Samurai

Samurai Email Discovery SEDは、100% BASHで作成されたメール発見フレームワークで、Google dork、会社名、ドメイン名を介してメールを取得します。 必要条件 apt-install lynx おそらく、OSINTオプション、資格情報の再利用発見、torsocksの実装などの追加機能がありますが、今のところはこれで十分です。 お楽しみください Twitter: @0x3curity. Team: @AnonyInfo...

BridgeKeeper

BridgeKeeper Scrape employee names from search engine LinkedIn profiles Hunt for emails and username formats via Hunter.io Transform names to given username formats Usage usage: bridgekeeper.py flags BridgeKeeper - v1.0.0 options: -h, --help show this help message and exit Targets: -c COMPANY,...

Zen

Githubユーザーのメールアドレスを見つける ユーザーのメールアドレスを見つける python zen.py username または python zen.py https://github.com/username リポジトリのコントリビューターのメールアドレスを見つける python zen.py https://github.com/username/repository 組織のメンバーのメールアドレスを見つける python zen.py organization --org または python zen.py...

CVE-2018-15131

Zimbra Collaboration 사용자 열거 스크립트 CVE-2018-15131 사용 방법 --host 인자는 Zimbra Collaboration 웹 애플리케이션 루트 페이지의 호스트명 또는 IP 주소여야 하며, --userlist는 확인할 사용자 이름 목록입니다. root@kali ./cve-2018-15131-user-enum.py --host http://mail.target.com --userlist /tmp/emails.txt 그러면 유효한 이메일이 출력됩니다! 참고:...

EmailFinder

EmailFinder EmailFinder는 검색 엔진에서 필터링된 회사 이메일을 찾도록 설계되었습니다. 이는 @회사도메인을 검색하여 수행됩니다. 목표는 검색 엔진에 최소한의 이메일만 남게 하는 것입니다. 설치: pip3 install emailfinder 업그레이드도 가능합니다: pip3 install emailfinder --upgrade 검색 엔진 google: 확인 쿠키 정책 및 Captcha 주의!. bing: 확인. baidu: 확인 요청 수 제한. bing: 헌팅 로봇 매우 빠름. 사용법 EmailFinder는 두...

EUVD-2025-35719

The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks...

CVE-2025-34255 D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration

D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...

EUVD-2018-15909

Malware in sbrugna...

EUVD-2019-11427

Malware in sbrugna...

EUVD-2011-4518

Malware in sbrugna...

CVE-2019-20890

An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions...

CVE-2025-30150 Shopware 6 allows attackers to check for registered accounts through the store-api

Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a attacker to check if a specific e-mail address has an account in the shop. Using the store-api endpoint /store-api/account/recovery-password you get the response, which indicates...

CVE-2025-2910

User enumeration in the password reset module of the MeetMe authentication service in versions prior to 2024-09 allows an attacker to determine whether an email address is registered through specific error messages...

How to Configure Email Based Account Discovery on StoreFront

...

CVE-2022-43699

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...

CVE-2019-20890

Mattermost Server prior to 5.7 contains a vulnerability that allows bypassing email address discovery restrictions. This is recorded as CVE-2019-20890 and appears across multiple sources (NVD, Red Hat, CNVD, CVE lists). The issue is described consistently as an issue in Mattermost Server before 5...

Samurai Email Discovery - Is A Email Discovery Framework That Grabs Emails Via Google Dork, Company Name, Or Domain Name

SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Screenshots Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the trick for now...

looter (поиск новых векторов атаки)

Небольшой скрипт,реализующий некоторые техники в сборе инфы и поиске новых векторов атаки: 1 non recurse tld request loot 2 soa email/domain loot 3 whois email/domain loot вводная Иногда бывают ситуации,когда требуется найти новые 'точки входа'. looter может помочь облегчить задачу - например,мож...

Graugon Forum 1.3 - SQL Injection

Graugon Forum 1.3 - SQL Injection ------------------------------------------------------------------------ --Description-- A SQL injection vulnerability in Graugon Forum 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

calexp2.txt

====================================== DISCOVERED BY: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ====================================== Example: /print/month.php?cid=&catid=SQL /print/month.php?cid=SQ...