datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

NextRecon

NextRecon NextRecon is a simple Python-based reconnaissance tool designed for bug bounty hunters, security researchers, and penetration testers. It performs passive recon by collecting archived URLs from the Wayback Machine and fetching leaked credentials from the BreachCollection API. It also...

emploleaks

EmploLeaks EmploLeaks es una herramienta de OSINT Open Source Intelligence con una interfaz CLI , diseñada para descubrir y correlacionar información sobre empleados de una empresa objetivo. Permite recopilar perfiles de LinkedIn, generar emails corporativos potenciales, buscar credenciales...

WireTapper

📡 WireTapper !NOTE Wireless OSINT & Signal Intelligence Platform WireTapper is a wireless OSINT tool designed to discover, map, and analyze radio-based devices using passive signal intelligence. It provides investigators, researchers, and security analysts with real-time visibility into the...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

SSHBuster

SSHBuster SSHBuster is a powerful command-line SSH brute-forcing tool designed for ethical hacking and penetration testing. It performs dictionary-based attacks to find valid SSH login credentials efficiently. Features Brute-force SSH servers using different username and password combinations...

Invoke-CleverSpray

Invoke-CleverSpray Password Spraying Script detecting current and previous passwords of Active Directory User by @flelievre Options: -Password: Password to spray. -PasswordFile: Path to file containing a list of passwords to spray. -Username: samAccountName of the user to target. -UsernamesFile:...

CVE-2019-17240_Bludit-BF-Bypass

CVE-2019-17240 Exploit/PoC - Bludit Brute-force Mitigation Bypass Exploit Code for CVE-2019-17240 aka Bludit = 3.9.2 Bruteforce Mitigation Bypass Exploit Links: ExploitDB-48942 PacketStorm Expected outcome: Discover login credentials, bypassing Brute-force Mechanism on host running Bludit =3.9.2...

github-dorks

GitHub Dorks GitHub Search は非常に強力で便利な機能であり、リポジトリ上の機密データを検索するために使用できます。GitHub dork のコレクションは、秘密鍵、資格情報、認証トークンなどの機密性の高い個人情報や組織情報を明らかにする可能性があります。このリストは、セキュリティ評価やシステムのペネトレーションテストに役立つことを目的としています。 GitHub Dork 検索ツール github-dork.py は、リポジトリや組織/ユーザーのリポジトリを検索できるシンプルな Python...

GoAWSConsoleSpray

GoAWSConsoleSpray GoAWSConsoleSprayは、AWS IAMコンソールの認証情報をスプレイし、ユーザーアカウントの有効なログインを特定するために使用できるツールです。AWS CLIにはユーザー名/パスワードによる認証方法はなく、オンラインのWebコンソールのみが対象です。多くの組織ではIAMコンソールアカウントに多要素認証（MFA）を適用すべきですが、必ずしも適用されているわけではありません。ユーザーの悪い習慣と脆弱なパスワードポリシーが組み合わさると、コンソールに認証できる可能性が出てきます。 成功条件 多要素認証（MFA）が設定されていないIAMアカウント...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool は、リモートで Microsoft SQL データベースのセキュリティをテストするオープンソースのペネトレーションテストツールです。 MSDAT の使用例： リモートで Microsoft データベースが待受中であり、データベースに接続するための 有効な認証情報 を見つけたい場合 データベース上で有効な Microsoft SQL...

Teamsniper

Teamsniper Teamsniper is a tool for fetching keywords in a Microsoft Teams such as passwords, emails, database, etc.. Usage Help Options root@kitploit: usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams. options: -h,...

dpapi-ng

dpaping - Python DPAPI-NG De-/Encryption Library Library for DPAPI NG, also known as CNG DPAPI, de- and encryption in Python. It is designed to replicate the behaviour of NCryptUnprotectSecret and NCryptProtectSecret. This can be used on non-Windows hosts to de-/encrypt DPAPI NG protected secrets...

easyda

EasyDA - Easy Windows Domain Access Script Easy Windows Domain Access Script Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/easyda Released under AGPL see LICENSE for more...

firmwalker

firmwalker Простой bash-скрипт для поиска в извлеченной или смонтированной файловой системе прошивки. Он будет искать в извлеченной или смонтированной файловой системе прошивки интересующие элементы, такие как: etc/shadow и etc/passwd список каталога etc/ssl поиск файлов, связанных с SSL, таких к...

Cisco ASA/FTD Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20269)

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

Malicious code in awesome-ts-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc9fa6bfe010d792303258bd713e854e8c218c18762d62b864e8a350d1b473e Package advertises itself as a TypeScript/ESLint/Jest toolkit but ships no such tooling. On import, index.js - run - packProjectBundle walks the...

LazyAdmin-Writeup

LazyAdmin-Writeup Beginner-friendly TryHackMe LazyAdmin writeu...

MonitorsFour-Write-UP

MonitorsFour-Write-UP Hack The Box MonitorsFour is an Easy-rat...

ALPINE-CVE-2026-27856

Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port,...