DorXNG

DorXNG 🔎🌎 DorXNG 是一个现代化解决方案，用于通过多个上游搜索提供商的先进搜索引擎操作符来收集 OSINT 数据。在后端，它利用了一个专门构建的容器化镜像 SearXNG，这是一个自托管、可破解、注重隐私的元搜索引擎。 我们的 SearXNG 实现将所有搜索查询通过 Tor 网络路由，同时每十秒通过 Tor 的 MaxCircuitDirtiness 配置指令刷新电路。我们还禁用了 SearXNG 的所有客户端超时功能。这些设置允许规避在多次重复搜索查询中常见的搜索引擎限制。 DorXNG 客户端应用程序使用 Python3 编写，并与 SearXNG API...

Malicious code in prism-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6570c9056bf020fdada0366045c4e91a0f5cb21171fe27df9fcea82259e7809 The package declares preinstall: "node index.js", which fires automatically on npm install. index.js collects host identifiers os.hostname,...

Malicious code in @openrepl/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcd297122e7aac00cd0d3d92fcb5f1fc00b6c558571a037b5447eb64bd443b8 package.json declares a preinstall hook node index.js that runs automatically on npm install. index.js shells out via childprocess to execute curl -X...

Mimir - Smart OSINT Collection Of Common IOC Types

Smart OSINT collection of common IOC types. Overview This application is designed to assist security analysts and researchers with the collection and assessment of common IOC types. Accepted IOCs currently include IP addresses, domain names, URLs, and file hashes. The title of this project is nam...

pwnedOrNot v1.2.6 - OSINT Tool to Find Passwords for Compromised Email Addresses

OSINT Tool to Find Passwords for Compromised Email Accounts pwnedOrNot uses haveibeenpwned v2 api to test email accounts and tries to find the password in Pastebin Dumps. Featured OSINT Collection Tools forPastebin - Jake Creps Get In Touch Twitter Telegram Blog Changelog Features haveibeenpwned...