buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC 브라우저 주소 표시줄 스푸핑 - iOS/iPadOS CVE-2024-25733 ARC 브라우저 주소 표시줄 스푸핑 PoC - iOS/iPadOS 익스플로잇 PoC 개념 증명 function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location = "https://google.com:" +...

Fourteen_Endpoints

중개자들 Apple의 개인정보 보호 릴레이 내부의 셸 회사들 델라웨어주 익명 LLC가 App Store에 성경 기도 앱, 일기장, 발신자 ID 도구를 게시합니다. 그 법인은 Apple의 개인정보 보호 네트워크 내부에서 암호화된 릴레이 인프라를 운영합니다. 그 릴레이는 Taiwan Mobile Co., Ltd.에서 종단됩니다. 지금 바로 작동 중임을 확인할 수 있습니다. 세 개의 명령어로. 2024년, Apple은 Live Caller ID Lookup을 위해 Oblivious HTTP를 도입했습니다. 휴대전화가 누가 전화했는지...

CVE-2025-22777

CVE-2025-22777 GiveWP – 기부 플러그인 및 모금 플랫폼 = 3.19.3 - 인증되지 않은 PHP 객체 주입 설명 WordPress용 GiveWP – 기부 플러그인 및 모금 플랫폼은 3.19.3을 포함한 모든 버전에서 기부 폼의 'company' 매개변수를 통해 신뢰할 수 없는 입력의 역직렬화로 인해 PHP 객체 주입에 취약합니다. 이로 인해 인증되지 않은 공격자가 PHP 객체를 주입할 수 있습니다. POP 체인이 추가로 존재하면 공격자가 서버에서 임의의 파일을 삭제하여 원격 코드 실행이 가능해집니다. 이는...

sentryexploit

MobileIron Sentry CVE-2023-38035 정보 추출 기능 회사 이름 및 연락처 이메일 추출 취약점 증명 사용법 ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Company: XXXX Ltd., contact: [email protected] 출처 Horizon3 심층 분석...

WordPress Button Generator <2.3.3 - Remote File Inclusion

WordPress Button Generator before 2.3.3 within the wow-company admin menu page allows arbitrary file inclusion with PHP extensions as well as with data:// or http:// protocols, thus leading to cross-site request forgery and remote code execution. id: CVE-2021-25052 info: name: WordPress Button...

CVE-2026-11795

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026-10-02. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-11795

The Softtr Informatics Trading Limited Company E-Commerce Pack (affected through 2026-10-02) contains an observable discrepancy vulnerability (CWE-203) that facilitates Account Footprinting . This flaw allows for user enumeration or footprinting within the application. No specific root cause deta...

EUVD-2026-91591

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026-10-02. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2021-44228-Advisories

CVE-2021-44228 권고 목록 권고를 포함하려면 이슈를 열어주세요 / PR은 받지 않습니다. 다음 목록을 확인하세요. 제 목록보다 더 많은 관심을 받았습니다 : https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592 이 목록은 회사의 모든 권고를 포함하며, 단순히 log4j를 전혀 사용하지 않는다고 확인하는 경우도 포함됩니다. 회사/제품| 권고 링크| 조치 필요 여부 ---|---|--- Amazon Web Service|...

CVE-2026-92244

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-92244

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.16.1 . The root cause is insufficient input sanitization and output escaping within the Billing First Name , Last Name , and Company field...

CVE-2026-92244 PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-92244 PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and output escaping. This makes it possible fo...

coeus-ci

Coeus CI Competitive Intelligence that sees all. Named after Coeus SEE-us, the 100 eyed Greek Titan of the inquisitive mind — whose name literally means "querying." CI stands for Competitive Intelligence. A business intelligence OSINT tool that builds company profiles from free public data source...

LinkedIn adds new checks for fake profiles and work histories

LinkedIn is adding trust and verification features aimed at making fake professional identities, invented work histories, and company impersonation harder to pull off. The company is responding to an environment in which generative AI enables imposters to create an entirely made-up professional...