CloudFail

CloudFail CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases. 1. Misconfigured DNS...

InfoG

InfoG v2.0 InfoG it's Info-jee is an information gathering tool. You can find ip addresses, phone number details and much more. How to use: First clone the repository: git clonehttps://github.com/Tech-Sec/InfoG.git Change your directory to InfoG folder: cd InfoG Then type: pip install -r...

HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

SharpSniper

SharpSniper Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires...

CF-Hero

CF-Hero CF-Hero 무엇인가요? • 기능 • 배경 • 설치 • 사용법 • cf-hero 실행 • ZoomEye 스폰서 • 할 일 무엇인가요? CF-Hero는 Cloudflare로 보호되는 웹 애플리케이션의 실제 IP 주소를 발견하기 위해 개발된 종합적인 정찰 도구입니다. 다양한 방법을 통해 다중 소스 정보 수집을 수행합니다. DNS 정찰 현재 DNS 레코드 A, TXT 과거 DNS 데이터 분석 연관 도메인 발견 정보 소스 ZoomEye 검색 엔진 Censys 검색 엔진 Shodan 검색 엔진 SecurityTrails...

fav-up

Fav-up 파비콘 아이콘에서 시작하여 Shodan을 사용하여 실제 IP를 조회합니다. 설치 pip3 install -r requirements.txt Shodan API 키 무료가 아닌 사용법 CLI API 키를 전달하는 방법을 먼저 정의하세요: -k 또는 --key : 키를 stdin으로 전달 -kf 또는 --key-file : 키를 가져올 파일 이름 전달 -sc 또는 --shodan-cli : Shodan CLI에서 키 가져오기 초기화한 경우 현재 이 도구는 세 가지 방법으로 사용할 수 있습니다: -ff 또는...

unwaf

Unwaf Unwaf는 수동적 기법 을 사용하여 WAF 우회를 식별하는 데 도움을 주기 위해 설계된 Go 도구입니다. 여러 탐색 방법을 결합하고 HTML 유사도 비교, SSL 인증서 지문, HTTP 헤더 분석을 통해 후보를 검증함으로써 WAF/CDN 뒤에 있는 실제 오리진 IP를 발견하는 과정을 자동화합니다. Unwaf는 제가 이 LinkedIn 게시물에서 설명한 단계들을 자동화한 것입니다: Passive WAF bypassing 현재 버전: 3.0.0 — 버전 기록은 CHANGELOG.md를 참조하세요. 목차 작동 방식 탐색...

FUCK-CDN

FUCK-CDN 모든 수단을 동원해 CDN의 속내를 들춰내고, 실제 IP를 찾아낸다. Claude Code를 위해 만들어진 자동화된 CDN 원본 서버 추적 스킬Skill. 대상 도메인을 입력하면 우선순위에 따라 40+ 가지 OSINT 방법을 자동으로 실행하고, 증거 체인을 구축하여 최종 판정을 출력한다. ╔══════════════════════════════════════════════════╗ ║ 실제 IP: 103...32 ║ ║ 신뢰도: 확정 95%+ ║ ║ 소재지: 중국 광둥성 선전 · 텔레콤 ║ ║ 증거 체인: S...

Malicious code in @edgecommons/streamlog-node (npm)

The @edgecommons/streamlog-node package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

Malicious code in salesforce-vscode-slds (npm)

The salesforce-vscode-slds package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a...

MAL-2026-10228 Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

MAL-2026-10234 Malicious code in slds-lsp-client (npm)

The slds-lsp-client package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Salesforce SLD...

Malicious code in @logdna-web/styles (npm)

The @logdna-web/styles package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...

MAL-2026-10229 Malicious code in enbd-react-error-boundry (npm)

The enbd-react-error-boundry package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization an 'enb...

EUVD-2008-5819

Malware in sbrugna...

PT-2024-15799 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: AnythingLLM affected versions not specified Description: If an instance of AnythingLLM is hosted on an internal network and the attacker is granted a permission level of manager or admin, they could link-scrape internally to resolve IPs of...

CVE-2022-3596

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...

SUSE CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...