username-anarchy

Username Anarchy Версия: 0.6 20 сентября 2024 Автор: urbanadventurer Andrew Horton Домашняя страница: https://www.morningstarsecurity.com/research/username-anarchy Исходный код: https://github.com/urbanadventurer/username-anarchy/ Лицензия: MIT Описание Инструменты для генерации имён пользователе...

socialhunter

socialhunter !IMPORTANT Этот инструмент больше не работает, и мы не сможем его исправить, так как стало сложно обходить защиту социальных сетей. Сканирует указанный URL и находит сломанные ссылки на социальные сети, которые можно перехватить. Сломанные ссылки на социальные сети могут позволить...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

Namechk

! Инструмент больше не работает должным образом. Существуют гораздо лучшие альтернативы, такие как Sherlock, Maigret или whatsmyname. Namechk Инструмент OSINT, основанный на namechk.com, для проверки имен пользователей на более чем 100 веб-сайтах, форумах и социальных сетях. Использование: Поиск...

SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT은 회사나 은행을 사칭하여 피해자로부터 OTP 및 SMS 코드를 탈취할 수 있는 가장 진보되고 다재다능한 OTP 및 SMS 캡처 봇입니다. 로그인, 은행, 신용카드, Apple Pay 등에 필요한 OTP를 획득하는 데 사용할 수 있습니다. 무료 체험을 위해 https://t.me/joinchat/97w3Avm8YtNiODNk에 가입하세요. ghost-OTPBOT 정보 선택할 수 있는 다양한 모드 통화마다 고유한 텍스트 음성 변환 다국어 지원 다국가 지원 사용자 지정 발신자 ID임의의...

CVE-2026-75754

creationtimestamp| type| source ---|---|--- 2026-09-04 02:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dofqntijlhxcl 2026-09-04 03:21:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117210616103788301 2026-09-04 03:30:05+00:00| seen|...

recaptcha-phish

reCAPTCHA Phish John Hammond | September 13, 2024 이것은 2024년 8월/9월경 실제 유포 환경에서 발견된 사회공학 및 피싱 미끼를 재현하기 위한 작은 하네스입니다. 🪝 실제 유포된 미끼 원래 "사람인지 확인"이라는 위장으로 발견되었으며, 공격 벡터는 복사 및 붙여넣기입니다. 말 그대로 사용자에게 Win+R 단축키로 Windows 실행 대화 상자를 열게 한 다음, 웹 브라우저가 미리 클립보드에 복사해 둔 악성 명령을 Ctrl+V로 붙여넣도록 지시합니다. 이것이... 바보같은... 방법이긴...

CVE-2024-11252-Sassy-Social-Share-XSS

CVE-2023-XXXX: Уязвимость XSS в плагине Sassy Social Share Описание Этот проект демонстрирует отраженную уязвимость межсайтового скриптинга XSS в плагине Sassy Social Share для WordPress. Эта уязвимость может быть использована через параметр heateormastodonshare. Использование 1. PoC.html : Этот...

social_mapper

Social Mapper Этот инструмент больше не поддерживается активно; некоторые его части могут по-прежнему работать, и я буду принимать pull request'ы для его обновления ПРЕДУПРЕЖДЕНИЕ: FACEBOOK ТЕПЕРЬ ОБНАРУЖИВАЕТ ЭТО ПОСЛЕ НЕСКОЛЬКИХ СОТЕН ПОИСКОВ, ИСПОЛЬЗУЙТЕ ТОЛЬКО ОДНОРАЗОВЫЕ АККАУНТЫ FACEBOOK...

Sassy Social Share <= 3.3.3 - Cross-Site Scripting

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...

Social Login by BestWebSoft < 0.2 - Cross-Site Scripting

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. id: CVE-2017-18501 info: name: Social Login by BestWebSoft 0.2 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting

The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues. id: CVE-2017-18500 info: name: Social Buttons Pack by BestWebSof 1.1.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-buttons-pack plugin before 1.1.1 for WordPress has...

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. id: CVE-2012-4273 info: name: 2 Click Socialmedia Buttons 0.34 - Cross-Site Scripti...

WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting

The Easy Social Icons plugin = 3.0.8 for WordPress echoes out the raw value of $SERVER'PHPSELF' in its main file. On certain configurations including Apache+modPHP this makes it possible to use it to perform a reflected cross-site scripting attack by injecting malicious code in the request path...

Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting

Social Auto Poster plugin for WordPress versions up to 5.3.14 contains a stored cross-site scripting caused by insufficient sanitization and escaping of 'mapTypes' parameter in the 'wpwautopostermapwordpressposttype' AJAX function, letting unauthenticated attackers inject and execute arbitrary...

WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin = 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely. id: CVE-2025-14726 info: name: WordPress Widgets for Social Photo...

SteaLinG

SteaLinG v3.1 Описание SteaLinG — это фреймворк для тестирования на проникновение с открытым исходным кодом, предназначенный для социальной инженерии. После взлома вы можете загрузить его на устройство жертвы и запустить. Отказ от ответственности: Этот инструмент предназначен только для...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...