lykan

lykan Lykan 是一款用 C 语言编写的泄漏分析程序，可生成分析数据的可视化图表。它接收以 '\n' 分隔的原始密码文本转储作为输入，并提取转储的统计信息，包括常用密码、字符流行度等。Lykan 旨在帮助理解普通用户设置密码的心理和趋势，这些信息后续可用于防御性或进攻性的安全评估。 正在开发中 安装 要安装 lykan，只需在 shell 中运行以下命令： root@kitploit: $ git clone install https://github.com/michaeldim02/lykan && cd lykan/src $ sudo make install 依赖项...

EUVD-2025-34831

D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...

CVE-2025-34254

D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...

Xenomorph banking Trojan downloaded over 50,000 times from Play Store

Besides the name of the creature that “stars” in the Alien movies by 20th Century Fox, Xenomorph is also the name given to an Android banking Trojan. Researchers found this banking Trojan to be distributed on the official Google Play Store, with more than 50,000 installations. The researchers...

I-Mall Commerce - i-mall.cgi Remote Command Execution

I-Mall Commerce - i-mall.cgi Remote Command Execution I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1...