76399 matches found
stegcrack
Stegcrack Stegcrack is an open-source program for exploiting a vulnerability in Steghide specifically CVE-2021-27211. Stegcrack detects whether a given file contains data hidden with Steghide, and can sometimes fully extract the hidden data, all with no password. Installation Clone this repositor...
scan4all
π¬ READMEδΈζ β’ Compilar/Instalar/Ejecutar β’ DescripciΓ³n de ParΓ‘metros β’ CΓ³mo usar β’ Escenario β’ Lista de POCs β’ Escaneo Personalizado β’ Mejores PrΓ‘cticas CaracterΓsticas Netcat web gratuito de un solo ID para mΓΊltiples objetivos reverse shell QuΓ© es scan4all: integra vscan, nuclei, ksubdomain,...
PyLadon
Ladon Scanner For Python PyLadon Currently, the Python version has fewer features and cannot match Ladon.exe in performance or speed on either Windows or Linux systems. Its only advantage is cross-platform support; related features will be added later. The obvious drawback is that the packaged...
seccubus
About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...
SSOh-No
SSOh-No Esta herramienta estΓ‘ diseΓ±ada para enumerar usuarios, realizar rociado de contraseΓ±as y ataques de fuerza bruta contra cualquier organizaciΓ³n que utilice Azure AD u O365. Generalmente, este endpoint proporciona errores extremadamente detallados que pueden aprovecharse para enumerar...
CVE-2024-48887-FortiSwitch-Exploit
CVE-2024-48887-FortiSwitch-Exploit π¨ FortiSwitch CVE-2024-48887 PoC JavaScript π¨ π₯ Just dropped a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints. π οΈ About the Vulnerability: An attacker can craft a simpl...
bramble
Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...
Grafana-Decryptor-for-CVE-2021-43798
Grafana Decryptor for CVE-2021-43798 This script decrypts the DataSource passwords from a Grafana instance vulnerable to CVE-2021-43798, which allows unauthorized arbitrary file reading. Description Grafana versions 8.0.0-beta1 through 8.3.0 are vulnerable to a directory traversal vulnerability...
ResetNightmare
ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...
LDAP-Password-Hunter
LDAP Password Hunter It happens that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py Impacket and ldapsearch in order to lo...
EUVD-2026-85287
A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...
Cr3dOv3r
Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...
cisco7crack
cisco7crack crypt and decrypt the cisco enable 7 passwords...
password_generator
PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes...
CVE-2018-13382
CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to...
CVE-2024-5009
CVE-2024-5009 PoC for Progress WhatsUp Gold SetAdminPassword Privilege Escalation CVE-2024-5009 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ Usage root@kitploit: python3 CVE-2024-5009....
keeweb
Password Manager KeeWeb Password Managerπ KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in...
keeweb
Gestor de contraseΓ±as KeeWeb Gestor de ContraseΓ±asπ KeeWeb es un gestor de contraseΓ±as para navegador y escritorio que es capaz de abrir archivos de bases de datos kdbx existentes de KeePass, o crear nuevas bΓ³vedas para almacenar tus credenciales importantes...
TeamFiltration
TeamFiltration TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 EntraID accounts. See the TeamFiltration wiki page for an introduction into how TeamFiltration works and the Quick Start Guide for how to get up and running! This tool has bee...
DEScrypt-CPU-Collision-Cracker
DEScrypt-CPU-Collision-Cracker What is DEScrypt-CPU-Collision-Cracker? A linux based high performance DEScrypt CPU cracker written in c++, it deduces the salt and uses a password list to crack hashes. Why not use a rainbow table? DEScrypt uses by default a two byte saltcomprised of characters...