TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi es una aplicación CLI para Windows que permite recopilar datos de redes sociales y convertirlos en un conjunto de datos CSV que se puede utilizar con Gephi. Actualmente es compatible con Twitter Reddit Youtube Dominios / URLs de WWW Se añadirán más...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

tgspyder

🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 Mayo 2020 Hidden Networks es una prueba de concepto basada en el paper del mismo nombre, programada en Python 3.4. Facilita la tarea de analizar máquinas locales y remotas dentro de un dominio, usando WMI para buscar rastros de conexiones de dispositivos USB. Con la...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

ConditionalAccessDocumentation

Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...

Tracgram

Trackgram Usa las funciones de ubicación de Instagram para rastrear una cuenta Uso root@kitploit: At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: -...

CVE-2020-25398

CVE-2020-25398 CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. Information Description: Attacker can configure specific data, which could be exported to malicious csv file with code execution payload and runs after opening on user's machine...

IPGeoLocation

IPGeoLocation ==== Una herramienta para obtener información de geolocalización IP Desarrollado por ip-api Requisitos Python 3.x termcolor colorama Descarga/Instalación git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user si pip3 no está instalado: apt-get...

CVE-2021-46363

CVE-2021-46363: Formula Injection in Magnolia CMS An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported...

creepy

creepy Versión actual 1.1 Autor Yiannis Kakavas Página principal http://www.geocreepy.com Instrucciones de instalación Consulte http://www.geocreepy.com Descripción Herramienta OSINT de geolocalización. Creepy es una herramienta OSINT de geolocalización. Recopila información relacionada con la...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

ninja-forms-brute

Ninja Forms 3.6.8 - Unauthenticated Email Address Disclosure Description The plugin does not delete the temporary files created when exporting submissions, which could allow unauthenticated attackers to download them and get sensitive information such as the email address of users who submitted a...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Unauthenticated SQL Injection Description The Navayan CSV Export plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

vt-py-scanner

VirusTotal Scanner VirusTotal APIを使用してすべてのファイルを分析するPythonスクリプト。フォルダとサブフォルダを再帰的にスキャンします。Windows向けに最適化。 機能 フォルダとそのサブフォルダ内のすべてのファイルをスキャン .envファイルによる設定 - APIキーと設定を保存 対話モード - .envファイルなしでも動作 Windows向けに最適化 - 正しいパス処理とUTF-8エンコーディング 完全なログ記録 - すべてのイベントとエラーを.logファイルに記録 CSVエクスポート - 結果をCSVファイルに保存（セミコロン区切り）...

CVE-2026-86758

Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...

EUVD-2026-74935

Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...

CVE-2026-86758 Snipe-IT before 8.7.0 License Key Exposure via CSV Export

Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...

CVE-2026-86758 Snipe-IT before 8.7.0 License Key Exposure via CSV Export

Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...