Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

Grafana 3.0.1-7.0.1 - Server-Side Request Forgery

Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network...

bug-bounty-reports-desai-vinayak

🧩 Report Bug Bounty — Desai Vinayak 🔒 Report di bug bounty e ricerca sulle vulnerabilità di Desai Vinayak. Questo repository raccoglie report passivi e non distruttivi su vulnerabilità e prove a supporto per divulgazione coordinata e tracciamento della risoluzione. 📁 Contenuti 📂 reports/ — PDF,...

vhosts-sieve

VHosts Sieve Suche nach virtuellen Hosts unter nicht auflösbaren Domains. Installation root@kitploit: git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Verwendung Holen Sie sich eine Liste von Subdomains z. B. mit Amass root@kitploit: $ amass...

process-enumeration-stealth

🚴 process-enumeration-stealth Was ist das? Dies ist ein einfacher PoC, der es dir ermöglicht, eine Liste von PIDs zurückzugeben, die derzeit NTFS verwenden, indem das Basisgerät \ntfs\ das Windows-Dateisystem-Basisobjekt abgefragt wird. Diese Methode umgeht die Notwendigkeit, typische APIs wie...

cowcloud

CowCloud una soluzione serverless per distribuire carichi di lavoro in AWS CowCloud è stato originariamente creato per eseguire strumenti di ricognizione e scan di vulnerabilità in modo distribuito; per esempio, un caso d'uso potrebbe essere quello dei cacciatori di bug bounty. Questa soluzione è...

pegasus-neo

root@kitploit: | \ | \ | | | | / / |/ / | | | / | | | | / / | | | \ \ || \ \ |\ | || |, |,|/,|/| | |/ ███▄ █ ▓█████ ▒█████ ██ ▀█ █ ▓█ ▀ ▒██▒ ██▒ ▓██ ▀█ ██▒▒███ ▒██░ ██▒ ▓██▒ ▐▌██▒▒▓█ ▄ ▒██ ██░ ▒██░ ▓██░░▒████▒░ ████▓▒░ ░ ▒░ ▒ ▒ ░░ ▒░ ░░ ▒░▒░▒░ ░ ░░ ░ ▒░ ░ ░ ░ ░ ▒ ▒░ ░ ░ ░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

r3con1z3r

R3CON1Z3R R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence OSINT web-based footprinting can be conducted quickly and thoroughly. Footprinting is the first phase of ethical...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

Raccoon

Raccoon Strumento di Sicurezza Offensiva per Ricognizione e Raccolta Informazioni Caratteristiche Dettagli DNS Mappatura visiva DNS tramite DNS dumpster Informazioni WHOIS Dati TLS - cifrari supportati, versioni TLS, dettagli certificato e SAN Scansione porte Scansione servizi e script Fuzzing UR...

blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

wosind

Readme لـ "wosind.py" هذه الأداة مرخصة بموجب GPL GNU GPLv3. تجمع هذه الأداة العديد من إمكانيات الاستخبارات مفتوحة المصدر. تستخدم الأداة أوامر الصدفة المحلية، مثل ping، host... وموارد خارجية مثل nmap أو خدمات ويب خارجية. 1. المتطلبات الأساسية للنظام MacOS أو Linux يمكن استخدام Windows بشكل محدود...

ChaosKobra

ChaosKobra 🐍 Un altro strumento per l'enumerazione dei sottodomini per i normali, scritto in Python3. 🔧 Tecnologie e Strumenti 📚 Requisiti Python 3.9+ pip3 Installazione Usa il gestore di pacchetti pip per installare i requisiti. Se non è installato, installalo con il seguente comando...

BitLeak

BitLeak BitLeak è uno strumento Python che controlla e mostra i download torrent collegati a un dato indirizzo IP. root@kitploit: git clone https://github.com/AnkhCorp/BitLeak.git root@kitploit: pip3 install -r requirements.txt root@kitploit: python bitleak.py...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

Malicious code in @medisend/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...

terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

sdwan-harvester

SD-WAN Harvester 🌐 Framework di censimento Internet SD-WAN Avvertenze Questo progetto non è più mantenuto. È stabile e puoi ancora utilizzarlo per la scansione di SD-WAN, ma al momento il modo più consigliabile e accurato per scansionare vari elementi su Internet non solo soluzioni SD-WAN è...

thm-blue-writeup

TryHackMe — Blue | Phase 1: Aufklärung mit Nmap Kurs: Cyber Security 101 | Raum: Blue | Werkzeug: Nmap Kontext Der Raum Blue hat als Hauptziel die Verwendung von Metasploit. Allerdings konzentriert sich die erste Übung auf die Aufklärung — das Identifizieren offener Ports und Schwachstellen im Zi...