CVE-2019-9053-exploit
jeanback1/cve-2019-9053-exploitAutomated exploit for CVE-2019-9053, a time-based blind SQL injection in CMS Made Simple ≤2.2.9. Extracts admin credentials (username, email,…
exploitationinformation-gatheringpassword-cracking+3
jeanback1/cve-2019-9053-exploitAutomated exploit for CVE-2019-9053, a time-based blind SQL injection in CMS Made Simple ≤2.2.9. Extracts admin credentials (username, email,…
dhananjayasj/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityProof-of-concept exploit for CVE-2024-21413, a critical Outlook RCE vulnerability that leaks NetNTLMv2 hashes via crafted file:// links, enabling…
infobyte/emploleaksAn OSINT tool that helps detect members of a company with leaked credentials
thewhiteh4t/pwnedornotOSINT Tool for Finding Passwords of Compromised Email Addresses
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
viniciusfariasdev/cve-2024-21413-outlook-monikerlink-labEducational lab and PoC demonstrating CVE-2024-21413 Outlook Moniker Link attack to leak netNTLMv2 hashes via crafted HTML email.
yass2400012/email-exploit-moniker-link-cve-2024-21413-Proof-of-concept exploit for CVE-2024-21413 using Moniker Link in HTML email to trigger SMB connection and capture netNTLMv2 hashes via Responder.…
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
mbadanoiu/cve-2020-13941CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr
artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
hf3cyber/cms-made-simple-2.2.9-unauthenticated-sql-injection-exploit-cve-2019-9053-Time-based blind SQL injection exploit for CMS Made Simple <= 2.2.9 (CVE-2019-9053) that extracts username, email, password hash, and salt, with…
mrtuxx/socialpwnedSocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…
d1se0/cve-2024-21413-vulnerabilidad-outlook-labEducational lab demonstrating CVE-2024-21413 Outlook vulnerability exploitation with Python email exploit tool and Responder for NTLM credential…
pushpenderindia/sinisterSinister is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info
pinoywh1z/ssh-private-key-looting-wordlistsCurated wordlists for brute-forcing SSH private key filenames, aiding penetration testers in locating keys via LFI or enumeration during lateral…
fathanahhidayati/https-github.com-xaitax-cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityProof-of-concept exploit for CVE-2024-21413, a Microsoft Outlook remote code execution vulnerability. Demonstrates NTLM credential leakage and RCE…
nccgroup/hashcrackGuesses hash types, picks some sensible dictionaries and rules for hashcat
mdsecactivebreach/dragoncastleA PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.