rdap

OpenRDAP 是一个用 Go 实现的命令行 RDAP 客户端。 https://www.openrdap.org - 主页 https://www.openrdap.org/demo - 在线演示 功能特性 命令行 RDAP 客户端 输出格式：文本、JSON、WHOIS 风格 支持的查询类型： ip domain autnum nameserver entity help url domain-search domain-search-by-nameserver domain-search-by-nameserver-ip nameserver-search...

Reverse_ip_Multithreading1

ReverseipMultithreading1 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

chiasmodon

Chiasmodon Chiasmodonは、ユーザーがさまざまな情報源から情報を収集し、ドメイン、Google Playアプリケーション、メールアドレス、IPアドレス、組織、URLなどに基づいてターゲット検索を実行できるOSINTツールです。包括的なスキャン機能、カスタマイズ可能な出力形式、データ分析とカスタマイズを強化するための追加オプションを提供します。 ✨機能 🌐ドメイン : ドメイン名を指定してターゲット検索を実行し、ドメインに関連する情報を収集します。 🎮Google Playアプリケーション : アプリケーションIDを指定してGoogle...

pyhunter

pyhunter Hunter.ioのAPIを通じてインデックスされた可能なメールを検索するツール https://hunter.io インストール pyhunterの最新バージョンは、GitHubリポジトリをクローンしてダウンロードできます。 root@kitploit: git clone https://github.com/n4xh4ck5/pyhunter.git pipで依存関係をインストールします。 root@kitploit: pip install -r requirements.txt...

pentesting-multitool

Pentesting-Multitool はじめに Pentesting-Multitool プロジェクトは、いくつかのペネトレーションテストツールを1つのツールにまとめる必要性から生まれました。これは Python3 を使用して開発され、DNSPython、pythonwhois、scapy などの外部ライブラリを追加します。 このスクリプトの主な機能は、DNSレコード、ドメイン、その他のデバイスに関する情報を収集することです。 使用前の必要な設定 簡単なインストール pentesting-multitool をクローン : $ git clone...

spyder-osint

Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...

wtfis

wtfis Herramienta de consulta pasiva de hostnames, dominios e IPs para humanos ¿Qué es? wtfis es una herramienta de línea de comandos que recopila información sobre un dominio, FQDN o dirección IP utilizando varios servicios OSINT. A diferencia de otras herramientas de su tipo, está construida...

Malicious code in lakk-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a1a1a5f0fd81e6ba6198e7f4cbdeab1c16b8ceed3dbb7becc6b4b6f611ad52 [email protected] runs node index.js from an npm install lifecycle hook, which loads ./lib/core and constructs a subdomain from the installer's O...

Malicious code in @sapappgyver/appgyver-descriptors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9396712a6bf4b08219d9ed2066ebf8c25a7558b988b6d9bf1c9ae57349a4741 The package declares an install lifecycle script that runs node index.js, which requires lib/core.js; the same module is the package main, so the...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the reverse DNS lookup process. An attacker can bypass hostname-based access controls by connecting from a hostname that should be denied, if the chroot environment lacks required resolution files. Remediation...

Malicious code in @leviosa86com/leviosa86-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96264a8719e17bd8ec21d47213fe31dec87445e01ff312a1e46af5819e028979 Package @leviosa86com/[email protected] ships src/poc/index.js which shells out via childprocess.exec to collect host identifiers hostname, pwd,...

CVE-2026-15485 TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub43F2C4 of the file /goform/toolsnslookup of the component DNS Lookup Handler. This manipulation of the argument nslookuptarget/dnsserver causes os command injection. The attack can be initiated remotely...

Malicious code in consumerweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74612bbfc323641d0141b4f1b495d6ea5f9b52129f2391bf21c5fabf63702ca7 On npm install, both preinstall and postinstall lifecycle hooks execute index.js, which collects host reconnaissance os.hostname, os.userInfo.usernam...

CVE-2026-56843

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...

EUVD-2026-42144

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...

PT-2026-55901

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Apache Camel DNS component allows for Server-Side Request Forgery...

CVE-2026-57587

The CVE-2026-57587 entry describes a SQL injection in Nessus affecting the scan results database. An unauthenticated remote attacker who controls reverse DNS records for a scanned host can inject malicious SQL, potentially exfiltrating scan-result data. The connected documents specify Nessus as t...

CVE-2026-57587 SQL Injection in Nessus via Reverse DNS Lookup

A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data...

Malicious code in atlassian-forge-skills (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca0f4b99cda621977551550ed678ad77ee82827714acb9d08534f53b0642e3c Package impersonates an internal Atlassian Forge dependency unscoped name atlassian-forge-skills, description 'Internal package', generic author...

Malicious code in @monitoring-lib/error-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491603ad44ed812c3d248696b00f7d4801a4c1dc23e4f23a3bb86f2ef499616d On npm install, the preinstall lifecycle hook in package.json runs a Node one-liner that reads the installer's hostname os.hostname and username...