33 matches found
HatCloud
HatCloud - 開発終了 HatCloudはRubyで構築されています。CloudFlareをバイパスして実際のIPアドレスを発見します。これは、サーバーやウェブサイトをテストする必要がある場合に役立ちます。DDoS（Denial of Service）やDoSに対する保護をテストすることができます。...
SharpSniper
SharpSniper Red Teamのエンゲージメントでは、単にドメイン管理者を達成するだけでは不十分なことがよくあります。クライアントによっては、ドメイン内の特定のユーザー（例えばCEO）が侵害される可能性があるかどうかを確認したい場合があります。 SharpSniperは、これらのユーザーのIPアドレスを検出し、その端末をターゲットにできるようにするシンプルなツールです。 このツールを使用するには、ドメインコントローラーのログを読み取る権限が必要です。...
fav-up
Fav-up 파비콘 아이콘에서 시작하여 Shodan을 사용하여 실제 IP를 조회합니다. 설치 pip3 install -r requirements.txt Shodan API 키 무료가 아닌 사용법 CLI API 키를 전달하는 방법을 먼저 정의하세요: -k 또는 --key : 키를 stdin으로 전달 -kf 또는 --key-file : 키를 가져올 파일 이름 전달 -sc 또는 --shodan-cli : Shodan CLI에서 키 가져오기 초기화한 경우 현재 이 도구는 세 가지 방법으로 사용할 수 있습니다: -ff 또는...
InfoG
InfoG v2.0 InfoG se pronuncia Info-yi es una herramienta de recopilación de información. Puedes encontrar direcciones IP, detalles de números de teléfono y mucho más. Cómo usar: Primero clona el repositorio: git clonehttps://github.com/Tech-Sec/InfoG.git Cambia tu directorio a la carpeta InfoG: c...
CloudFail
CloudFail CloudFailは、Cloudflareで保護されたターゲットに関する十分な情報を収集し、サーバーの位置を特定することを目的とした戦術偵察ツールです。すべてのリクエストをTorでマスクし、現在3つの異なる攻撃フェーズを持っています。 1. DNSDumpster.comを使用したDNS設定ミスのスキャン。 2. Crimeflare.comデータベースのスキャン。 3. 2500以上のサブドメインに対するブルートフォーススキャン。 このプロジェクトへの貢献は自由です。アイデアや改善があれば、プルリクエストを送ってください！ 免責事項 このツールはPoC（Proof ...
CF-Hero
CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero は、Cloudflare によって保護された Web アプリケーションの実 IP アドレスを発見するために開発された、包括的な偵察ツールです。複数の情報源から多角的なインテリジェンス収集を行います。 DNS Reconnaissance 現在の DNS レコード（A、TXT） 履歴 DNS データの分析 関連ドメインの...
Malicious code in @edgecommons/streamlog-node (npm)
The @edgecommons/streamlog-node package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...
Malicious code in chat-adapter-zoom (npm)
The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...
Malicious code in salesforce-vscode-slds (npm)
The salesforce-vscode-slds package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a...
MAL-2026-10234 Malicious code in slds-lsp-client (npm)
The slds-lsp-client package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Salesforce SLD...
MAL-2026-10228 Malicious code in chat-adapter-zoom (npm)
The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...
Malicious code in @logdna-web/styles (npm)
The @logdna-web/styles package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...
MAL-2026-10229 Malicious code in enbd-react-error-boundry (npm)
The enbd-react-error-boundry package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization an 'enb...
EUVD-2008-5819
Malware in sbrugna...
PT-2024-15799 · Unknown · Anything-Llm
Name of the Vulnerable Software and Affected Versions: AnythingLLM affected versions not specified Description: If an instance of AnythingLLM is hosted on an internal network and the attacker is granted a permission level of manager or admin, they could link-scrape internally to resolve IPs of...
CVE-2022-3596
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...
SUSE CVE-2018-25022
The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...
CVE-2018-25022
The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...
DEBIAN-CVE-2018-25022
The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...
Osmedeus v1.5 - Fully Automated Offensive Security Framework For Reconnaissance And Vulnerability Scanning
Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Installation git clone https://github.com/j3ssie/Osmedeus cd Osmedeus ./install.sh This install only focus on Kali linux, check more install on Wiki page How to use I...