CVE-2021-29156

CVE-2021-29156 Proof-of-Concept c 2021 GuidePoint Security Charlton Trezevant [email protected] Background Today GuidePoint is pleased to release a functional Proof-of-Concept tool for CVE-2021-29156, an LDAP injection vulnerability in ForgeRock OpenAM v13.0.0. This vulnerability allows an...

Probable-Wordlists

Probable Wordlists - Version 2.0 Do you know what the world's most common passwords are? Do you know what they look like? You'll want to avoid them to be secure! Thinking of Cloning? This repository does not contain code, but links to a group of lists. A clone may not be necessary to get the file...

password-generator

Generador de Contraseñas Para BruteForce o Crackeo/Comparación de Md5 root@kitploit: $ php password-generator --info="victim name,victim surname , victim age , victim email" --info Obtener toda la información de la víctima. --path El área donde se guardará el archivo opcional. --md5 Las...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

wifi-password

wifi-password Obtén rápidamente tu contraseña WiFi y, si es necesario, genera un código QR de tu WiFi para que los teléfonos puedan conectarse fácilmente. Funciona en macOS , Linux y Windows Instalación Instalar usando pip root@kitploit: $ python3 -m pip install --user wifi-password Instalar usan...

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip root@kitploit: $ python3 -m pip install --user wifi-password Install using git root@kitploit: $ git...

BruteLoops

BruteLoops Una biblioteca extremadamente simple que proporciona la lógica fundamental para ataques eficientes de fuerza bruta de contraseñas contra interfaces de autenticación. Documentación La documentación se puede encontrar aquí. Si buscas los antiguos módulos de ejemplo... Mira BFG. Los...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

SFPolDevChk

Salesforce Policy Deviation Checker Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Jerome Smith @exploresecurity With thanks to Stephen Tomkinson @neonbunny9 https://www.github.com/nccgroup/SFPolDevChk Released under AGPL - refer to LICENSE for more information...

hash-identifier

hash-identifier Software para identificar los diferentes tipos de hashes utilizados para cifrar datos y especialmente contraseñas. Formatos de cifrado soportados: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

Impost3r

Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...

ivantiunlocker

ivantiunlocker Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN Many security issues around SSL VPN devices recently. You can't feel safe anymore. And then there is CVE-2025-22457 ! Read the story behind it :...

SNMP-Brute

SNMP Brute Script de fuerza bruta SNMP, enumeración, descarga de configuración CISCO y descifrado de contraseñas. Escucha cualquier respuesta a las cadenas de comunidad de fuerza bruta, minimizando efectivamente el tiempo de espera. Requisitos metasploit snmpwalk snmpstat john the ripper Uso pyth...

CVE-2020-1472

CVE-2020-1472 Código de verificación y explotación para CVE-2020-1472, también conocido como Zerologon Comprueba si un controlador de dominio es vulnerable al ataque Zerologon. Si lo es, restablece la contraseña de la cuenta del controlador de dominio a una cadena vacía. NOTA: Es probable que est...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

PassMute

PassMute - Una herramienta de transformación/mutación de contraseñas Esta es una herramienta de línea de comandos escrita en Python que aplica una o más reglas de transformación a una contraseña dada o a una lista de contraseñas leídas de uno o más archivos. La herramienta se puede utilizar para...

CVE-2024-48887-Exploit

CVE-2024-48887-Unverified Password Change CWE-620 Overview An unverified password change vulnerability in Fortinet FortiSwitch GUI that allows a remote unauthenticated attacker to change admin passwords via a specially crafted request Exploit: Download here Details CVE ID : CVE-2024-48887 Publish...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Muchos módulos fueron escritos por David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licenciado bajo AGPLv3 ver archivo LICENSE Por favor, no lo utilices en organizaciones militares o de...

SecLists

About SecLists SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. The goal is to...