FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

The tracing method of this honeypot targets red team members using mobile hotspots. The honeypot directly obtains the attacker's phone number for tracing. It catches them every time. Red team members, be careful. First, when you open the website, it monitors whether the F12 console is opened. If...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

Moriarty-Project

Moriarty Project Remastered V4.1.2. Documentation Page https://azizkpln.github.io/moriartyproject/ About Moriarty Project is a powerful web based phone number investigation tool. It has 6 features and it allows you to choose either all features, or the features you like. You can visit documentati...

whatsapp-census

Hey there! You are using WhatsApp This is the github repository for the extended version of the paper Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Abstract WhatsApp, with 3.5 billion active accounts as of early 2025, is the world's largest instan...

PhoneNumber-OSINT

PhoneNumber-OSINT An OSINT tool for gathering information about phone numbers It was created by Spider Anongreyhat Anonspidey Screenshot How To install PhoneNumber-OSINT on termux: root@kitploit: apt update && apt upgrade apt install python3 apt install git apt install pip git clone...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

Osint-Sync

Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...

Vaim-sms

Vaim-sms What is Vaim-sms ? This is sms bomber who send otp in target phone number unlimitly. Many times you just want to annoy or play a prank on your friends. If you find yourself in that situation then this SMS Bomber is the perfect tool for you! You can send unlimited SMS to anyone. This...

TrueCalle-Bot

TrueCalle-Bot TrueCaller Python Bot Search about Phone Numbers and Print Results in terminal Made by hossamsalem23 First : Download Chrome webdriver root@kitploit: https://chromedriver.chromium.org/downloads Installation root@kitploit: git clone https://github.com/hossamsalem23/TrueCalle-Bot cd...

phoneinfoga

Framework de recopilación de información para números de teléfono Documentación • Documentación de la API • Artículo de blog relacionado Acerca de PhoneInfoga es una de las herramientas más avanzadas para escanear números de teléfono internacionales. Permite primero recopilar información básica...

osint-pattern-analyzer

OSINT Pattern Analyzer Tool for automating OSINT investigations across multiple identity vectors phone numbers, usernames and future email support, designed to extract structured data and enable pattern detection and correlation analysis. Features Phone OSINT Search phone numbers across multiple...

InfoLeak-Scanner

InfoLeak-Scanner Docker First run docker run --rm -p 8000:80 siwecos/infoleak-scanner. Open your browser and use the scanner: http://localhost/?url= Install Get php5, curl and a webserver: root@kitploit: sudo apt-get install apache2 php5 php5-curl Copy application into webserver: root@kitploit: c...

CVE-2022-28601

CVE-2022-28601 A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor Vulnerability Details Risk : Medium Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Disclosed by: Flaviu Popescu Description: Two-Factor Authentication Bypass...

telegram-phish-simulator

⚠️ Telegram Phishing Simulator – Educational Security Tool DO NOT USE THIS CODE FOR ILLEGAL ACTIVITIES. This repository is a simulation built for cybersecurity education, awareness, and authorized lab-based testing only. 📚 Table of Contents About Contents Safe Lab Setup How to Run Simulated Attack...

Astra Linux – Vulnerability in Zabbix

Zabbix allows for the configuration of SMS notifications. AT command injection occurs on the “Zabbix Server” because there is no validation of the “Number” field either on the web interface or on the Zabbix server side. An attacker can send specially crafted phone numbers via SMS and execute...

escort-network-osint

陪护网络OSINT调查 概述 本项目分析跨多个平台的陪护相关列表网络，识别共享基础设施、身份复用和集中协调的模式。 目标 识别个人资料、电话号码与平台之间的关系 检测身份复用和轮换的模式 分析潜在的有组织活动指标 关键发现 电话号码在多个身份间被重复使用 存在单人、双人及团体形式的个人资料 跨平台分发策略 集中协调的强烈迹象 查看完整发现：findings/findings.md 数据结构 rawdata/ → 原始数据集（Excel） entities/ → 结构化实体（电话号码、人员、个人资料、平台） evidences/ → 截图与证据 analysis/ → 分析笔记...

CVE-2026-14567 WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...

CVE-2026-14832

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...

CVE-2026-14832 ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...