Aegis

Aegis Authenticator Aegis Authenticator ist eine kostenlose, sichere und quelloffene 2FA-App für Android. Sie zielt darauf ab, einen sicheren Authenticator für Ihre Online-Dienste bereitzustellen und enthält gleichzeitig einige Funktionen, die in vorhandenen Authenticator-Apps fehlen, wie...

proxmark3

Iceman Fork - Proxmark3 The Proxmark3 is the swiss-army tool of RFID, allowing for interactions with the vast majority of RFID tags on a global scale. Originally built by Jonathan Westhues, the device is now the goto tool for RFID Analysis for the enthusiast. Iceman repository is considered to be...

CVE-2026-45332-PoC

CVE-2026-45332 : Contrôle d'accès défaillant dans Automad CMS Preuve de concept pour CVE-2026-45332 , une vulnérabilité de contrôle d'accès défaillant dans Automad CMS qui permet à tout attaquant non authentifié de récupérer le hash bcrypt du mot de passe et le secret TOTP de chaque compte...

CVE-2021-22911-RocketChat

CVE-2021-22911 — Rocket.Chat 3.12.1 RCE Improvised Beschreibung Nutzt eine Pre-Auth-NoSQL-Injection-Schwachstelle in Rocket.Chat 3.12.1 aus, um das TOTP-Geheimnis des Administrators und das Passwort-Reset-Token zu erlangen, das Admin-Konto zu übernehmen und über eine bösartige Webhook-Integration...

totp-ssh-fluxer

Fluxo de porta SSH com TOTP Algumas pessoas alteram a porta SSH em seus servidores para dificultar um pouco a localização por bots ou outras ameaças, e embora isso seja geralmente visto como uma ação de segurança por obscuridade, funciona muito bem para eliminar muitos dos logins automatizados qu...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

CVE-2026-78655

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2026-78619

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...

CVE-2026-78655

Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...

CVE-2026-78655 Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2026-78619

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...

CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...

hotpot

Hotpot 🍲 Authy / Google Authenticator per la riga di comando. Hotpot è uno strumento da riga di comando semplice e sicuro per gestire i codici di autenticazione a due fattori basati su TOTP. Hotpot archivia in modo sicuro i tuoi segreti 2FA nel portachiavi di sistema e genera password monouso...

about_cobaltstrike4.5_cdf

aboutcobaltstrike4.5cdf Crack der Version cobaltstrike4.5, Entfernen der checksum8-Signatur, Umgehung von BeaconEye, Behebung des Stage-Leaks über falsche Pfade, Hinzufügen der TOTP-Zwei-Faktor-Authentifizierung, Behebung von CVE-2022-39197 usw. Wenn Sie nach diesem Projekt suchen:...

totp-ssh-fluxer

TOTP SSH port fluxing Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties, and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in...

Malicious code in secret-key-totp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...

cobaltstrike4.5_cdf-1

cobaltstrike4.5cdf Crack della versione 4.5 di cobaltstrike, rimozione delle caratteristiche checksum8, bypass di BeaconEye, correzione della perdita di stage tramite percorsi errati, aggiunta dell'autenticazione a due fattori TOTP, aggiunta della visualizzazione del nome utente crittografato,...

joombrute

JoomBrute Toolkit moderno per attacchi di autenticazione Joomla J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 Descrizione Toolkit per attacchi alle credenziali Joomla che copre le versioni CMS 3, 4 e 5. Sei sottocomandi gestiscono l'intera catena di attacco end-to-end: detect -...

TOTPAuthenticate

TOTP Authenticate ============================ Verwendet Sitzungsbehandlungsregeln, um ausgehenden Anfragen ein TOTP-Token hinzuzufügen. Für Burp Suite Enterprise Edition Bitte beachten Sie, dass Erweiterungen von Drittanbietern von Burp geschrieben werden und PortSwigger keine Gewähr für deren...

Malicious code in totp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cebaa0a3370c12104ef2816420193171f431df0d113fdc5d8c9f1dc921deeb5 Package advertises itself as a TOTP utility but its postinstall script node./index.js --setup 2/dev/null || true and its exported validateSecret API...