pyhunter

pyhunter 用于通过Hunter.io API（https://hunter.io）搜索已索引的可能电子邮件的工具 安装 您可以通过克隆GitHub仓库来下载最新版本的pyhunter： root@kitploit: git clone https://github.com/n4xh4ck5/pyhunter.git 通过pip安装依赖项： root@kitploit: pip install -r requirements.txt 您需要在代码中的变量"API"中填入您自己的API密钥，工具才能正常工作。 用法 root@kitploit: 用法: pyhunter.py 域名 ...

spyder-osint

Spyder🕷 Spyder es una herramienta universal de investigación de inteligencia de código abierto OSINT que realiza búsquedas utilizando grandes bases de datos globales. Características 1. Información de número de teléfono 2. Información de dirección IP 3. Información de redes sociales Facebook,...

rdap

OpenRDAP es una implementación en Go de un cliente de línea de comandos RDAP. https://www.openrdap.org - página principal https://www.openrdap.org/demo - demo en vivo Características Cliente RDAP de línea de comandos Formatos de salida: texto, JSON, estilo WHOIS Tipos de consulta admitidos: ip...

chiasmodon

Chiasmodon Chiasmodon es una herramienta OSINT que permite a los usuarios recopilar información de diversas fuentes y realizar búsquedas dirigidas basadas en dominios, aplicaciones de Google Play, direcciones de correo electrónico, direcciones IP, organizaciones, URL y más. Proporciona capacidade...

pentesting-multitool

Pentesting-Multitool 简介 Pentesting-Multitool 项目源于将多个渗透测试工具整合到一个工具中的需求。它将使用 Python3 开发，并添加一些外部库，如 DNSPython、pythonwhois 或 scapy。 该脚本的主要功能是收集 DNS 记录、域名或其他设备的信息。 使用前的必要配置 简单安装 Clone pentesting-multitool : $ git clone https://github.com/ffmancera/pentesting-multitool.git Python libraries : pip3 insta...

wtfis

wtfis Herramienta de consulta pasiva de hostnames, dominios e IPs para humanos ¿Qué es? wtfis es una herramienta de línea de comandos que recopila información sobre un dominio, FQDN o dirección IP utilizando varios servicios OSINT. A diferencia de otras herramientas de su tipo, está construida...

Reverse_ip_Multithreading1

ReverseipMultithreading1 Donación : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

Malicious code in lakk-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a1a1a5f0fd81e6ba6198e7f4cbdeab1c16b8ceed3dbb7becc6b4b6f611ad52 [email protected] runs node index.js from an npm install lifecycle hook, which loads ./lib/core and constructs a subdomain from the installer's O...

Malicious code in @sapappgyver/appgyver-descriptors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9396712a6bf4b08219d9ed2066ebf8c25a7558b988b6d9bf1c9ae57349a4741 The package declares an install lifecycle script that runs node index.js, which requires lib/core.js; the same module is the package main, so the...

Malicious code in @leviosa86com/leviosa86-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96264a8719e17bd8ec21d47213fe31dec87445e01ff312a1e46af5819e028979 Package @leviosa86com/[email protected] ships src/poc/index.js which shells out via childprocess.exec to collect host identifiers hostname, pwd,...

CVE-2026-15485 TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub43F2C4 of the file /goform/toolsnslookup of the component DNS Lookup Handler. This manipulation of the argument nslookuptarget/dnsserver causes os command injection. The attack can be initiated remotely...

Malicious code in consumerweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74612bbfc323641d0141b4f1b495d6ea5f9b52129f2391bf21c5fabf63702ca7 On npm install, both preinstall and postinstall lifecycle hooks execute index.js, which collects host reconnaissance os.hostname, os.userInfo.usernam...

CVE-2026-56843

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...

EUVD-2026-42144

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...

PT-2026-55901

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Apache Camel DNS component allows for Server-Side Request Forgery...

CVE-2026-57587

The CVE-2026-57587 entry describes a SQL injection in Nessus affecting the scan results database. An unauthenticated remote attacker who controls reverse DNS records for a scanned host can inject malicious SQL, potentially exfiltrating scan-result data. The connected documents specify Nessus as t...

CVE-2026-57587 SQL Injection in Nessus via Reverse DNS Lookup

A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data...

Malicious code in atlassian-forge-skills (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca0f4b99cda621977551550ed678ad77ee82827714acb9d08534f53b0642e3c Package impersonates an internal Atlassian Forge dependency unscoped name atlassian-forge-skills, description 'Internal package', generic author...

Malicious code in @monitoring-lib/error-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491603ad44ed812c3d248696b00f7d4801a4c1dc23e4f23a3bb86f2ef499616d On npm install, the preinstall lifecycle hook in package.json runs a Node one-liner that reads the installer's hostname os.hostname and username...

MAL-2026-5445 Malicious code in grateful-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7a07a0a09ed8037058353b9b9b067e25e3cbe783eaab8d54276d490f823471 On npm install, the package's postinstall script src/canary.js performs a DNS lookup and HTTPS GET to the hardcoded host...