -Q...

cve-2019-17240

Bludit = 3.9.22 - Bypass de Mitigación de Fuerza Bruta Este es un pequeño proyecto donde reescribo este script de Python en Golang. El propósito de este proyecto era aprender Golang y entender cómo funciona este exploit. Uso root@kitploit: $ ./brutepass -sdasds flag provided but not defined:...

artemis2hashcat

artemis2hashcat Description Python3 implementation for converting Artemis PBKDF2WithHmacSHA1 hashes to hashcat format Usage The default configuration for Apache Artemis is to use the DefaultSensitiveStringCodec in order to store user passwords as PBKDF2WithHmacSHA1 hashes in the...

Hob0Rules

Hob0Rules Reglas de cracking de contraseñas para Hashcat basadas en estadísticas y patrones de la industria. Las siguientes publicaciones de blog sobre contraseñas explican la importancia estadística de estos conjuntos de reglas: Statistics Will Crack Your Password Praetorian Password Cracking...

kraker

Acerca de Configuración Servidor Configuración Agente Configuración Compilar desde el código fuente Usar la versión precompilada Contactos Acerca de Kraker es un sistema distribuido de fuerza bruta de contraseñas que te permite ejecutar y gestionar hashcat en diferentes servidores y estaciones de...

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

DEBIAN-CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

cisco-SNMP-enumeration

Cisc0wn - Cisco SNMP Script Cisco SNMP enumeration, brute force, config downloader and password cracking script. Tested and designed to work against Cisco IOS Switches and Routers. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton ...

libmongoc SCRAM client nonce-validation bypass

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

CVE-2026-93394

libmongoc (MongoDB C driver) contains a flaw in its SCRAM authentication implementation where the client continues the handshake and transmits the client proof even after detecting a nonce mismatch in the server's first message. An attacker with a man-in-the-middle position can inject a crafted s...

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

EUVD-2026-82438

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

ZipRarHunter

ZipRarHunter ZipRarHunter es una potente herramienta de hacking ético de línea de comandos diseñada para descifrar contraseñas de archivos ZIP y RAR utilizando una lista de palabras. Automatiza el proceso de recuperación de contraseñas de archivos cifrados. Características Descifrado de archivos...

CMS-Made-Simple-2.2.9-CVE-2019-9053

Descargo de responsabilidad Este repositorio proporciona un exploit compatible con Python 3 dirigido a una vulnerabilidad de inyección SQL no autenticada en CMS Made Simple versiones 2.2.9 y anteriores. La falla, rastreada como CVE-2019-9053, permite a los atacantes extraer datos sensibles del...

Radmin3-Password-Cracker

Radmin Server 3 Dumper/Cracker For more context about this tool, see https://www.synacktiv.com/publications/cracking-radmin-server-3-passwords.html ! How to use : Step 1 : Recover Radmin Server 3 user information from HKEYLOCALMACHINE\SOFTWARE\WOW6432Node\Radmin\v3.0\Server\Parameters\Radmin...

koyane-framework

Koyane-Framework :: kit de forja y análisis de listas de palabras Etapa temprana root@kitploit: | | / /| |\ \ / / / \ | \ | || | | || \ / \ | / || || | | || || | | / / | |/ / | | | | \ V / / /\ | | || | | | | |/ // /\ | . . || | | | | || | | || |/ /| |/ / | \ | | | | \ / | || . || | ||| | | /...

ZipCracker

ZipCracker ZipCracker es una utilidad de fuerza bruta de contraseñas, simple pero potente, para descifrar archivos ZIP protegidos por contraseña. Está construido con Qt e integra un motor de descifrado personalizado, con soporte tanto para CLI como para GUI. ⚡ Aviso legal: Esta herramienta está...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...