karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 è un framework di ricognizione automatizzata di Open Source Intelligence OSINT passiva 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 può essere utilizzato da ricercatori di sicurezza informatica, penetration tester, bug hunter per trovare informazioni approfondite, più risorse, IP bypassati da WAF/CDN,...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

3klCon

Progetto 3klCon Archiviato Descrizione Strumento di ricognizione automatizzato che funziona con scopo Grandi e Medi. È consigliato usarlo su VPS, scoprirà segreti e cercherà vulnerabilità Quindi, benvenuto, e addentriamoci subfinder is in...

Phishing 3.0: The Fight Moves to Agent Versus Agent

Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message's intent, and it is failing now that the...

bug-bounty-toolkit

Bug Bounty Toolkit Automated reconnaissance-to-triage pipelin...

Operation-Molasses

🍯 OPERATION MOLASSES PEKMEZ Zencefil Efendi's Cyber Dow...

EUVD-2025-3995

Malicious code in bioql PyPI...

EUVD-2025-3993

Malicious code in bioql PyPI...

EUVD-2025-3992

Malicious code in bioql PyPI...

VIPER_2025

VIPER 2025 VIPER 2025 is an advanced, modular penetration...

Attackers Abuse TikTok and Instagram APIs

It must be the season for API security incidents. Hot on the heels of a developer leaking an API key for private Tesla and SpaceX LLMs, researchers have now discovered a set of tools for validating account information via API abuse, leveraging undocumented TikTok and Instagram APIs. The tools, an...

CVE-2025-24966

reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary HTML code. In this scenario, the vulnerability exists in the "Add Target" functionality of the...

CVE-2025-24962

reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmapcmd parameters. This issue has been addressed in commit c28e5c8d and is expected in the next versioned release. Users are advised to filter user input and monitor the...

CVE-2024-43381

reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are susceptible to Stored Cross-Site Scripting XSS attacks. This vulnerability occurs when scanning a domain, and if the target domain's DNS record contains an XSS payload, it leads to the execution of...

meg+ - Automated Reconnaissance Wrapper

This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a target. meg+ also allows you to scan all your in-scope targets on HackerOne in one go — it simply retrieves them using a...