orbitaldump

OrbitalDump Pythonで書かれたシンプルなマルチスレッド分散SSHブルートフォースツール。 仕組み スクリプトが --proxies スイッチなしで実行されると、他のマルチスレッドSSHブルートフォーススクリプトと同様に動作します。--proxies スイッチを追加すると、スクリプトは ProxyScrape から（通常数千の）SOCKS4プロキシのリストを取得し、すべてのブルートフォース攻撃をSOCKS4プロキシ経由で実行するため、ブルートフォース試行がターゲットホストによってレート制限される可能性が低くなります。 インストール OrbitalDump は pip...

cbrutekrag

cbrutekrag SSHサーバーへの辞書攻撃による侵入テスト。Cで書かれています。 brute krag はアフリカーンス語で「ブルートフォース」を意味します 免責事項 このツールは倫理的なテスト目的でのみ使用してください。 cbrutekrag とその所有者は、ユーザーによる不正使用について責任を負いません。 ユーザーは現地の法律に従って行動する必要があります。 実行方法 root@kitploit: $ cbrutekrag -h | | | | | | | | | | | | / || ' | '| | | | / \ |/ / '/ |/ | | | | | | | || |...

Shreder

Shreder Shreder 是一款强大的多线程 SSH 协议密码暴力破解工具。 特性 极速密码猜测，每 0.1 秒可尝试一个密码。 针对大型密码列表优化，Shreder 在 1 分 40 秒内可尝试 1000 个密码。 简单的 CLI 和 API 使用方式。 安装 root@kitploit: pip3 install git+https://github.com/EntySec/Shreder 基本用法 只需在终端中键入 shreder 即可使用。 root@kitploit: usage: shreder -h -p PORT -u USERNAME -l LIST -d DEL...

RedLogin

RedLogin Red Login: Strumenti di Brute-force SSH Caratteristiche: Alta velocità e precisione CLI basata su console Esegui un comando arbitrario dopo un attacco riuscito predefinito 'Uname -a' Supporto Telegram per l'invio di report tramite bot API Utilizzo: Redlogin.exe Opzionale —telegram ==...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

mec

mec MassExploitConsole Progettato per lo sfruttamento di massa Segui lawiki per iniziare Caratteristiche Interfaccia CLI facile da usare Esegui exploit adattati con concorrenza a livello di processo Exploit integrati automatici Nascondi il tuo IP usando proxychains4 e proxypool Scansione host...

cybersecurity_portfolio

Portfolio. Gleb Usoltsev Studente del 2° anno, Istituto di Informatica e Cybersecurity, SPbPU Pietro il Grande, indirizzo 10.03.01 «Sicurezza informatica». Nell'ambito del tirocinio formativo introduttivo presso JSC «Positive Technologies», sono stati svolti due casi pratici. Di seguito la loro...

cve-2026-8697

CVE-2026-8697: Bypass del limite di tentativi di accesso su TP-Link Archer C64 CVE-2026-8697 è un difetto logico nel sistema operativo del TP-Link Archer C64 chiamato TPOS nel messaggio di debug. Consente a qualsiasi utente non privilegiato connesso al router di aggirare il limite di tentativi...

siem-threat-detection-lab

🛡️ SIEM + Bedrohungserkennungslabor Ein durchgängiges Blue-Team -Labor: eine Wazuh 4.7.5 -SIEM erkennt 7 simulierte Angriffe — vom Portscan und SSH-Brute-Force bis hin zu einem echten CVE-Exploit Slowloris-DoS — wobei jedes Ereignis protokolliert, alarmiert und in Echtzeit auf MITRE ATT &CK...

ssh-honeypot-research

🍯 Honeypot SSH — Ricerca e Threat Intelligence Un honeypot Cowrie a interazione media distribuito su un VPS Linux pubblico a noleggio, progettato per attrarre, registrare e analizzare il traffico SSH brute-force reale. In una finestra di acquisizione di 8 giorni il sensore ha registrato 37.477...

buffalo

Buffalo Uno script Python 3 per eseguire attacchi dizionario/wordlist su un server SSH target utilizzando due file di testo come input. Scritto ai fini del mio technical screening Intel. Installazione Questo script dipende da Paramiko e Colorama. Installa le dipendenze tramite pip install -r...

SecureOps-Lab

SecureOps Lab - Live-Cybersicherheitsbewertung Übersicht Es wurde eine Live-Cybersicherheitsbewertung auf einem Linux-Server einer Universität durchgeführt. Während der Analyse wurden aktive Angriffsaktivitäten identifiziert, darunter Brute-Force-Authentifizierungsversuche und Exploit-Versuche...

netsec-project

Nome del Progetto Script di attacco CVE-2021-22555 Descrizione Questo progetto è uno strumento di attacco automatico implementato in Python. Esegue vari test di sicurezza e attacchi su un sistema target che esegue Ubuntu 20.04 con versione del kernel 5.8.0-48. Lo strumento include funzionalità co...

CVE-2026-47831

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98...

CVE-2026-8697 Improper Authentication Rate Limiting on TP-Link's Archer C64

Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to brute-force valid credentials via SSH. Successful...

CVE-2025-35021 Abilis CPX Fallback Shell Connection Relay

By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections...

EUVD-2005-2873

Malware in sbrugna...

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining botnet called Outlaw aka Dota that's known for targeting SSH servers with weak credentials. "Outlaw is a Linux malware that relies on SSH brute-force attacks, cryptocurrency mining, and worm-like propagation ...

New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit

The cryptojacking operation known as TeamTNT has likely resurfaced as part of a new campaign targeting Virtual Private Server VPS infrastructures based on the CentOS operating system. "The initial access was accomplished via a Secure Shell SSH brute force attack on the victim's assets, during whi...

FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network

The threat actor behind a peer-to-peer P2P botnet known as FritzFrog has made a return with a new variant that leverages the Log4Shell vulnerability to propagate internally within an already compromised network. "The vulnerability is exploited in a brute-force manner that attempts to target as ma...