linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

Fourteen_Endpoints

Los intermediarios Empresas fantasma dentro del relay de privacidad de Apple Una LLC anónima de Delaware publica una app de oración bíblica, un diario personal y una herramienta de identificador de llamadas en el App Store. Esa entidad opera infraestructura de relay cifrado dentro de la red de...

ARC-Browser-Address-Bar-Spoofing-PoC

Suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS CVE-2024-25733 PoC de suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS Exploit PoC Prueba de concepto root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.rando...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

WordPress Button Generator <2.3.3 - Remote File Inclusion

WordPress Button Generator before 2.3.3 within the wow-company admin menu page allows arbitrary file inclusion with PHP extensions as well as with data:// or http:// protocols, thus leading to cross-site request forgery and remote code execution. id: CVE-2021-25052 info: name: WordPress Button...

CVE-2021-44228-Advisories

CVE-2021-44228-Avisos Por favor, abre Issues para incluir un aviso / No PRs. Por favor revisa esta lista, tuvo más tracción que la mía : https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592 Esta lista incluye todos los avisos de empresas, incluso si solo están confirmando que no usan...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

CVE-2026-55610 InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.1, in InvoiceShelf's multi-company installations, any user who is an Owner of one company can read and overwrite any user account in any other...

EUVD-2026-85338

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.1, in InvoiceShelf's multi-company installations, any user who is an Owner of one company can read and overwrite any user account in any other...

coeus-ci

Coeus CI Inteligencia Competitiva que lo ve todo. Nombrado en honor a Coeus SEE-us, el Titán griego de los cien ojos de la mente inquisitiva — cuyo nombre significa literalmente "indagar". CI significa Inteligencia Competitiva. Una herramienta OSINT de inteligencia empresarial que construye...

CVE-2025-22777

CVE-2025-22777 GiveWP – Plugin de Donaciones y Plataforma de Recaudación de Fondos = 3.19.3 - Inyección de Objetos PHP No Autenticada Descripción El plugin GiveWP – Plugin de Donaciones y Plataforma de Recaudación de Fondos para WordPress es vulnerable a la Inyección de Objetos PHP en todas las...

sentryexploit

MobileIron Sentry CVE-2023-38035 extracción de información Características Extraer nombre de la empresa y correo de contacto Prueba de vulnerabilidad Uso root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Compan...

CVE-2026-90796 itsourcecode Leave Management System index.php sql injection

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

EUVD-2026-77616

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-90796: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

PT-2026-91271

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-88894 Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...

CVE-2026-88894: Incorrect Authorization

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...