decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

dbd

d8888b. d8888b. d8888b. 88 8D 88 8D 88 8D 88 88 88oooY' 88 88 88 88 88b. 88 88 88 .8D 88 8D 88 .8D Y8888D' Y8888P' Y8888D' Durandal's Backdoor Copyright C 2013 Kyle Barnthouse [email protected] dbd is distributed under the GNU GPL Mipsbe binary added by Darkerego https://github.com/darkerego...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

collisions

Hash collisions and exploitations By Ange Albertini and Marc Stevens. FAQ TL;DR Q: Is it possible to make a file get an arbitrary MD2/MD4/MD5/MD6/SHA1/SHA2/SHA3, or the same hash as another file? A: No. Q: Can one create 2 different files with the same hash? A: With MD5, in a few seconds on a...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC Proof-of-concept for CVE-2026-15013 : unauthenticated authentication bypass via SAML Signature Algorithm Confusion HMAC-SHA1 in the miniOrange SAML Single Sign On – SSO Login WordPress plugin versions up to and including 5.4.3. Authoriz...

ios_Restriction_PassCode_Crack---Python-version

ios Restriction PassCode Crack -Python version Overview ios Restriction PassCode Cracker , this version of the application is written with Python programming language,which is used to crack the Restriction PassCode of iphone/ipad. iphone/ipad 访问限制密码破解 Methodthe same as C version bruce crack 1 .ge...

CVE-2026-121368

On affected platforms running Arista EOS with Bidirectional Forwarding Detection BFD configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency direct or multi-hop to a BFD-enabled interface can send a specially crafted BFD packet resulting in a...

CVE-2026-121368 Security Advisory 0206

On affected platforms running Arista EOS with Bidirectional Forwarding Detection BFD configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency direct or multi-hop to a BFD-enabled interface can send a specially crafted BFD packet resulting in a...

EUVD-2026-122818

On affected platforms running Arista EOS with Bidirectional Forwarding Detection BFD configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency direct or multi-hop to a BFD-enabled interface can send a specially crafted BFD packet resulting in a...

CVE-2026-121368

Platforms running Arista EOS are vulnerable to a system reboot via a CWE-787 (Out-of-bounds Write) . This occurs when Bidirectional Forwarding Detection (BFD) is configured to use keyed MD5 or keyed SHA1 authentication. An unauthenticated attacker with network adjacency (direct or multi-hop) to a...

PT-2026-144648

On affected platforms running Arista EOS with Bidirectional Forwarding Detection BFD configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency direct or multi-hop to a BFD-enabled interface can send a specially crafted BFD packet resulting in a...

CVE-2026-125105 Wagtail: Identification of documents by SHA1 hash

Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, Wagtail applies ETag conditional request processing to the document serve endpoint before document permission and filename checks complete. An unauthenticated attacker who knows a docume...

CVE-2026-125105 Wagtail: Identification of documents by SHA1 hash

Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, Wagtail applies ETag conditional request processing to the document serve endpoint before document permission and filename checks complete. An unauthenticated attacker who knows a docume...

CVE-2026-125105 Wagtail: Identification of documents by SHA1 hash

Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, Wagtail applies ETag conditional request processing to the document serve endpoint before document permission and filename checks complete. An unauthenticated attacker who knows a docume...

PwnedPasswordsChecker

PwnedPasswordsChecker PwnedPasswordsChecker is a tool that checks if the hash of a known password in SHA1 or NTLM format is present in the list of I Have Been Pwned leaks and the number of occurrences. You can download the hash-coded version for SHA1 here or the hash-coded version for NTLM here...

CVE-2026-13576

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with hmacsha1sum from Mojo::Util with no key, a single fast SHA-1 HMAC. There is no salt, so equal passwords give equal hashes, and no work factor slows down guessing. An attacker w...

EUVD-2026-113913

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with hmacsha1sum from Mojo::Util with no key, a single fast SHA-1 HMAC. There is no salt, so equal passwords give equal hashes, and no work factor slows down guessing. An attacker w...

CVE-2026-13576 CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with hmacsha1sum from Mojo::Util with no key, a single fast SHA-1 HMAC. There is no salt, so equal passwords give equal hashes, and no work factor slows down guessing. An attacker w...

CVE-2026-13576

The CallBackery Perl software, in versions before 0.62.0 , is vulnerable to weak password storage. The application uses the hmac_sha1_sum() function from Mojo::Util to hash user passwords without a key, salt, or work factor. Because the HMAC-SHA1 hashes are unsalted and computationally fast, an a...