SMSBotBypass

SMSBotBypass Bypassa le verifiche SMS di Paypal, Instagram, Snapchat, Google, 3D Secure e molti altri... usando un Bot Discord o l'API privata. È davvero semplice. Immagina che il tuo amico abbia un account Snapchat, provi a reimpostare la sua password usando il sistema SMS : riceverà il codice d...

fb-phisher-python

Facebook Phishing Ursprünglicher Autor : Arslan Mughal VON : arjunindia Ursprüngliches Repository : https://github.com/arslanmughal5566/facebookphishing Über das Skript : Mit diesem Skript können Sie Facebook-Login-Anmeldedaten mit einigen Social-Engineering-Fähigkeiten stehlen. Voraussetzungen :...

awesome-osint

Awesome OSINT Una lista curata di strumenti e risorse OSINT incredibilmente fantastici. L'open-source intelligence OSINT è l'intelligence raccolta da fonti pubblicamente disponibili. Nella comunità dell'intelligence IC, il termine "open" si riferisce a fonti palesi e pubblicamente disponibili in...

CVE-2019-9978

CVE-2019-9978 CVE-2019-9978 - PoC RCE nel plugin Social WarFare system'cat /etc/passwd' Salvalo con il nome file: payload.txt e caricalo su un server. L'URI dovrebbe essere simile a: https://yoursite.com/payload.txt. Infine, fornisci le opzioni --target e --payload-uri: root@kitploit: $ python...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

social-engineer-toolkit

The Social-Engineer Toolkit SET Il Social-Engineer Toolkit è un framework open-source per test di penetrazione, progettato per valutazioni autorizzate di ingegneria sociale. SET fornisce vettori d'attacco guidati per team di sicurezza che necessitano di testare la consapevolezza degli utenti,...

CVE-2019-9978

CVE-2019-9978 – प्रमाण की अवधारणा PoC CVE-2019-9978 भेद्यता के लिए कार्यात्मक PoC, जो Social Warfare = 3.5.2 प्लगइन को प्रभावित करता है, जो WordPress में Remote Code Execution RCE की अनुमति देता है। 📌 विवरण यह एक्सप्लॉइट पैरामीटर swpdebug=loadoptions का दुरुपयोग करता है ताकि एक दूरस्थ पेलोड लोड...

social-analyzer

Social Analyzer - API, CLI e aplicativo Web para analisar e encontrar o perfil de uma pessoa em mais de 1000 redes sociais \ sites. Inclui diferentes módulos de análise e detecção, e você pode escolher quais módulos usar durante o processo de investigação. Os módulos de detecção utilizam um...

Sassy Social Share <= 3.3.3 - Cross-Site Scripting

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting

The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues. id: CVE-2017-18500 info: name: Social Buttons Pack by BestWebSof 1.1.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-buttons-pack plugin before 1.1.1 for WordPress has...

Social Login by BestWebSoft < 0.2 - Cross-Site Scripting

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. id: CVE-2017-18501 info: name: Social Login by BestWebSoft 0.2 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin = 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely. id: CVE-2025-14726 info: name: WordPress Widgets for Social Photo...

Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting

Social Auto Poster plugin for WordPress versions up to 5.3.14 contains a stored cross-site scripting caused by insufficient sanitization and escaping of 'mapTypes' parameter in the 'wpwautopostermapwordpressposttype' AJAX function, letting unauthenticated attackers inject and execute arbitrary...

WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting

The Easy Social Icons plugin = 3.0.8 for WordPress echoes out the raw value of $SERVER'PHPSELF' in its main file. On certain configurations including Apache+modPHP this makes it possible to use it to perform a reflected cross-site scripting attack by injecting malicious code in the request path...

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. id: CVE-2012-4273 info: name: 2 Click Socialmedia Buttons 0.34 - Cross-Site Scripti...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

SocialPwned

SocialPwned SocialPwned è uno strumento OSINT che consente di ottenere le email, da un target, pubblicate sui social network come Instagram, Linkedin e Twitter per trovare le possibili fughe di credenziali in PwnDB o Dehashed e ottenere informazioni sull'account Google tramite GHunt. Lo scopo di...

fluxion

Fluxion è il futuro degli attacchi MITM WPA Fluxion è uno strumento di ricerca per audit di sicurezza e ingegneria sociale. È un remake di linset di vk496 con si spera meno bug e più funzionalità. Lo script tenta di recuperare la chiave WPA/WPA2 da un punto di accesso target tramite un attacco di...

socialhunter

socialhunter !IMPORTANT Questo strumento non funziona più e non saremo in grado di risolverlo poiché è diventato difficile bypassare le protezioni dei social media. Esegue la scansione dell'URL fornito e trova i link dei social media rotti che possono essere dirottati. I link social rotti possono...