desktop-2fa

🛡️ Desktop-2FA 데스크톱 환경을 위한 안전한 오프라인 2단계 인증2FA 관리자입니다. Python으로 제작되었으며, 강력한 암호화를 제공하고 클라우드 의존성이 없습니다. 🌐 랜딩 페이지 : desktop-2fa.org ✨ 기능 기능| 설명 ---|--- 🔐 볼트 보안| Argon2id 키 파생과 함께 AES-256-GCM 암호화 ⏱️ TOTP 생성| RFC 6238 호환 코드 생성 💻 전체 CLI| 토큰 관리를 위한 완전한 명령줄 인터페이스 📋 클립보드 지원| TOTP 코드를 클립보드에 자동 복사 🔓 무상태 설계| 모든...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

Bypass della 2FA tramite attacco di forza bruta Panoramica L'applicazione Nagios Fusion versioni 2024R1.2 e 2024R2 è vulnerabile a un attacco di forza bruta sul meccanismo di autenticazione a due fattori 2FA. In particolare, l'implementazione della 2FA non applica adeguatamente meccanismi di...

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security do WordPress - Bypass de Autenticação 📌 Visão Geral CVE-2024-10924 é uma vulnerabilidade crítica de bypass de autenticação no plugin Really Simple Security para WordPress versões 9.0.0 a 9.1.1.1. Esta vulnerabilidade permite que atacantes...

wordpress-really-simple-security-authn-bypass-exploit

wordpress-really-simple-security-authn-bypass-exploit Questo è un programma Python3 che sfrutta la vulnerabilità di bypass dell'autenticazione di Really Simple Security 9.1.2 CVE-2024-10924. DICHIARAZIONE DI NON RESPONSABILITÀ Questo strumento è destinato a ingegneri della sicurezza e a...

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 Bypass MFA WordPress - Laboratorio Exploit Questo repository fornisce un laboratorio per sfruttare la vulnerabilità CVE-2024-10924 in WordPress, in particolare per bypassare two-factor authentication MFA e ottenere l'accesso al pannello di amministrazione di WordPress. Prerequisiti...

Aegis

Aegis Authenticator Aegis Authenticator ist eine kostenlose, sichere und quelloffene 2FA-App für Android. Sie zielt darauf ab, einen sicheren Authenticator für Ihre Online-Dienste bereitzustellen und enthält gleichzeitig einige Funktionen, die in vorhandenen Authenticator-Apps fehlen, wie...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

BIT-KEYCLOAK-2025-3910 Org.keycloak.authentication: two factor authentication bypass

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application Questa è un'applicazione vulnerabile per testare l'exploit del bypass di autenticazione di Really Simple Security 9.1.2 CVE-2024-10924. ATTENZIONE! Questa applicazione contiene gravi vulnerabilità di sicurezza. Eseguila a tuo...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security फ्री, प्रो, और प्रो मल्टीसाइट 9.0.0 - 9.1.1.1 - प्रमाणीकरण बाईपास 📖 विवरण यह स्क्रिप्ट WordPress के लिए Really Simple Security प्लगइन संस्करण 9.0.0 - 9.1.1.1 में एक कमजोरी का शोषण करती है। यह दोष टू-फैक्टर प्रमाणीकरण API में checkloginandgetuser फ़ंक्...

CVE-2026-59799

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

CVE-2026-59799 Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

EUVD-2026-63841

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

CVE-2026-62666

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, Grav API plugin UsersController::createApiKey, generate2fa, and disable2fa omit the accessGrantsSuper target check used by sibling user mutation endpoints. A non-super account...

CVE-2026-62669

Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task checks only that the pending-session user exists rather than requiring $user-authorized. After submitting a victim's correct password, an attacker can...

EUVD-2026-62544

Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task accepts a top-level GET request through the TaskServiceProvider task: URI parameter without requiring a login-form nonce, an Origin check, or a Referer...

CVE-2026-62669 Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task checks only that the pending-session user exists rather than requiring $user-authorized. After submitting a victim's correct password, an attacker can...

EUVD-2026-62540

Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task checks only that the pending-session user exists rather than requiring $user-authorized. After submitting a victim's correct password, an attacker can...