blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

Emora-Project

Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...

CVE-2021-45901

CVE-2021-45901 ServiceNow - Username Enumeration PoC Code enumSNOWUsers.py - SNOW User Enumerator Title Username Enumeration Vulnerability found in ServiceNow Application Published: Version: 1.0 Vendor: ServiceNow Product: ServiceNow https://www.servicenow.com/ Version affected: Orlando...

WhoamiAlternatives

Alternatives to whoami Some experiments to retrieve the current username without calling whoami.exe or similar binaries. Method 1: PRTLUSERPROCESSPARAMETERS Get the environment variables from the PEB structure and parse it to find the username. Function NtQueryInformationProcess returns a...

TrueConf Server Authentication Bypass

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access under an arbitrary username without a password...

CreateHiddenAccount

CreateHiddenAccount 创建隐藏账号 中文 | EN Tool Introduction There are two common ways to create a hidden account. One is to add the $ sign directly after the user name to create it, and the other is to use the registry to clone the user to create. . So I wondered if I could implement the process of...

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

SocialPath

SocialPath Track users across social media platforms Deanonymizing darknet users by username reuse Research no. 2 in progress Supported services: Facebook Twitter + details Stackoverflow + details Instagram + details Reddit + details Steam Pinterest Tumblr Pastebin Github Requirements: Django...

007-TheBond

007-TheBond 🕵️‍♂️ A powerful Python-based OSINT Open Source Intelligence tool for gathering information across multiple platforms and services. 007-TheBond helps security researchers, investigators, and ethical hackers collect publicly available information from various sources including social...

CVE-2021-3754

CVE-2021-3754 This repository documents Vulnerability details and exploit for CVE-2021-3754 discovered and reported by Anurag Mondal 7Ragnarok7 on 21st August 2021 Metrics CWE-20: Improper Input Validation CVSS: 5.3 MEDIUM Description A flaw was found in Apache Keycloak & Redhat SSO where an...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

CVE-2021-42665

CVE-2021-42665 CVE-2021-42665 - SQL Injection authentication bypass vulnerability in the Engineers online portal system. Technical description: An SQL Injection vulnerability exists in the Engineers Online Portal login form which can allow an attacker to bypass authentication. Affected components...

Tritium

Tritium A tool to enumerate and spray valid Active Directory accounts through Kerberos Pre-Authentication. Background Although many Kerberos password spraying tools currently exist on the market, I found it difficult to find tools with the following built-in functionality: The ability to prevent...

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

Snoop

Snoop OSINT Tool for research social media accounts by username Install Requests pip install requests Install BeautifulSoup pip install beautifulsoup4 Execute the program python3 snoop.py...

tookie-osint

Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

Ominis-OSINT

Ominis-OSINT: Web Hunter Discover online mentions of a query or username, and map the social profiles and forums that surface with them. Ominis searches public web results, reports what it finds, and gets out of the way. MIT licensed. Maintained by AnonCatalyst with the WinterGate Intelligence...