4590 matches found
Whoisleak
Whoisleak This tool queries the emails that registered the domain and verifies if they were leaked in some data leak. To install root@kitploit: $ apt-get install nodejs-legacy $ pip install -r requirements.txt Usage Example root@kitploit: python whoisleak.py -u securityattack.com.br Contact / Blo...
data-breach
Repositorio de las últimas violaciones de datos Este repositorio proporciona una lista completa y actualizada continuamente de violaciones de datos confirmadas de todo el mundo. Cada entrada de violación incluye el nombre de la violación, que generalmente refleja la organización afectada, junto c...
mosint
Características • Instalación • Servicios • Uso • Docker • Config • Pantalla Mosint es una herramienta automatizada de OSINT para correos electrónicos escrita en Go que te permite investigar correos electrónicos objetivo de forma rápida y eficiente. Consolida numerosos servicios, lo que permite a...
OneRuleToRuleThemStill
OneRuleToRuleThemStill Una versión renovada y optimizada de OneRuleToRuleThemAll. OneRuleToRuleThemStill ahora tiene una reducción de 5% 6.9% en reglas de 52,000 a 49,465 48,414 con 0% de pérdida de rendimiento frente a las brechas de datos de Lifeboat y LastFM. Actualizaciones: Deduplicación de ...
CVE-2024-50961
Exposición de Datos Sensibles CVE-2024-50961 Descripción En DonWeb Ferozo Hosting v1.1, un atacante remoto puede explotar parámetros de URL para acceder a datos sensibles, incluidas credenciales de base de datos. Los vectores de ataque incluyen la captura de tráfico de red, registros del servidor...
PwnedCheck
PwnedCheck PwnedCheck es una herramienta de línea de comandos para verificar si las contraseñas han aparecido en filtraciones de datos conocidas utilizando la API deHave I Been Pwned y admite exportaciones cifradas de bóvedas de Bitwarden. Características Verificar contraseñas individuales desde ...
WhatBreach
WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...
ZKTeco BioTime <= 9.0.1 - Privilege Escalation
BioTime default employee credentials password 123456 allow login. Sessions are not role-validated, enabling privilege escalation to perform admin actions and enumerate backup files. id: CVE-2023-38952 info: name: ZKTeco BioTime = 9.0.1 - Privilege Escalation author: riteshs4hu severity: high...
Dolibarr Unauthenticated Contacts Database Theft
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. id: CVE-2023-33568 info: name: Dolibarr Unauthenticated Contacts Database Theft...
RSVPMaker <= 9.2.5 - SQL Injection
The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from t...
Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection
The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...
Jenkins <=2.196 - Cookie Exposure
Jenkins through 2.196, LTS 2.176.3 and earlier prints the value of the cookie on the /whoAmI/ URL despite it being marked HttpOnly, thus making it possible to steal cookie-based authentication credentials if the URL is exposed or accessed via another cross-site scripting issue. id: CVE-2019-10405...
buster
Descripción Buster es una herramienta OSINT avanzada utilizada para: Obtener cuentas sociales de un correo electrónico usando múltiples fuentes gravatar, about.me, myspace, skype, github, linkedin, brechas anteriores Obtener enlaces a donde se encontró el correo usando google, twitter, darksearch...
MOVEit-Transfer-Data-Breach-Analysis.
MOVEit-Transfer-Data-Breach-Analysis. Análisis detallado de la filtración de datos de MOVEit Transfer de 2023 CVE-2023-34362 para CS50 Cybersecurity. Este proyecto explora el impacto técnico de la inyección SQL no autenticada y sus consecuencias para la privacidad de datos global, afectando a más...
XposedOrNot
XposedOrNot XposedOrNot XoN tool is to search an aggregated repository of xposed passwords comprising of 850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security. Screenshot What is Xposed Passwords? The main aim of this project is to give...
godehashed
Godehashed Una herramienta en golang que utiliza la API de dehashed.com para buscar activos comprometidos. Los resultados se pueden compilar en un CSV para su posterior análisis. Captura de pantalla Dehashed API Debes proporcionar una clave API a la herramienta. Consulta apikeytemplate.txt como...
pwndb
pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage root@kitploit: usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target...
153M+ driver’s licenses for sale on new dark web platform
A new dark web platform called Nexus claimed to be selling 153 million driver’s license scans and millions of other identity and medical cards. The collection included more than 153 million driver’s licenses, 10 million ID cards, 3 million travel documents, and 579,000 medical cards, including...
FBI Probes Service Selling 153M+ Drivers Licenses
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphonin...
