CVE-2025-64027

Información del Producto Snipe-IT es un sistema de gestión de activos de TI gratuito y de código abierto FOSS construido sobre Laravel. Proporciona seguimiento de activos de hardware, gestión de licencias de software, accesorios e inventario de consumibles para equipos de operaciones de TI. Se...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

fileintel

fileintel Esta es una herramienta utilizada para recopilar diversas fuentes de inteligencia para un archivo determinado. Fileintel está escrito de forma modular para que se puedan agregar fácilmente nuevas fuentes de inteligencia. Los archivos se identifican por su hash MD5, SHA1, SHA256. La sali...

Password-Strength-Evaluator

Password Strength Evaluator Password Strength Evaluator is a tool to evaluate the strength of passwords and provide recommendations to improve their security. This tool also checks if your password has been exposed in any data breaches using the Have I Been Pwned API. Additionally, it stores the...

nexfil

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. Available In Featured The Privacy, Securit...

CVE-2025-9776

CVE-2025-9776: Authenticated SQL Injection in CatFolders WordPress Plugin Keywords: CVE-2025-9776, CatFolders WordPress vulnerability, SQL injection WordPress, authenticated SQL injection, WordPress security, CSV import vulnerability, WordPress plugin exploit, CWE-89, WordPress database attack,...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

PhishingKitHunter

PhishingKitHunter 查找使用你品牌/组织文件和图片的网络钓鱼工具包。 PhishingKitHunter （或 PKHunter ）是一款用于识别网络钓鱼活动中使用的钓鱼工具包URL的工具，这些活动针对你的客户，并利用你网站上的一些文件（如CSS、JS等）。 该工具基于Python 3编写，通过分析在合法网站上获取特定文件（如某些样式内容）或在钓鱼会话后重定向用户的referer URL。日志文件（应）包含用户来源的referer URL以及钓鱼工具包的部署位置。 PhishingKitHunter...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

hostintel

hostintel Esta herramienta se utiliza para recopilar diversas fuentes de inteligencia sobre hosts. Hostintel está escrito de forma modular para que se puedan añadir fácilmente nuevas fuentes de inteligencia. Los hosts se identifican por nombre de host FQDN, dominio o dirección IP. Esta herramient...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

IPGeoLocation

IPGeoLocation ==== Una herramienta para obtener información de geolocalización IP Desarrollado por ip-api Requisitos Python 3.x termcolor colorama Descarga/Instalación git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user si pip3 no está instalado: apt-get...

odin

Odin Odin 是一个基于 Loki 的中央 IoC 扫描器 Table of Contents 概述 要求 获取 部署 Loki 收集 解析 General Info 此应用程序获取 Loki 最新版本，并使用 PowerShell 脚本将其下载到所有机器上并运行，然后此应用程序接收来自所有机器的响应，并以 CSV 格式解析反馈。 Requirements 1. Python 3.5+ 2. PyQT5 3. psutil 4. pyparsing 5. zipfile Fetch Odin 下载并解压 Loki 的最新版本，并启动 HTTP...

CVE-2025-9216

StoreEngine – Potente plugin de eCommerce de WordPress para Pagos, Membresías, Afiliados, Ventas y Más = 1.4.0 - Carga Arbitraria de Archivos Autenticada Suscriptor+ El plugin StoreEngine contiene una vulnerabilidad en su función de Importación/Exportación CSV que permite a cualquier usuario...

godehashed

Godehashed Una herramienta en golang que utiliza la API de dehashed.com para buscar activos comprometidos. Los resultados se pueden compilar en un CSV para su posterior análisis. Captura de pantalla Dehashed API Debes proporcionar una clave API a la herramienta. Consulta apikeytemplate.txt como...

TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi 是一个 Windows CLI 应用，用于从社交媒体收集数据并将其转换为可用于 Gephi 的 CSV 数据集。目前支持： Twitter Reddit Youtube 网络域名/URL 后续将增加更多社交媒体平台以及已支持平台的更多功能。 作者：@DisinfoG 安装 目前 GitHub 上没有 TwitterSearch2Gephi 的二进制包。正如欧比旺所说：“愿源码与你同在。”当前 TwitterSearch2Gephi...