Computer-Security-Equifax-2017

Educational repo demonstrating real-world software vulnerabilities: Apache Struts2 CVE-2017-5638 RCE, data exfiltration, weak encryption, and mitigation strategies sanitization, monitoring, crypto best practices. Red team vs blue team demo of OS security flaws: exploit, persistence backdoor, and...

LeakSearch

LeakSearch LeakSearch is a simple tool to search and parse plain text passwords using ProxyNova COMB Combination Of Many Breaches over the Internet. You can define a custom proxy and you can also use your own password file, to search using different keywords: such as user, domain or password. In...

vercel-april2026-incident-response

Vercel April 2026 Incident Response Guide Last updated: 20 April 2026 @ 12.07 PM AEST/Brisbane - v2 — incorporates Vercel CEO update of 20 April IMPORTANT: This is not legal or official advice. If you think you have been compromised please reach out to an incident response partner. This informati...

pwnedOrNot

OSINT Tool for Finding Passwords of Compromised Email Accounts Created by Lohitya Pushkar thewhiteh4t. Twitter - Blog Available| in| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot works in two phases. In the first phase it tests the given email address using HaveIBeenPwned v3...

PwnedCheck

PwnedCheck PwnedCheck is a command-line tool for checking whether passwords have appeared in known data breaches using theHave I Been Pwned API and supports encrypted Bitwarden vaults exports. Features Check single passwords from the command line Process passwords from a file Accept pre-hashed...

OneRuleToRuleThemStill

OneRuleToRuleThemStill 一个重新设计和优化版本的OneRuleToRuleThemAll。 OneRuleToRuleThemStill现在规则数量减少了5%约6.9%（从52,000条降至 49,46548,414条），在Lifeboat和LastFM数据泄露测试中性能损失为0%。 更新： 对生成的候选密码进行去重（之前仅针对字符串文字） 添加LastFM泄露数据集（约2100万个唯一哈希），用于更大/更好的建模 移除常见的无匹配规则（Lifeboat和LastFM） 按针对LastFM的频率排序...

mosint

功能 • 安装 • 服务 • 用法 • Docker • 配置 • 界面 Mosint 是一个用 Go 编写的自动化电子邮件 OSINT 工具，能够快速高效地对目标邮箱进行调查。它整合了众多服务，使安全研究人员能够迅速获取大量信息。 功能 快速简单的电子邮件扫描 优化易用性，资源占用轻量 电子邮件验证与校验 检查社交媒体 账户 检查数据泄露 和密码泄露 查找相关 邮箱和域名 扫描 Pastebin 转储 Google 搜索 DNS/IP 查询 输出为 JSON 文件 使用 --coffee 标志打印咖啡！ 安装 root@kitploit: go install -v...

Credential-and-breach-monitoring

Breach / Stealer-Log / Identity Exposure Services Comparison with Scoring This document compares breach intelligence, dark web monitoring, and identity exposure services across practical dimensions relevant to modern security teams. It focuses on: Breach corpus depth Infostealer-log coverage API...

data-breach

Latest Data Breaches Repository This repository provides a comprehensive and continuously maintained list of confirmed data breaches from around the world. Each breach entry includes the breach name, which typically reflects the affected organization, along with the date of the incident. These tw...

Password-Strength-Evaluator

Password Strength Evaluator Password Strength Evaluator es una herramienta para evaluar la fortaleza de las contraseñas y proporcionar recomendaciones para mejorar su seguridad. Esta herramienta también comprueba si tu contraseña ha sido expuesta en alguna filtración de datos mediante la API de...

WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

CyberPup

CyberPup A free, open-source cybersecurity app for everyday people. CyberPup helps non-technical users lock down their digital lives through guided checklists, bite-sized lessons, and tools like breach checking. All guidance is grounded in well-known frameworks from ACSC, CISA, and NIST -...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

h8mail

h8mail 是一款电子邮件OSINT和违规数据搜索工具，利用不同的违规和情报服务，或本地违规数据，如Troy Hunt的"Collection1"和臭名昭著的"Breach Compilation"种子。 📖 目录 目录 功能 API 使用 使用示例 感谢与致谢 相关开源项目 🍊 功能 🔎 电子邮件模式匹配（正则表达式），适用于从其他工具输出中读取 🌍 传入URL，直接查找并定位页面中的电子邮件 💫 本地搜索的宽松模式（"john.smith", "evilcorp"） 📦 安装简便。可通过 pip 安装，仅需 requests ✅ 批量读取文件作为目标 📝 输出为CSV或JSON文件...

buster

描述 Buster 是一款高级 OSINT 工具，用于： 通过多种来源（Gravatar、About.me、MySpace、Skype、GitHub、LinkedIn、过往数据泄露）获取电子邮件的社交账号 获取通过 Google、Twitter、DarkSearch 和粘贴网站找到该电子邮件的链接 获取电子邮件的泄露记录 获取通过电子邮件注册的域名（反向 Whois） 生成某人的可能电子邮件和用户名 查找社交媒体账号对应的电子邮件 从用户名查找电子邮件 查找某人的工作邮箱 关于如何使用 Buster 的教程可在此处找到 安装 克隆仓库： root@kitploit: $ git clon...

rupture

Rupture Rupture is a framework for easily conducting BREACH and other compression-based attacks. Authors Rupture is developed by: Dimitris Karakostas [email protected] Dionysis Zindros [email protected] Eva Sarafianou [email protected] Dimitris Grigoriou [email protected] This...

cve-2017-5638

CVE-2017-5638 Demo app of, yes, that data broker's security breach. Includes exploit code. Basic usage launch root@kitploit: mvn jetty:run Then go to http://localhost:8080/basic-struts/index.action. You should see the Welcome to Struts 2! message. Vulnerability scan root@kitploit: mvn site...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

MailAccess

root@kitploit: ███╗ ███╗ █████╗ ██╗██╗ █████╗ ██████╗ ██████╗███████╗███████╗███████╗ ████╗ ████║██╔══██╗██║██║ ██╔══██╗██╔════╝██╔════╝██╔════╝██╔════╝██╔════╝ ██╔████╔██║███████║██║██║ ███████║██║ ██║ █████╗ ███████╗███████╗ ██║╚██╔╝██║██╔══██║██║██║ ██╔══██║██║ ██║ ██╔══╝ ╚════██║╚════██║ ██║...

Zen

Find email addresses of Github users Find email address of a user python zen.py username or python zen.py https://github.com/username Find email addressess of contributors of a repository python zen.py https://github.com/username/repository Find email addresses of members of an organization pytho...