blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

Emora-Project

Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

CVE-2007-2447

CVE-2007-2447 Samba 3.0.0 - 3.0.25rc3 are subject for Remote Command Injection Vulnerability CVE-2007-2447, allows remote attackers to execute arbitrary commands by specifying a username containing shell meta characters...

SocialPath

SocialPath Track users across social media platforms Deanonymizing darknet users by username reuse Research no. 2 in progress Supported services: Facebook Twitter + details Stackoverflow + details Instagram + details Reddit + details Steam Pinterest Tumblr Pastebin Github Requirements: Django...

Tritium

Tritium A tool to enumerate and spray valid Active Directory accounts through Kerberos Pre-Authentication. Background Although many Kerberos password spraying tools currently exist on the market, I found it difficult to find tools with the following built-in functionality: The ability to prevent...

CVE-2022-39197-POC

CVE-2022-39197-POC 中文版本READMECN.md Vulnerability Intro According to the Update Log of the latest version 4.7.1 officially released by CobaltStrike on 20 September, teamserver version We were contacted by an independent researcher named "Beichendream" to inform us of an XSS vulnerability they foun...

CVE-2026-55157

The token-optimizer-mcp software is vulnerable to OS command injection in the smart_user tool (specifically the get-user-info operation) prior to version 5.1.0 . The root cause is the unsafe interpolation of a user-controlled username argument into a shell command executed via execAsync(). Becaus...

Stalker

What's Stalker Very simple and probably badly written OSINT tool that will allow you to quickly search through several websites for a single username. It's aimed to save time and I wanted to keep it simple, so everything's in one single, messy .py file. I'll soon work on that to clean all of this...

linkedin2username

linkedin2username Herramienta OSINT: Genera listas de nombres de usuario a partir de empresas en LinkedIn. Esto es un web scraper puro, no se requiere clave API. Usas tu nombre de usuario y contraseña válidos de LinkedIn para iniciar sesión, y creará varias listas de posibles formatos de nombre d...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

Osint-Sync

Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...

CVE-2021-46108

CVE-2021-46108 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ D-Link Router DSL-2730E - Stored Cross Site Scripting D-Link DSL-2730E CT-20131125 devices allow XSS via the username...

massh-enum

+----------------+ | massh-enum 1.0 | +----------------+ root@kitploit: OpenSSH 2.3 up to 7.4 Mass Username Enumeration CVE-2018-15473 This script contains Matthew Daley Python script License: GPLv3, Description OpenSSH versions 2.3 up to 7.4 suffer from a username enumeration vulnerability. The...

WhatsMyName

WhatsMyName WhatsMyName WMN is a community-maintained dataset that lets you find out if a username exists across hundreds of websites. If you're investigating a person of interest, verifying an online identity, or simply curious about your own digital footprint, this project powers the tools that...