46 matches found
WordListGen
WordListGen Super Simple Python Word List Generator for Password Cracking Hashcat! I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script is fully...
wordlistgen
wordlistgen Generates target specific word lists by searching for endpoints in javascript and appends parameters for Fuzzing with other tools Version 1.0 Install $ go get -u github.com/ethicalhackingplayground/wordlistgen $ go get github.com/003random/getJS Generate wordlist $ echo...
lama
lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...
token-reverser
Token Reverser Words list generator to crack security tokens. Installation root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g...
knowsmore
KnowsMore KnowsMore 官方支持 Python 3.8+。 主要特性 从 .ntds 输出文本文件(由 CrackMapExec 或 secretsdump.py 生成)导入 NTLM 哈希 从 NTDS.dit 和 SYSTEM 文件导入 NTLM 哈希 从 hashcat 输出文件导入已破解的 NTLM 哈希 导入 BloodHound ZIP 或 JSON 文件 BloodHound 导入器(将 JSON 导入 Neo4J,无需 BloodHound UI) 分析密码质量(长度、小写字母、大写字母、数字、特殊字符和拉丁字符) 分析密码与公司名称、用户名的相似度...
lazybee
关于工具: Lazybee 工具是一个基于 Python 的脚本,可用于生成用于暴力破解攻击的随机单词列表。该工具具有独特的功能,例如单词列表生成时间计算以及直接以 .txt 格式保存到当前目录。该工具可在已 root 和未 root 的 Android 设备上运行。 支持平台: Termux 测试平台: Termux 要求: 网络 python 存储空...
lama
lama Lama,一款直言不讳的应用程序。 描述 Lama 是一款 GNU Linux 工具,用于生成单词列表。 目标是针对特定目标(无论是实体还是虚拟)获取自定义密码字典。 因此,列表中的单词必须与目标相对应。 请记住,Lama 生成的是简单密码列表而非复杂密码,目标是快速且有针对性,而非缓慢且全面覆盖。 编译 安装 注意,make install 必须以 root 身份运行,因为二进制文件会被复制到 /bin ,配置文件会被复制到 /etc/lama 。 make make install 或 make all 或 make re 卸载 注意,make uninstall 必须以...
dorky
Dorky Dorky es una herramienta de línea de comandos que busca coincidencias en nombres de organizaciones, nombres de repositorios y nombres de usuario en GitHub y GitLab a partir de una lista de palabras de entrada. Esta herramienta puede ser útil para identificar posibles objetivos en evaluacion...
CVE-2026-55892
Vim is an open source, command line text editor. Prior to 9.2.0662, the dumpprefixes function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never check...
CLSA-2026-1777389760 vim: Fix of 9 CVEs
CVE-2021-3903: do not set VALIDBOTLINE in wvalid when the screen is not valid, preventing invalid memory access while scrolling. - CVE-2021-4069: copy the current line before regexec in exopen so the match is not using freed memory when searching for a mark flushes it. - CVE-2022-0351: limit...
CVE-2026-0847
A flaw was found in NLTK Natural Language Toolkit. This vulnerability allows a remote attacker to read arbitrary files on the server due to improper sanitization of file paths in several CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. By...
DEBIAN-CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
UBUNTU-CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
CVE-2026-0847 Path Traversal in nltk/nltk
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...
PT-2026-23033
Name of the Vulnerable Software and Affected Versions NLTK versions up to and including 3.9.2 Description A flaw exists in NLTK that permits arbitrary file reading through path traversal in several CorpusReader classes, such as WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReade...
pybbs 代码注入漏洞
pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter word in the file /admin/sensitiveword/list, which could lead to a cross-site scripting...