Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...

mavd

mavd Mobile Application Vulnerability Detection Receives a domain or APK name from CLI, identifies most applications tied to the domain and downloads the APKs locally. It then reverses the APK to a jar file using dex2jar, extracts the class files and objects then searches the code for 'secret' ty...

cc.py

cc.py Extracting URLs of a specific target based on the results of "commoncrawl.org". Updated to v.0.3 | Whats new: 65% faster proceeding Specify a year via -y/--year, e.g.: -y 2018 Specify an output file via -o/--out, e.g.: -o whatever.txt Crawl all pages for a specific index -i/--index, e.g.:...

wordlist_generator

wordlistgenerator Tool wordlistgenerator generates unique to your target wordlist with techniques mentioned in tomnomnom's video "Who, What, Where, When". It takes URLs from gau to extract directories, file names or words on pages. As additional feature it can extract HTML comments. By default to...

Apkatshu

Apkatshu Apkatshu its a Tool for extracting urls , emails , ip address , and interesting data from APK files root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for...

RTF-Cleaner

RTF-Cleaner RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759...

pmg

pmg Extract parameters/paths from urls usage : $ cat urls.txt | python3 PmG.py results Save results $ cat urls.txt | python3 PmG.py ResultsFile.txt here you can add more parameters/paths using regex :D root@kitploit: wordlist = r'url=|password=|link=|u=|word=|username=|linkid=', r'+CSCOU+',...

fses

fses Fucking Search Engines Scraper - 検索エンジンからURLをスクレイピングするPythonライブラリ スクレイピングする検索エンジン root@kitploit: Ask Bing DuckDuck GO UOL Yahoo インストール root@kitploit: git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt 使い方 Askを使用した簡単な検索 root@kitploit: from...

unfurl

unfurl 提取 stdin 提供的 URL 的各个部分 安装 如果你已经安装并配置好 Go： root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest 否则，下载适用于你平台的最新二进制文件，解压后将其移动到 $PATH 中的某个位置（例如 /usr/bin/）： root@kitploit: ▶ wget https://github.com/tomnomnom/unfurl/releases/download/v0.0.1/unfurl-linux-amd64-0.0.1.tgz ▶ tar xzf...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 HTML属性からURLをクロールインで高速に取得するツール。@omespino Tweetに触発され、Chrome DevTools Protocolを通じてJavaScriptを評価することでsrc、href、url、actionの値を抽出可能です。 リソース インストール バイナリから ソースから GitHubから 使い方 基本使用 フラグ 例 単一URL リストからURL 標準入力から ライブラリ TODO ヘルプとバグ...

misp-extractor

MISP抽出ツール このコードは、指定されたMISP（Malware Information Sharing Platform）サーバーに接続し、指定された数のイベントを解析して、イベント内で見つかったIPアドレス、URL、MD5ハッシュを3つの別々のファイルに書き込みます。 使用方法 このスクリプトを使用するには、MISPインスタンスのURLと有効なAPIキーを指定する必要があります。その後、MISPConnector.runメソッドを呼び出して属性を取得し、ファイルに保存できます。 コードを使用するには、以下のコマンドを実行します： root@kitploit: python3...

jsluicepp

📄 Table of Contents 👋 Introduction 🛠️ Setup 📝 Usage 📜 Features Monitor URLs Send to Repeater Secrets Secret Notifications Copy URL Positive/Negative Match In-scope only In-line Tags Hide Duplicates Show Parameterized Import/Export Save Settings 🤝 Contributors 👋 Introduction jsluice++ is a Burp...

jsluice

jsluice jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. If you want to do those things right away: look at the command-line tool. If you want to integrate jsluice's capabilities with your own project: look ...

RTF-Cleaner

RTF-Cleaner RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically. Use this tool to statically find URLs in obfuscated RTF documents. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' If the built in...

GHSA-FXGQ-9M89-CXJ9 eml_parser has a URL extraction bypass via HTML entities in URLs

Summary emlparser performs certain validations on potential URL strings to discard bogus values. In versions prior to 3.0.2, this validation was performed before unescaping any HTML entities that might occur in the string. This caused the library to wrongfully reject valid URLs that use HTML...

eml_parser has a URL extraction bypass via HTML entities in URLs

Summary emlparser performs certain validations on potential URL strings to discard bogus values. In versions prior to 3.0.2, this validation was performed before unescaping any HTML entities that might occur in the string. This caused the library to wrongfully reject valid URLs that use HTML...

CVE-2026-55618 eml_parser: URL extraction bypass via HTML entities in URLs

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

EUVD-2026-65697

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...