BridgeKeeper

BridgeKeeper 抓取 来自搜索引擎 LinkedIn 资料中的员工姓名 搜索 通过 Hunter.io 获取邮箱和用户名格式 转换 姓名为指定的用户名格式 使用方法 root@kitploit: usage: bridgekeeper.py flags BridgeKeeper - v1.0.0 options: -h, --help show this help message and exit Targets: -c COMPANY, --company COMPANY target company to search for LinkedIn profiles e.g...

Zen

查找 GitHub 用户的电子邮件地址 查找用户的电子邮件地址 python zen.py username 或 python zen.py https://github.com/username 查找仓库贡献者的电子邮件地址 python zen.py https://github.com/username/repository 查找组织成员的电子邮件地址 python zen.py organization --org 或 python zen.py https://github.com/orgs/organzation 将 JSON 输出保存到文件 python zen.py...

Samurai

Samurai Email Discovery SED 是一个完全用 BASH 编写的电子邮件发现框架，通过谷歌 dork、公司名称或域名来抓取电子邮件。 要求 apt-install lynx 可能还会有更多功能，例如 OSINT 选项、凭据重用发现以及 torsocks 实现——但目前已足够使用。 享受 Twitter: @0x3curity. 团队: @AnonyInfo...

CVE-2018-15131

Zimbra Collaboration 用户枚举脚本 CVE-2018-15131 使用方法 参数 --host 必须是 Zimbra Collaboration Web 应用程序根页面的主机名或 IP 地址，而 --userlist 是要检查的用户名列表。 root@kitploit: root@kali ./cve-2018-15131-user-enum.py --host http://mail.target.com --userlist /tmp/emails.txt 然后它会输出有效的电子邮件！...

EmailFinder

EmailFinder EmailFinder 旨在查找被搜索引擎过滤的公司邮件。通过搜索 @company.com 实现。其目标是让搜索引擎中的邮件数量保持最少。 安装： root@kitploit: pip3 install emailfinder 升级也可通过以下方式： root@kitploit: pip3 install emailfinder --upgrade 搜索引擎 google: 正常（注意 Cookie 政策和验证码！）。 bing: 正常。 baidu: 正常（少量请求）。 bing: Hunting Robots 速度极快。 用法 EmailFinder...

EUVD-2025-35719

The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks...

CVE-2025-34255 D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration

D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...

EUVD-2018-15909

Malware in sbrugna...

EUVD-2019-11427

Malware in sbrugna...

EUVD-2011-4518

Malware in sbrugna...

CVE-2019-20890

An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions...

CVE-2025-30150 Shopware 6 allows attackers to check for registered accounts through the store-api

Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a attacker to check if a specific e-mail address has an account in the shop. Using the store-api endpoint /store-api/account/recovery-password you get the response, which indicates...

CVE-2025-2910

User enumeration in the password reset module of the MeetMe authentication service in versions prior to 2024-09 allows an attacker to determine whether an email address is registered through specific error messages...

How to Configure Email Based Account Discovery on StoreFront

...

CVE-2022-43699

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...

CVE-2019-20890

Mattermost Server prior to 5.7 contains a vulnerability that allows bypassing email address discovery restrictions. This is recorded as CVE-2019-20890 and appears across multiple sources (NVD, Red Hat, CNVD, CVE lists). The issue is described consistently as an issue in Mattermost Server before 5...

Samurai Email Discovery - Is A Email Discovery Framework That Grabs Emails Via Google Dork, Company Name, Or Domain Name

SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Screenshots Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the trick for now...

looter (поиск новых векторов атаки)

Небольшой скрипт,реализующий некоторые техники в сборе инфы и поиске новых векторов атаки: 1 non recurse tld request loot 2 soa email/domain loot 3 whois email/domain loot вводная Иногда бывают ситуации,когда требуется найти новые 'точки входа'. looter может помочь облегчить задачу - например,мож...

Graugon Forum 1.3 - SQL Injection

Graugon Forum 1.3 - SQL Injection ------------------------------------------------------------------------ --Description-- A SQL injection vulnerability in Graugon Forum 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

calexp2.txt

====================================== DISCOVERED BY: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ====================================== Example: /print/month.php?cid=&catid=SQL /print/month.php?cid=SQ...