crauEmu

Mascot designed by@kottsarapkin crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks. Slides from ZeroNights 2019 Demo 1 - X32-64, Edge, rop-gadgets from pwnjs Demo 2 - ARM64, checkm8 callback-chain RopEditor Installation 1. Put the file crauEmu.py in same...

CVE-2026-78905-Facebook-Account-Takeover

CVE-2026-78905 — Meta-Phishing Facebook Graph API — OAuth Token Reuse & Session Hijacking...

Cr3dOv3r

Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...

EUVD-2026-76943

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

pentest_teamcity

Pentest TeamCity usando Metasploit TL;DR: Obtener contraseñas deJetBrains IDE como IntelliJ o PyCharm y usar esas credenciales dentro de TeamCity Continuous Integration Server para obtener una sesión de meterpreter en el servidor y agentes de compilación usando metasploit por Kacper Szurek...

whatsapp-census

¡Hola! Estás usando WhatsApp Este es el repositorio de GitHub para la versión extendida del artículo ¡Hola! Estás usando WhatsApp: Enumerando tres mil millones de cuentas para la seguridad y privacidad. Resumen WhatsApp, con 3.5 mil millones de cuentas activas a principios de 2025, es la platafor...

SocialPath

SocialPath Rastrea usuarios a través de plataformas de redes sociales Desanonimizando usuarios de la darknet mediante la reutilización de nombres de usuario Investigación n.º 2 en curso Servicios compatibles: Facebook Twitter + detalles Stackoverflow + detalles Instagram + detalles Reddit +...

ecdsa-private-key-recovery

ecdsa-key-recovery Perform ECDSA and DSA Nonce Reuse private key recovery attacks A cryptographic research tool for analyzing signature vulnerabilities Let's recover the private-key for two signatures sharing the same nonce k. Note how choosing the same nonce k results in both signatures having a...

faraday_plugins

Install root@kitploit: pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path root@kitploit: faraday-plugins list-plugins Test...

CVE-2024-41958-PoC

CVE-2024-41958-PoC Esta es una pequeña prueba de concepto para CVE-2024-41958. Es posible eludir la autenticación TFA en el panel de administración. Versiones afectadas: 2024-07 Requisitos previos necesarios para que funcione el CVE: Password y username para una cuenta sin TFA. Password y usernam...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

credmap

credmap: El Mapeador de Credenciales Credmap es una herramienta de código abierto creada para concienciar sobre los peligros de la reutilización de credenciales. Es capaz de probar las credenciales de usuario proporcionadas en varios sitios web conocidos para comprobar si la contraseña ha sido...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

fortinet-cve-2024-50562

Fortinet SSL-VPN Session Reuse Vulnerability CVE-2024-50562 Professional, permission-only scanner that proves whether a FortiGate invalidates session cookies after logout. A positive finding confirms CVE-2024-50562 — an Insufficient Session Expiration flaw CWE-613 that lets an attacker replay a...

CVE-2025-14269

CVE-2025-14269 Se descubrió un problema de seguridad en la versión dentro del clúster de Headlamp donde usuarios no autenticados pueden reutilizar credenciales en caché para acceder a la funcionalidad de Helm a través de la interfaz de usuario de Headlamp. Los clústeres de Kubernetes solo se ven...

CVE-2024-22243

CVE-2024-22243 Código utilizado de @SeanPesce...

ecdsa-private-key-recovery

ecdsa-key-recovery Perform ECDSA and DSA Nonce Reuse private key recovery attacks A cryptographic research tool for analyzing signature vulnerabilities Let's recover the private-key for two signatures sharing the same nonce k. Note how choosing the same nonce k results in both signatures having a...

CVE-2022-39227

CVE-2022-39227 CVE-2022-39227 : Proof of Concept Proof of concept for the CVE-2022-39227. According to this CVE, there is a flaw in the JSON Web Token verification. It is possible with a valid token to re-use its signature with modified claims. Required: 1. A valid JSON Web Token. 2. The backend...

CVE-2025-56643

CVE-2025-56643 Referencia pública para CVE-2025-56643 – Vulnerabilidad de sesión JWT en Wiki.js 2.5.307 Descripción: Requarks Wiki.js 2.5.307 no revoca ni invalida adecuadamente los tokens JWT activos cuando un usuario cierra sesión. Como resultado, los tokens emitidos previamente siguen siendo...