nzyme

Nzyme Learn more at https://www.nzyme.org/. Version 2.0.0 of Nzyme is currently in development and alpha releases are available. Contributing There are many ways to contribute and all community interaction is absolutely welcome: Open an issue for any kind of bug you think you have found. Open an...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks Date| Description| Notes ---|---|--- April 2025| Thoughts of AWS Access key ID's from an S3 bucket| The keys to the AWS kingdom March 2025| 16,000 subscribers to Nine newspapers from Australia| name, postal address...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

exploits

Public Proof-of-Concept Exploits Repository This repository contains public proof-of-concept PoC exploits for various vulnerabilities that I have discovered over time. These PoC exploits are shared for educational purposes and to demonstrate the potential risks associated with the vulnerabilities...

noinstagram

noinstagram I got rid of my IG account some time ago, but I'd still like to see photos from my wife and our dog. I was just visiting the IG website for each public user I wanted to view, but that was way too much work. So I built this one Sunday. Want your own noinstagram page? fork this repo set...

BLACKHAT_Asia2023

BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for...

sss3

SSS3 Simple Storage Scanner SSS3 is a simple S3 Bucket testing software. It uses aws cli to search for public buckets in a list of domains/subdomains. Basic Requirements It requires aws cli installed and configured with a s3 policy defined You should have a list of previous enumerated...

BlobHunter

BlobHunter An opensource tool for scanning Azure blob storage accounts for publicly opened blobs. BlobHunter is a part of Hunting Azure Blobs Exposes Millions of Sensitive Files research. Overview BlobHunter helps you identify Azure blob storage containers which store files that are publicly...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

vinifera

Vinifera - Monitor Internal Leaks on Github Github Monitoring Tool 🤖 We have been using Vinifera in production since Dec 2019 and has helped us prevent security incidents. Vinifera started out as an internal project to ensure Security hygiene of our public contributions and monitor potential leak...

CVE-2026-79294

CVE-2026-79294 CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. Vulnerability Details Vulnerability Type: Stored/Stored-like...

osint-brazuca

🇧🇷 OSINT BRAZUCA 🇧🇷 Catalog of Brazilian open sources public, legal and ready for investigation. Knowing in order to protect, investigating in order to defend. !Quick Guidehttps://img.shi...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

bounty-targets-data

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

EUVD-2026-103156

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache...

Exploits

Windows Exploits A curated archive of complied and tested public Windows exploits...

clone-cert

clone-cert.sh This is a simple shell script that retrieves the X.509 certificate associated with a TLS wrapped TCP port and uses openssl to create a similar certificate by replacing the public key and fixing the signature. This is particularly useful if you want to demonstrate why self-signed...

RS256-2-HS256

RS256-2-HS256 JWT Attack to change the algorithm RS256 to HS256 Usage usage: RS2562HS256JWT.py -h payload pubkey positional arguments: payload JSON payload from JWT to attack pubkey Public key file to use for signing optional arguments: -h, --help show this help message and exit Example...