29496 matches found
pythem
pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...
python-tuf
Ein Framework zur Sicherung von Software-Update-Systemen The Update Framework TUF ist ein Framework für sichere Inhaltsauslieferung und Updates. Es schützt vor verschiedenen Arten von Lieferkettenangriffen und bietet Widerstandsfähigkeit gegenüber Kompromittierung. Dieses Repository ist eine...
hcxtools
hcxtools Eine kleine Sammlung von Werkzeugen, um Pakete aus Mitschriften in Hash-Dateien zur Verwendung mit Hashcat oder John the Ripper zu konvertieren. Diese Werkzeuge sind 100% kompatibel mit Hashcat und John the Ripper und werden von Hashcat empfohlen. Kurzbeschreibung Der Hauptzweck von...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
wifipumpkin3
Wifipumpkin3 Potente framework per attacchi con punti di accesso rogue. Panoramica wifipumpkin3 è un potente framework per attacchi con punti di accesso rogue, scritto in Python, che consente e offre a ricercatori di sicurezza, red teamer e reverse engineer di montare una rete wireless per condur...
Internal-Monologue
Attacco Internal Monologue: Recupero degli Hash NTLM senza Toccando LSASS Introduzione Mimikatz, sviluppato da Benjamin Delpy @gentilkiwi, è uno strumento di post-exploitation ben noto, che consente agli avversari di estrarre password in testo chiaro, hash NTLM e ticket Kerberos dalla memoria,...
evilgophish
Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
evilginx2
Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...
CVE-2026-81034
Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...
CVE-2026-75896
creationtimestamp| type| source ---|---|--- 2026-08-26 16:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtypdmphpk2t 2026-08-26 18:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywfhaslu2c...
CVE-2026-54511
creationtimestamp| type| source ---|---|--- 2026-08-26 16:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtypd6wfhc2t 2026-08-26 16:35:13+00:00| published-proof-of-concept| https://github.com/dahlia/logtape/security/advisories/GHSA-8h6h-x5pq-56fq...
CVE-2026-54548
kas is a setup tool for bitbake-based projects. Prior to version 5.4 , when internal SSH key setup is triggered via SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE and no user-specific SSH configuration exists, the function ssh_no_host_key_check() in kas/libcmds.py creates ~/.ssh/config with a global Hos...
CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement
kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...
rulesfinder
rulesfinder Regole di mangling delle password apprese tramite machine learning! Questo strumento trova regole di mangling delle password efficienti per John the Ripper o Hashcat per un dato dizionario e un elenco di password. Lo strumento è attualmente di qualità alpha. In breve Per compilare...
CVE-2026-74932
creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtybw3pt6m2u...
CVE-2026-65081
creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtybvuxytq2o...
EUVD-2026-66410
The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the processotplogin function. This makes it possible for unauthenticated...