57381 matches found
CVE-2026-111661
waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to send arbitrary email by calling the anonymously mapped /callback/email endpoint. Attackers can POST caller-supplied subject, content, and recipient to EmailController.sendEmail,...
CVE-2026-111661
The waynboot-mall software (through version 2.0.0 ) is vulnerable to missing authentication via the anonymously mapped /callback/email endpoint. An unauthenticated attacker can call EmailController.sendEmail to send arbitrary emails by providing the subject, content, and recipient. This allows fo...
EmBomber
EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...
theHarvester
About theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence OSINT gathering to help determine a domain's external threat landscape. The tool gathers names, emails,...
PyLoggy
PyLoggy PyLoggy is simple and powerful Python keylogger that is able to log keystrokes, log mouse clicks, take screenshots and more! The tool will send the logs to your email every minuteyou can change this. Installation 1. Clone it: git clone https://github.com/D4Vinci/PyLoggy.git 2. Run it:...
mailMeta
A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Usage Linux Windows Demo Contributions Inspiration FAQ License About mailMeta What is mailMeta? mailMeta is a python based forensic tool which reads...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation β’ Contributions β’ Discussion β’ Community β’ FAQs β’ Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
mitaka
Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...
Samurai
Samurai Email Discovery SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the...
user-scanner
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 2720+ total scan vectors βincluding 210+ email-integrated sites and 2510+ username platforms βyou can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...
sublime-rules
Sublime Rules by Sublime Security This repo contains open-source rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Examples HTML smuggling VIP / Executive impersonation Malicious OneNote files Malicious LNK files...
clusterfuzz
ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...
DomainAlerting
DomainAlerting Daily alert when a new domain name is registered and contains your keywords. Description DomainAlerting tool allows you to perform two main actions for educational purposes only: Download newly registered domains Send automatic email alert You can setup a wordlist and be alerted by...
flanker
Flanker - email address and MIME parsing for Python .. image:: https://travis-ci.org/mailgun/flanker.svg?branch=master :target: https://travis-ci.org/mailgun/flanker .. image:: https://coveralls.io/repos/github/mailgun/flanker/badge.svg?branch=master :target:...
Spoofy
Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, "Why do we need another tool that can check if a domain can be spoofed?" Well, Spoofy is different and here is why: 1. Custom, manually tested spoof logic No guessing...
spamscanner
A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net Β· Getting started Β· Documentation Features A classifier that reads every language...
packj
Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...
CVE-2026-51788
Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in cleverangeauth v0.1.10 CVE ID: CVE-2026-51788 Status: Assigned Date Discovered: 2026-04-27 Researcher: Aykhan Isgandarli Severity: High CVSS v3.1: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Produc...
email-prediction-asterisks
ASTERISKS & OBELIX Email prediction asterisks is a script that allows you to identify the emails hidden behind asterisks. It is a perfect application for osint analysts and security forces. It allows to intelligently predict, using Intelx leaks, which emails are related to the person we are looki...
h8mail
h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. π Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...