Reconky-Automated_Bash_Script

Reconky-自动化Bash脚本 root@kitploit: \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / 用法 ./reconky.sh 关于 Reconky 是一个用 bash 编写的脚本，用于自动化侦察和信息收集任务。该 Bash...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: root@kitploit: ▶ cat domains.txt | waybackurls urls Install: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

JWTXposer

JWTXposer バグバウンティハンターとレッドチーム向け自動JWT発見・分析ツール JWTXposerとは？ JWTXposer は、Wayback Machine などの公開アーカイブをスキャンし、漏洩した JWT トークン を抽出してデコードし、悪用可能な情報を特定する 自動偵察ツール です。 バグバウンティハンター 、レッドチーム 、CTFプレイヤー 向けに構築されており、手動での JWT ハンティングを排除し、userId、accesstoken、scope、authType などの おいしいクレーム を強調表示します。 自動化された 受動的偵察 、ライブエンドポイント分析...

goodoldsearch-oss

Good Old Search 使用精确短语、站点过滤器、排除项、日期范围、文件类型以及一键式链接，跨搜索引擎和垂直搜索目标构建精准搜索查询。 这不是搜索引擎、元搜索聚合器、爬虫或 API 代理。它是一个本地静态查询构建器，用于打开你选择的搜索引擎。 该应用具有五个界面： 简单：日常精确搜索构建器，位于 index.html。 高级搜索实验室：面向专业操作符的构建器，位于 advanced.html，支持 Google 搜索语法、文件类型搜索、站点/路径过滤器、标题/URL/正文操作符、日期范围、预设以及原始操作符行。 Shodan：一个 Shodan 查询构建器和搜索助手，位于...

CWFF

CWFF - 用于模糊测试的自定义单词列表 CWFF 是一个工具，它通过并发以最高速度为您创建高质量的特殊模糊测试/内容发现单词列表，并且它深受 @tomnomnom 的 Who, What, Where, When, Wordlist NahamCon2020 启发。 用法 root@kitploit: CWFF -h --threads --github --subdomains --recursive --js-libraries --connected-websites --juicy-files --use-filter-model -o domain positional...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

NextRecon

NextRecon NextRecon 是一款基于 Python 的简易侦察工具，专为漏洞赏金猎人、安全研究人员和渗透测试人员设计。它通过从 Wayback Machine 收集存档 URL 并调用 BreachCollection API 获取泄露的凭据，从而执行被动侦察。它还会从存档 URL 中提取唯一的 GET 参数，供进一步测试使用（例如模糊测试或注入分析）。 🔗 功能特性 存档 URL 收集 从 Wayback Machine 收集指定域名的所有 URL（可选包含子域名）。 泄露凭据查询 调用 BreachCollection API 查找相关的凭据泄露信息，支持以下方式： 域...

urx

从 OSINT 归档中提取 URL，用于安全洞察。 Urx 是一款命令行工具，旨在从 OSINT 归档（如 Wayback Machine 和 Common Crawl）中收集 URL。基于 Rust 构建以实现高效，它利用异步处理快速查询多个数据源。该工具简化了为指定域名收集 URL 信息的过程，提供全面的数据集，可用于多种目的，包括安全测试和分析。 特性 从多个数据源并行获取 URL（Wayback Machine、Common Crawl、OTX、Arquivo.pt） 默认无密钥：Wayback、Common Crawl、OTX、Arquivo.pt 和 URLScan（匿名）均...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

TheTimeMachine

🚀 TheTimeMachine v3.0 - 将 Wayback 武器化，用于侦察、漏洞赏金、OSINT 等！ 你在电影和漫画里听说过时间旅行，对吧？好吧，这不再是虚构的了 😎。 TheTimeMachine 通过从 Wayback Machine 抓取存档 URL，让你能够挖掘任何 Web 应用的过去——并帮助你发现敏感、被遗忘或已弃用的端点，以便进一步利用。 无论你是热衷于漏洞赏金、红队行动，还是单纯热爱经典侦察，这个工具都是为了让我自己的侦察工作流更快、更简洁、更高效而构建的。不再需要同时折腾多个脚本——TheTimeMachine 一次搞定。 🧩 参展记录 会议| 年份| 主题...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

Omise: PII Exposure via Email Confirmation Link – Email Embedded in Token & Leaked via Wayback Machine

The vulnerability involved the exposure of personally identifiable information PII, specifically email addresses, through an email confirmation link used by Omise. The email address was embedded directly in a token that was visible in the URL. This token was subsequently archived by the Wayback...

Internet Archive (Archive.org) Goes Down Following “Power Outage” (Updated)

The Internet Archive Archive.org, home to the Wayback Machine, is temporarily offline due to a reported power outage.…...

Internet Archive attackers email support users: “Your data is now in the hands of some random guy”

Those who hacked the Internet Archive haven't gone away. Users of the Internet Archive who have submitted helpdesk tickets are reporting replies to the tickets from the hackers themselves. Internet Archive, most known for its Wayback Machine, is a digital library that allows users to look at...

Internet Archive Breach Exposes 31 Million Users

The hack exposed the data of 31 million users as the embattled Wayback Machine maker scrambles to stay online and contain the fallout of digital—and legal—attacks...

WebSecProbe - Web Security Assessment Tool, Bypass 403

A cutting-edge utility designed exclusively for web security aficionados, penetration testers, and system administrators. WebSecProbe is your advanced toolkit for conducting intricate web security assessments with precision and depth. This robust tool streamlines the intricate process of...

Arsenal - Recon Tool installer

Arsenal is a Simple shell script Bash used to install the most important tools and requirements for your environment and save time in installing all these tools. Tools in Arsenal Name | description ---|--- Amass | The OWASP Amass Project performs network mapping of attack surfaces and external...

Planet Labs: Api data leak

A security vulnerability was identified where sensitive API keys were exposed through archived data accessible via the Wayback Machine. Some of these API keys were found to be valid...

Logitech: Steal any users `access_token` via open redirect in https://streamlabs.com/global/identity?popup=1&r=

Heyy there, After reading the disclosed report 1178239, I started to look for bypasses but I found that it's restricted to only streamlabs.com and merch.streamlabs.com , providing any other domain or subdomain of streamlabs.com gives an error instead of the 302 redirect. From wayback machine...