tgspyder

🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

vt-py-scanner

VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...

ConditionalAccessDocumentation

使用PowerShell记录条件访问策略 此PowerShell脚本记录您的Microsoft Entra条件访问策略。脚本将所有数据导出为csv文件，可以漂亮地格式化为Excel工作簿。 为确保所有策略能够被检索和记录，脚本使用了Microsoft Graph Beta API端点。 安装与使用 1. 从PowerShell库安装此脚本（依赖的Microsoft.Graph.Authentication模块会自动安装）： Install-Script -Name Invoke-ConditionalAccessDocumentation -Scope CurrentUser...

Tracgram

Trackgram Use Instagram location features to track an account Usage root@kitploit: At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: - NICKNAME: your...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

IPGeoLocation

IPGeoLocation ==== A tool to retrieve IP Geolocation information Powered by ip-api Requirements Python 3.x termcolor colorama Download/Installation git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user if pip3 is missing: apt-get install python3-setuptools...

CVE-2020-25398

CVE-2020-25398 CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. Information Description: Attacker can configure specific data, which could be exported to malicious csv file with code execution payload and runs after opening on user's machine...

log4shell_sentinel

Log4Shell Sentinel - 一款智能 CVE-2021-44228 扫描器 简介 虽然已经有了一些优秀的工具来帮助组织扫描其环境中易受严重 Log4J / CVE-2021-44228 漏洞影响的应用，但我认为： 我遇到的工具中，没有一个是专为分析人员在整个修复过程中跟踪特定发现而设计的。Log4Shell Sentinel 将其发现结果输出为 CSV 格式，期望分析人员随后在 Excel 中对发现结果进行筛选和处理，将部分发现添加到忽略列表并重新运行扫描，比较多次扫描结果，向扫描结果中添加数据等。 基于文件的扫描器会给分析人员留下大量工作，尤其是在容器化环境中。...

TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi is a windows CLI app that lets you collect data from social media and convert it into a CSV data set that can be used with Gephi. Currently it supports Twitter Reddit Youtube WWW domains / URLs More social media platforms and more features for the platforms...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 May 2020 Hidden Networks is a new concept test based on the paper of the same name, that is programmed using Python 3.4. It facilitates the task of analysing local and remote machines within a domain, using WMI in searching for traces of connections by USB devices. With...

creepy

creepy 現在のバージョン 1.1 著者 Yiannis Kakavas ホームページ http://www.geocreepy.com インストール手順 http://www.geocreepy.com を参照してください。 説明 位置情報OSINTツール。 Creepyは位置情報OSINTツールです。オンラインソースから位置情報に関連するデータを収集し、地図上での表示、正確な位置や日付に基づく検索フィルタリング、CSV形式またはKML形式でのエクスポート（Googleマップでのさらなる分析用）を可能にします。 謝辞...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

CVE-2021-46363

CVE-2021-46363: Magnolia CMS 中的公式注入 Magnolia v6.2.3 及以下版本的导出功能存在一个缺陷，允许攻击者通过精心构造的 CSV/XLS 文件执行公式注入攻击。当受害者使用 Microsoft Excel 打开导出的文件时，这些公式可能导致任意代码执行。 厂商披露： 该漏洞的厂商披露和修复可在此处找到此处。 要求： 此漏洞需要： 有效的用户凭证 概念验证： 更多细节和利用过程可参见此PDF。...

ninja-forms-brute

Ninja Forms 3.6.8 - 未认证的电子邮件地址泄露 描述 该插件在导出提交内容时不会删除所创建的临时文件，这可能导致未经认证的攻击者在文件可公开访问且名称可猜测的情况下下载这些文件，并获取诸如提交表单用户的电子邮件地址等敏感信息。 概念验证 通过“下载所有提交”按钮导出所有提交时生成的 CSV 文件存储在 /wp-content/uploads// 文件夹中，格式如下：form--all-subs.csv 示例：https://example.com/wp-content/uploads/2022/03/form-1-all-subs.csv 如何运行...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Inyección SQL no autenticada Descripción El plugin Navayan CSV Export para WordPress es vulnerable a Inyección SQL en versiones hasta la 1.0.9 inclusive, debido a un escape insuficiente del parámetro proporcionado por el usuario y a la falta de...

CVE-2025-15481

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...

CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...

CVE-2025-15481

The Notification Bar for WordPress plugin (slug 8-degree-notification-bar) through version 1.1.8 exposes an unauthenticated CSV export script at inc/backend/blocks/export-csv.php, allowing anyone to download all stored subscriber email addresses without authentication. The vulnerability is rated ...