4589 matches found
Whoisleak
Whoisleak This tool queries the emails that registered the domain and verifies if they were leaked in some data leak. To install root@kitploit: $ apt-get install nodejs-legacy $ pip install -r requirements.txt Usage Example root@kitploit: python whoisleak.py -u securityattack.com.br Contact / Blo...
data-breach
Latest Data Breaches Repository This repository provides a comprehensive and continuously maintained list of confirmed data breaches from around the world. Each breach entry includes the breach name, which typically reflects the affected organization, along with the date of the incident. These tw...
mosint
विशेषताएँ • स्थापना • सेवाएँ • उपयोग • डॉकर • कॉन्फ़िग • स्क्रीन Mosint एक स्वचालित ईमेल osint उपकरण है जो Go में लिखा गया है और आपको तीव्र एवं कुशलतापूर्वक लक्ष्य ईमेल की जांच करने की अनुमति देता है। यह कई सेवाओं को एकत्रित करता है, जिससे सुरक्षा शोधकर्ता बड़ी मात्रा में जानकारी तक तेज़ी से पहुँ...
PwnedCheck
PwnedCheck PwnedCheck is a command-line tool for checking whether passwords have appeared in known data breaches using theHave I Been Pwned API and supports encrypted Bitwarden vaults exports. Features Check single passwords from the command line Process passwords from a file Accept pre-hashed...
OneRuleToRuleThemStill
OneRuleToRuleThemStill An revamped and optimised version of OneRuleToRuleThemAll. OneRuleToRuleThemStill now has a 5% 6.9% reduction in rules 52,000 down to 49,465 48,414 with 0% performance loss against the Lifeboat and LastFM data breaches. Updates: De-duplication of resulting candidate...
buster
विवरण बस्टर एक उन्नत OSINT उपकरण है जिसका उपयोग निम्न के लिए किया जाता है: एक ईमेल के सामाजिक खाते प्राप्त करें कई स्रोतों का उपयोग करके gravatar,about.me,myspace,skype,github,linkedin,पिछले उल्लंघन वे लिंक प्राप्त करें जहां ईमेल पाया गया था google,twitter,darksearch और पेस्ट साइटों का उपयोग करके...
XposedOrNot
XposedOrNot XposedOrNot XoN tool is to search an aggregated repository of xposed passwords comprising of 850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security. Screenshot What is Xposed Passwords? The main aim of this project is to give...
WhatBreach
WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...
godehashed
Godehashed एक golang टूल जो समझौता किए गए संपत्तियों की खोज के लिए dehashed.com API का उपयोग करता है। परिणामों को फिर आगे के विश्लेषण के लिए CSV में संकलित किया जा सकता है। स्क्रीनशॉट Dehashed API आपको टूल को एक api key प्रदान करनी होगी। उदाहरण के लिए apikeytemplate.txt देखें। स्थापना CLI में टूल...
CVE-2024-50961
كشف البيانات الحساسة CVE-2024-50961 الوصف في DonWeb Ferozo Hosting v1.1، يمكن للمهاجم عن بُعد استغلال معاملات URL للوصول إلى بيانات حساسة، بما في ذلك بيانات اعتماد قاعدة البيانات. تشمل نواقل الهجوم التنصت على الشبكة، وسجلات الخادم، وسجل المتصفح، مما قد يعرّض المؤسسات لاختراقات أمنية كبيرة وانتهاك...
RSVPMaker <= 9.2.5 - SQL Injection
The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from t...
ZKTeco BioTime <= 9.0.1 - Privilege Escalation
BioTime default employee credentials password 123456 allow login. Sessions are not role-validated, enabling privilege escalation to perform admin actions and enumerate backup files. id: CVE-2023-38952 info: name: ZKTeco BioTime = 9.0.1 - Privilege Escalation author: riteshs4hu severity: high...
Dolibarr Unauthenticated Contacts Database Theft
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. id: CVE-2023-33568 info: name: Dolibarr Unauthenticated Contacts Database Theft...
Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection
The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...
153M+ driver’s licenses for sale on new dark web platform
A new dark web platform called Nexus claimed to be selling 153 million driver’s license scans and millions of other identity and medical cards. The collection included more than 153 million driver’s licenses, 10 million ID cards, 3 million travel documents, and 579,000 medical cards, including...
Jenkins <=2.196 - Cookie Exposure
Jenkins through 2.196, LTS 2.176.3 and earlier prints the value of the cookie on the /whoAmI/ URL despite it being marked HttpOnly, thus making it possible to steal cookie-based authentication credentials if the URL is exposed or accessed via another cross-site scripting issue. id: CVE-2019-10405...
FBI Probes Service Selling 153M+ Drivers Licenses
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphonin...
MOVEit-Transfer-Data-Breach-Analysis.
MOVEit-Transfer-Data-Breach-Analysis. Analisi dettagliata della violazione dei dati di MOVEit Transfer del 2023 CVE-2023-34362 per CS50 Cybersecurity. Questo progetto esplora l'impatto tecnico della SQL Injection non autenticata e le sue conseguenze per la privacy globale dei dati, coinvolgendo...
pwndb
pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage root@kitploit: usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target...
