metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

talos

Chat · Debates · Boletín · Documentación · Probar Ory Network · Empleos Ory Talos es un servidor de claves de API escalable y seguro optimizado para verificación de baja latencia, escalado horizontal y operaciones predecibles. Sigue las mejores prácticas de seguridad establecidas para claves de A...

SDK

SDK Público de Intelligence X El kit de desarrollo de software SDK permite a cualquier persona utilizar el motor de búsqueda de Intelligence X. Es de uso gratuito e Intelligence X agradece cualquier integración en herramientas y servicios de terceros. Intelligence X es un motor de búsqueda y...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map uses OpenStreetMap and the official Telegram library to find the position of nearby users. Please note: Telegram's API was updated a while ago to make nearby user distances less precise, preventing exact location calculations. Therefore, Telegram Nearby Map...

CVE-2026-101998

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

mantra

「🔑」 Acerca de Mantra La herramienta en cuestión fue creada en Go y su objetivo principal es buscar claves API en archivos JavaScript y páginas HTML. Funciona revisando el código fuente de páginas web y archivos de script en busca de cadenas que sean idénticas o similares a claves API. Estas clave...

EUVD-2026-95157

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2026-101998

Docker Sandboxes are vulnerable to a fail-open response masking issue where certain handlers may forward unmasked bytes when a response-body read returns data alongside an error. This vulnerability allows code running inside an authorized sandbox to potentially recover sensitive host-managed OAut...

CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand Blocks Registran Claves API en Texto Plano ID CVE: CVE-2026-22038 Producto: Plataforma AutoGPT integración Stagehand Versiones afectadas: Todas las versiones hasta autogpt-platform-beta-v0.6.45 inclusive Corregido en: autogpt-platform-beta-v0.6.46 Tipo de...

CVE-2026-42208-Lab

CVE-2026-42208 — PoC de inyección SQL por tiempo previa a la autenticación en LiteLLM Laboratorio Docker local y PoC de daño mínimo para CVE-2026-42208, una vulnerabilidad de inyección SQL previa a la autenticación en la ruta de verificación de claves API del proxy LiteLLM. Este repositorio...

sub.sh

🎯🕸📘 MultiprocessingParallelSubdomain Detect Script ✨ 🔺Sub.sh but without API key 🔻 https://github.com/cihanmehmet/sub.sh ‼️ jq , httprobe and parallel required 📌 📘 ✅ Used Services + https://crt.sh + http://web.archive.org + https://dns.bufferover.run + https://www.threatcrowd.org +...

threat-intel-brief-cve-2026-42208-litellm

Informe de Inteligencia de Amenazas - CVE-2026-42208: Inyección SQL en BerriAI LiteLLM CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc Puntuación CVSS: 9.3 Crítica Software afectado: BerriAI LiteLLM versiones = 1.81.16, 1.83.7 Versión corregida: 1.83.7-stable publicada el 19 de abril de 2026 Añadid...

dotclaude-security

dotclaude-security Escanea la configuración local .claude/ de un repositorio — hooks de settings.json, definiciones de servidores MCP, bloques env, permissions.allow — en busca de los peligros de RCE y exfiltración de claves de API que se activan en el momento en que haces git clone y abres un...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

dora

dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE is a Static analysis Tool that Targets ios applications and brings important information such as Links, interesting files .json,cer,der,api and is very useful to show good results when you pentesting ios apps What new in this tool ✅Fast & easy to use ✅Get binary info like...

reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker docker build -t reposcanner . docker run -it...