-
Hi, we are crew whic make own blockchain hard fork Ethereum, and we install your code for explorer. he works well couple days, and from some reason starting to make ssh aatempts logins on other server…
-
sometimes to evade mod_security, I use a bunch of different proxies and I've configured a load balancer to rotate them. Sometimes the proxies barf, or wpscan tries to hit a proxy during the rotation a…
-
It would be really neat to ONLY do the bruteforce, and not enumerate everything every time. If all I want to do is bruteforce the wp logins, I don't need wpscan to rescan the whole site again.
-
Currently bruteforce is only done with ssh. This scenario needs modifications for the attackmate
-
Hi,
I took an interest in SoftHSM v2.6.1 and have identified a security issue.
Through a source code analysis (SecureDataManager::login function), I have identified that an attacker could bruteforc…
-
Hi,
I've tracked SQL slow queries and added "missing" indexes for performance gains:
create index parent_share_with_index on oc_share (parent,share_with);
create index share_type_share_type_ite…
-
Every 10 attempts to enter a password should be delayed by 31000 milliseconds.
Because the phone sets a timer after 10 unsuccessful entry attempts for 30 seconds
EXAMPLE:
DELAY 500
STRING 1234
EN…
-
By default we'll leverage the following charsets over a fixed length. Custom charsets will be implemented later.
```
?l = abcdefghijklmnopqrstuvwxyz
?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ
?d = 0123456789
?s…
-
python3 ~/MikrotikAPI-BF/mikrotikapi-bf.py -t 127.0.0.1 -p 505 -u admin -d /home/kali/SecLists/Passwords/500-worst-passwords.txt -s 5
/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py:42: SyntaxWarning: in…
-
# Description
I use wpa_supplicant for gathering PMKID.
EAPOL M1 contains PMKID-hash of valid password, but M2 also contains wrong password.
I want to bruteforce of PMKID-hash and force ignore ha…