emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

censys-python

Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started/ 📦 New Python SDK : Install with pip install censys-platform -...

terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

CVE-2024-33113

CVE-2024-33113 Il router D-LINK DIR-845L è vulnerabile a una divulgazione di informazioni tramite il file bscsmsinbox.php. La CVE-2024-33113 è una vulnerabilità nel router D-LINK DIR-845L che consente una divulgazione di informazioni attraverso il file bscsmsinbox.php. La vulnerabilità deriva da...

EUVD-2026-64745

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones (15 models including Mavic 4 Pro, Air 3S, Mini 5 Pro, and others) expose an FTP service with hardcoded credentials shared across affected firmware versions. An attacker with access to the drone's internal network or USB RNDIS interface can upload unlimited files to /blackbox/upgrade/, ...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

Teldat-Router-CVE-2022-POC

Teldat Router CVE-2022-39996 e CVE-2022-39997 POC Proof of Concept per due vulnerabilità scoperte nei router Teldat RS123 / RS123w. Panoramica CVE ID| Tipo| CWE| CVSS| Gravità ---|---|---|---|--- CVE-2022-39996| XSS Riflesso| CWE-79| 6.1| Media CVE-2022-39997| Password Debole| CWE-521| 9.8| Criti...

CVE-2025-70829

CVE-2025-70829: Esposizione di Informazioni in Datart Documento in Cinese 1. Panoramica della Vulnerabilità CVE ID : CVE-2025-70829 Prodotto : Datart Versione : v1.0.0-rc.3 Tipo di Vulnerabilità : Esposizione di Informazioni Una vulnerabilità di esposizione di informazioni in Datart v1.0.0-rc.3...

CVE-2025-12539

CVE-2025-12539 TNC Toolbox: Web Performance = 1.4.2 - Esposizione Non Autenticata di Informazioni Sensibili fino all'Escalation dei Privilegi/Compromissione dell'Account cPanel 🚨 TNC Toolbox: Web Performance = 1.4.2 - Esposizione Non Autenticata di Informazioni Sensibili fino all'Escalation dei...

git-hound

🐾 GitHound A pattern-matching, patch-attacking, batch-catching secret snatcher. Overview GitHound hunts down exposed API keys, secrets, and credentials across GitHub by pairing GitHub dorks with pattern matching, contextual detection, and commit-history analysis. Input a GitHub dork into GitHound...

HTB-Devvortex-CVE-2023-2375-PoC

جوملا! CVE-2023-23752 - إثبات المفهوم لكشف معلومات غير مصادق عليه الوصف يحتوي هذا المستودع على إثبات المفهوم PoC لاستغلال CVE-2023-23752، وهي ثغرة في جوملا! تسمح بكشف معلومات بدون مصادقة. يمكن لهذه الثغرة كشف معلومات حساسة، بما في ذلك بيانات اعتماد قاعدة البيانات وملفات التكوين وغيرها، للمستخدمين...

CVE-2026-13714

CVE-2026-13714 Plugin Realtyna Organic IDX + WPL Real Estate 5.3.0 - Caricamento arbitrario di file non autenticato che consente l'esecuzione di codice remoto CVE-2026-13714 — RCE non autenticata in WPL Real Estate Plugin Realtyna Organic IDX + WPL Real Estate per WordPress 5.3.0 Caricamento...

PT-2026-79833

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...

JS-Secret-Hunter

JS Secret Hunter V2 🕵️‍♂️ JS Secret Hunter è uno strumento Python avanzato progettato per i ricercatori di sicurezza al fine di automatizzare il rilevamento di segreti hardcoded nel JavaScript lato client. A differenza dei semplici scanner, V2 include un crawler dinamico che analizza l'HTML del...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 RCE autenticata Questo repository contiene un proof of concept per CVE-2021-43857 , una vulnerabilità di esecuzione di codice in remoto che affligge Gerapy -p -L -P Requisiti 1. Python 3.x 2. requests e pyfiglet pip install requests pyfiglet 3. Netcat nc...