3760 matches found
fb-phisher-python
Phishing de Facebook Autor original : Arslan Mughal POR : arjunindia repositorio original : https://github.com/arslanmughal5566/facebookphishing Acerca del script : Con este script puedes realizar el robo de credenciales de inicio de sesiĆ³n de Facebook con algunas habilidades de ingenierĆa social...
OSIF
este proyecto se detendrĆ” por un tiempo. root@kitploit: o' .=./ o o o ooO----Ooo O S I F open source information facebook OSIF es una herramienta precisa de recolecciĆ³n de informaciĆ³n de cuentas de Facebook. Toda la informaciĆ³n sensible puede ser obtenida fĆ”cilmente, incluso si el objetivo...
CVE-2025-51398
Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Facebook Integration Page Name Field Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat...
CVE-2026-78905-Facebook-Account-Takeover
CVE-2026-78905 ā Meta-Phishing Facebook Graph API ā OAuth Token Reuse & Session Hijacking...
goop
goop Google Search Scraper Note: It no longer works. Google team told me it's not a legitimate issue when I reported it to them but now they just silently fixed it. Contents Introduction How it works? Usage Installation Example Legal Introduction goop can perform google searches without being...
goop
goop Raspador de BĆŗsqueda de Google Nota: Ya no funciona. El equipo de Google me dijo que no era un problema legĆtimo cuando lo reportĆ©, pero ahora simplemente lo arreglaron silenciosamente. Contenido IntroducciĆ³n ĀæCĆ³mo funciona? Uso InstalaciĆ³n Ejemplo Legal y Descargo de Responsabilidad...
nexphisher
Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : root@kitploit: apt update ; apt install git -y ; git...
socialhunter
socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...
CVE-2026-18056
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-18056 HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-18056
HivePress Authentication is a WordPress plugin vulnerable to unauthenticated authentication bypass in all versions up to and including 1.1.4 . The root cause lies in the authenticate_user function's Facebook authenticator, which forwards an attacker-supplied access_token to the Facebook Graph API...
EUVD-2026-72043
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-18056 HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-77826
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and log into a new...
CVE-2026-77826
The RegistrationMagic WordPress plugin (versions 5.0.1.8 through 6.0.9.8) suffers from an unauthenticated authentication bypass due to missing Facebook token audience validation. The plugin does not verify which application a Facebook access token was issued to before accepting it as proof of ide...
EUVD-2026-71848
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and log into a new...
CVE-2026-77826 RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and log into a new...
CVE-2026-77826 RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and log into a new...
PT-2026-86330
šØ CVE-2026-77826 The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and l...
