mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...

ai-email-threat-research

Threat Terminal Исследовательская игра по кибербезопасности, измеряющая, как люди выявляют фишинговые письма, созданные ИИ. Реализована в виде ретро-терминала. Сайт: research.scottaltiparmak.com Проблема Теперь ИИ может создавать фишинговые письма с идеальной грамматикой, безупречной орфографией ...

CVE-2023-46197

CVE-2023-46197 Popup by Supsystic = 1.10.19 - Отсутствие авторизации, приводящее к раскрытию конфиденциальной информации Описание Плагин Popup by Supsystic для WordPress уязвим к раскрытию конфиденциальной информации во всех версиях до 1.10.19 включительно через действие getWpCsvList. Это позволя...

toutatis

Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place...

WordPress Qubely < 1.8.6 - Unauthenticated Email Sending

Qubely WordPress plugin 1.8.6 contains an insecure deserialization caused by unauthenticated users being able to send arbitrary emails via the qubelysendformdata AJAX action, letting attackers send spam or malicious emails, exploit requires no authentication. id: CVE-2021-24916 info: name:...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

CVE-2026-86813

CVE-2026-86813 affects the MetForm WordPress plugin prior to version 4.1.9 . The vulnerability resides in how the plugin handles newline characters in user-submitted values that are placed into notification email headers, specifically the Reply-To field. An unauthenticated attacker can inject add...

EUVD-2026-76041

The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such as Bcc, into the emails the site sends when a submitted...

Post SMTP <= 3.6.0 - Email Log Disclosure

Post SMTP WordPress plugin = 3.6.0 contains an unauthorized data access vulnerability caused by missing capability check in construct function, letting unauthenticated attackers read arbitrary logged emails, exploit requires no authentication. id: CVE-2025-11833 info: name: Post SMTP = 3.6.0 -...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

pwndb

pwndb Поиск утекших email-адресов. На базе: pwndb2am4tzkvold.onion Установка Предварительные требования root@kitploit: sudo apt install tor Установка root@kitploit: git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt...

responsible-disclosure-email-gathering

책임 공개 이메일 수집 목적 호스트에서 취약점을 발견했지만 해당 호스트/조직에 HackerOne 또는 BugCrowd의 활성 프로그램이 없을 수 있습니다. 이런 경우 이 워크플로우가 적합합니다! 대략적으로 웹사이트를 크롤링하여 발견 사항을 제출할 수 있는 보안 관련 이메일을 찾아냅니다. 사전 요구 사항 Katana Nuclei 활성 인터넷 연결 프로세스 이 워크플로우는 다음을 수행합니다: 1. Katana를 사용하여 대상 호스트를 크롤링합니다. 2. Katana의 출력은 Nuclei로 전달되어 파싱됩니다. 3. Nuclei...

CVE-2025-55903

CVE-2025-55903: PerfexCRM 저장형 HTML 인젝션Stored HTML Injection ⚠️ 보안 권고 인보이스, 청구 및 자동 커뮤니케이션에 영향을 미치는 치명적인 저장형 HTML 인젝션 취약점 -ff6600 📋 개요 PerfexCRM에서 인증된 사용자가 인보이스 설명, 청구 주소 및 고객 메모에 악성 HTML을 주입할 수 있는 저장형 HTML 인젝션 취약점이 발견되었습니다. 주입된 콘텐츠는 데이터베이스에 영구 저장되며 고객 대상 이메일 및 PDF 첨부 파일에 자동으로 렌더링되어 대규모 피싱 공격, 비즈니스...

CVE-2026-19861

CVE-2026-19861 affects the JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before version 3.6.5.2 . The vulnerability stems from insufficient sanitisation and escaping of form field values—specifically the WYSIWYG field —before they are embedded in HTML notification emails. This all...

CVE-2026-19861 JetFormBuilder < 3.6.5.2 - Unauthenticated Stored XSS via WYSIWYG Field in Notification Emails

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not properly sanitise and escape a form field's value before including it in the HTML notification emails it sends, allowing unauthenticated users to inject arbitrary HTML into messages delivered to administrato...