orbitaldump

OrbitalDump Una herramienta simple de fuerza bruta SSH distribuida y multi-hilo escrita en Python. Cómo funciona Cuando el script se ejecuta sin la opción --proxies, actúa como cualquier otro script de fuerza bruta SSH multi-hilo. Cuando se añade la opción --proxies, el script obtiene una lista...

mec

mec MassExploitConsole Destinado a la explotación masiva Sigue lawiki para comenzar Características Interfaz CLI fácil de usar Ejecuta exploits adaptados con concurrencia a nivel de procesos Exploits integrados automatizados Oculta tu IP usando proxychains4 y proxypool Escaneo de hosts ZoomEye 10...

Shreder

Shreder Shreder es una potente herramienta de fuerza bruta de contraseñas para el protocolo SSH multihilo. Características Adivinación de contraseñas muy rápida, solo una contraseña en 0.1 segundos. Optimizado para listas de contraseñas grandes, Shreder prueba 1000 contraseñas en 1 minuto y 40...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

RedLogin

RedLogin Red Login: Herramientas de fuerza bruta SSH Características: Alta velocidad y precisión CLI basado en consola Ejecutar un comando arbitrario después de que el ataque sea exitoso por defecto 'Uname -a' Soporte de mensajero de Telegram para enviar informes a través de la API del bot Uso:...

cbrutekrag

cbrutekrag Pruebas de penetración en servidores SSH mediante ataques de diccionario. Escrito en C. brute krag significa "fuerza bruta" en afrikáans Descargo de responsabilidad Esta herramienta es solo para fines de pruebas éticas. cbrutekrag y sus propietarios no se hacen responsables por el uso...

cybersecurity_portfolio

Portfolio. Gleb Usoltsev Second-year student, Institute of Computer Science and Cybersecurity, Peter the Great St. Petersburg Polytechnic University, field of study 10.03.01 «Information Security». As part of the educational introductory practice at Positive Technologies JSC, two practical cases...

ssh-honeypot-research

🍯 Honeypot SSH — Investigación e Inteligencia de Amenazas Un honeypot Cowrie de interacción media desplegado en un VPS Linux alquilado con internet pública, diseñado para atraer, registrar y analizar tráfico real de fuerza bruta SSH. Durante una ventana de captura de 8 días, el sensor registró...

buffalo

Buffalo A Python 3 script to execute dictionary/wordlist attacks on a target SSH server using two text files as input. Authored for the purposes of my Intel technical screening. Installation This script depends on Paramiko and Colorama. Install the dependencies via pip install -r requirements.txt...

SecureOps-Lab

SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...

netsec-project

Nombre del Proyecto Script de ataque CVE-2021-22555 Descripción Este proyecto es una herramienta de ataque automático implementada en Python. Realiza varias pruebas de seguridad y ataques en un sistema objetivo que ejecuta Ubuntu 20.04 con la versión del kernel 5.8.0-48. La herramienta incluye...

siem-threat-detection-lab

🛡️ SIEM + Threat Detection Lab An end-to-end blue-team lab: a Wazuh 4.7.5 SIEM detecting 7 simulated attacks — from port scanning and SSH brute force to a real CVE exploit Slowloris DoS — with every event logged, alerted, and mapped to MITRE ATT &CK in real time. Built from scratch on two virtual...

cve-2026-8697

CVE-2026-8697: Omisión del Límite de Tasa de Inicio de Sesión en TP-Link Archer C64 CVE-2026-8697 es un fallo lógico en el sistema operativo del TP-Link Archer C64 llamado TPOS en el mensaje de depuración. Permite a cualquier usuario no privilegiado conectado al router omitir el límite de tasa de...

CVE-2026-47831

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98...

CVE-2026-8697 Improper Authentication Rate Limiting on TP-Link's Archer C64

Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to brute-force valid credentials via SSH. Successful...

CVE-2025-35021 Abilis CPX Fallback Shell Connection Relay

By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections...

EUVD-2005-2873

Malware in sbrugna...

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining botnet called Outlaw aka Dota that's known for targeting SSH servers with weak credentials. "Outlaw is a Linux malware that relies on SSH brute-force attacks, cryptocurrency mining, and worm-like propagation ...

New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit

The cryptojacking operation known as TeamTNT has likely resurfaced as part of a new campaign targeting Virtual Private Server VPS infrastructures based on the CentOS operating system. "The initial access was accomplished via a Secure Shell SSH brute force attack on the victim's assets, during whi...

FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network

The threat actor behind a peer-to-peer P2P botnet known as FritzFrog has made a return with a new variant that leverages the Log4Shell vulnerability to propagate internally within an already compromised network. "The vulnerability is exploited in a brute-force manner that attempts to target as ma...