dcipher

dcipher 使用在线彩虹表和查找表攻击服务解密哈希。 安装 root@kitploit: ❯❯❯ npm install dcipher 用法 root@kitploit: const dcipher = require'dcipher'; dcipher'21232f297a57a5a743894a0e4a801fc3'.thenplaintext = console.logplaintext; //= 'admin' ; dcipher'8843d7f92416211de9ebb963ff4ce28125932878'.thenplaintext =...

rainbowcrackalack

Rainbow Crackalack 作者：Joe Testa @therealjoetesta 关于 本项目提供开源代码，用于生成彩虹表，并利用它们查找密码哈希值。虽然当前版本仅支持NTLM，但未来版本可能支持MD5、SHA-1、SHA-256等。同时支持Linux和Windows！ 更多信息请访问项目网站：https://www.rainbowcrackalack.com/ NTLM 表格 NTLM 8字符表（有效率达93%）可通过BitTorrent免费下载：https://www.rainbowcrackalack.com/rainbowcrackalackntlm8.torre...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

dcipher-cli

dcipher-cli 使用在线彩虹表和查找表攻击服务破解哈希，就在你的终端中。 安装 root@kitploit: ❯❯❯ npm install -g dcipher-cli 使用 root@kitploit: ❯❯❯ dcipher --help Crack hashes using online rainbow & lookup table attack services, right from your terminal. Usage ❯❯❯ dcipher ❯❯❯ echo | dcipher Options -p, --plain Display output withou...

ophcrack

OPHCRACK 3.6.0（时间-内存权衡破解） 一款基于更快时间-内存权衡（使用彩虹表）的 Windows 密码破解器。 这是最初由 EPFL 开发的 ophcrack 1.0 的演进版本 http://lasecwww.epfl.ch/oechslin/projects/ophcrack Ophcrack 3.6.0 附带一个 Qt 图形用户界面，可在 Windows、Mac OS X 以及 Unix 上运行。 获取和安装 OPHCRACK Ophcrack 3.6.0 可从 sourceforge 下载： http://ophcrack.sourceforge.net Windo...

hashcobra

hashcobra hashcobra 哈希破解工具。 描述 本工具采用新方法破解哈希值。 借助彩虹表概念，该工具从字典文件生成彩虹表， 从而大幅优化破解过程。 用法 root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==-- 用法: hashcobra -o 选项 | 杂项 选项: -a - 哈希算法 默认: md5 - ? 列出可用算法 -c - 压缩算法 默认: zstd - ? 列出可用算法 -h - 要破解的哈希值 -r - 彩虹表路径 默认: hashcobra.db -d - 字典文件路径 -o -...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

SHA256-CDP

SHA256-CDP：循环数字和投影（Cyclic Digit-sum Projection） 基于CDP结构分析框架的SHA-256 GPU加速彩虹表实现。 基于CDP论文（DOI：10.5281/zenodo.20627240）的研究成果，本仓库提供了CDP彩虹链表的完整、可工作实现，包含OpenCL构建内核和针对AMD RDNA4硬件的Vulkan计算查询/验证管线。 什么是CDP？ CDP（循环数字和投影）是SHA-256的一种结构分析框架，揭示了哈希函数输出分布中先前未记录过的数学性质。 核心发现：任何SHA-256输出的十六进制数字和 WH，当通过 fw =...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

CVE-2021-36934

CVE-2021-36934 SeriousSAM自动利用工具 要求 HiveNightmare，可执行文件或等效的DLL（DLL等效需要通过rundll32运行，需要对代码进行一些修改，这在遇到applocker环境时很有用。） dump.exe m，这是一个由pyinstaller编译的secretsdump.py，因此体积很大，因为它包含了所有模块和Python本身。（你不需要将其作为DLL的原因是你也可以选择在服务器端调用它以及hashcat API，这实际上会更有效且更隐蔽。） hashcat API，这是我制作的一个PHP...

pe_tree

PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...

CVE-2026-81717

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

EUVD-2026-67067

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81717

openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in its portable USB drive feature, whose threat model assumes an attacker with physical write access to the drive. First, USBDriveCreator._verify_integrity_file validates only files listed in the manifest, so an at...

CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

Summary IBM Integrated Analytics System includes Magneto as an internal resource manager component. CVE-2025-36271 affects the resmgr.py module in Magneto, where a predictable salt value is used in cryptographic operations. The use of a predictable salt weakens the effectiveness of hashing and...

CVE-2026-53692 Weak hashing algorithm in Redeight CMS

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials...

CVE-2026-53692 Weak hashing algorithm in Redeight CMS

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials...