godehashed

Godehashed Инструмент на Go, использующий API dehashed.com для поиска скомпрометированных активов. Результаты можно собрать в CSV для дальнейшего анализа. Скриншот API Dehashed Вы должны предоставить инструменту ключ API. Пример см. в apikeytemplate.txt. Установка Для установки инструмента в CLI...

email-prediction-asterisks

ASTERISKS & OBELIX Email prediction asterisks 는 별표 뒤에 숨겨진 이메일을 식별할 수 있는 스크립트입니다. OSINT 분석가와 보안 조직에 완벽한 애플리케이션입니다. Intelx 유출 데이터를 사용하여 우리가 찾는 사람과 관련된 이메일을 지능적으로 예측할 수 있습니다. 또한 결과로 생성된 CSV 데이터셋을 통해 수동 분석을 위해 이메일에서 정보를 자동으로 얻을 수 있습니다. Twitter에서 별표로 표시된 이메일 예시 데모 설치 Python용 intelx 라이브러리를 설치해야 합니다...

fileintel

fileintel Это инструмент для сбора различной разведывательной информации по заданному файлу. Fileintel написан в модульном стиле, чтобы новые источники данных можно было легко добавлять. Файлы идентифицируются по хешу MD5, SHA1, SHA256. Вывод производится в формате CSV и отправляется в STDOUT,...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

hostintel

hostintel Этот инструмент используется для сбора различных источников разведывательной информации об узлах хостах. Hostintel написан в модульном стиле, чтобы новые источники данных можно было легко добавлять. Узлы идентифицируются по полному доменному имени FQDN, домену или IP-адресу. На данный...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

Security_Article

SecurityArticle sito web scrapy, Articolo e link ... 0x01 Nuovo progetto 0x02 Definire l'obiettivo 0x03 Creare il crawler 0x04 Salvare i contenuti es. pip3 install lxml,scrapy root@kitploit: 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text...

autotimeliner

AutoTimeliner Estrai automaticamente la timeline forense dai dump di memoria volatile. AutoTimeliner esegue molteplici plugin di Volatility3 su immagini di memoria Windows, Linux e macOS, quindi unisce il loro output in un'unica timeline CSV ordinata: Plugin Generico per Timeline Plugin| Cosa...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

CVE-2026-78209

exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially exfiltrating data or...

CVE-2026-78209

exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...

Nessus-CVE-POC-Finder

Nessus-CVE-POC-Finder Python script to parse .nessus file, ext...

Exploit for Path Traversal in Fortinet Fortiproxy

CVE-2018-13379 — Mass Exploit for Fortine...

Exploit for CVE-2026-27944

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector ht...

EUVD-2017-13053

Malware in sbrugna...

CVE-2020-22275

Easy Registration Forms ER Forms Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable...

Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms

Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...

Spartacus - DLL Hijacking Discovery Tool

Why "Spartacus"? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The moment the real Spartacus stood up, a lot of others stood up as well and claimed to be him using the "I AM SPARTACUS" phrase. When a proces...