CF-Hero

CF-Hero CF-Hero 它是什么？ • 功能特性 • 背景 • 安装 • 使用方法 • 运行 cf-hero • ZoomEye（赞助商） • 待办事项 它是什么？ CF-Hero 是一款综合性侦察工具，旨在发现由 Cloudflare 保护的 Web 应用的真实 IP 地址。它通过各种方法执行多源情报收集。 DNS 侦察 当前的 DNS 记录（A、TXT） 历史 DNS 数据分析 关联域名发现 情报来源 ZoomEye 搜索引擎 Censys 搜索引擎 Shodan 搜索引擎 SecurityTrails 历史记录 主动 DNS 枚举 关联域名相关性分析...

InfoG

InfoG v2.0 InfoG 発音はInfo-jee は情報収集ツールです。IPアドレス、電話番号の詳細などを調べることができます。 使い方: まずリポジトリをクローンします: git clonehttps://github.com/Tech-Sec/InfoG.git ディレクトリをInfoGフォルダに移動: cd InfoG 次に、以下を実行: pip install -r requirements.txt その後、以下を実行: python3 InfoG.py オプション1は、入力したドメイン名のIPアドレスを表示します。 プロトコルを含めてドメイン名を入力しないでください。例...

HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

SharpSniper

SharpSniper Red Teamのエンゲージメントでは、単にドメイン管理者を達成するだけでは不十分なことがよくあります。クライアントによっては、ドメイン内の特定のユーザー（例えばCEO）が侵害される可能性があるかどうかを確認したい場合があります。 SharpSniperは、これらのユーザーのIPアドレスを検出し、その端末をターゲットにできるようにするシンプルなツールです。 このツールを使用するには、ドメインコントローラーのログを読み取る権限が必要です。...

fav-up

Fav-up faviconアイコンから実際のIPを検索し、Shodanを使用します。 インストール pip3 install -r requirements.txt Shodan APIキー（無料版ではないもの ） 使用方法 CLI まず、APIキーの渡し方を定義します： -k または --key: 標準入力でキーを渡す -kf または --key-file: キーを取得するファイル名を指定 -sc または --shodan-cli: Shodan CLIからキーを取得（初期化済みの場合） 現在、このツールは以下の3つの方法で使用できます： -ff または --favicon-file...

CloudFail

CloudFail CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases. 1. Misconfigured DNS...

Malicious code in @edgecommons/streamlog-node (npm)

The @edgecommons/streamlog-node package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

Malicious code in salesforce-vscode-slds (npm)

The salesforce-vscode-slds package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a...

MAL-2026-10234 Malicious code in slds-lsp-client (npm)

The slds-lsp-client package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Salesforce SLD...

MAL-2026-10228 Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

Malicious code in @logdna-web/styles (npm)

The @logdna-web/styles package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...

MAL-2026-10229 Malicious code in enbd-react-error-boundry (npm)

The enbd-react-error-boundry package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization an 'enb...

EUVD-2008-5819

Malware in sbrugna...

PT-2024-15799 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: AnythingLLM affected versions not specified Description: If an instance of AnythingLLM is hosted on an internal network and the attacker is granted a permission level of manager or admin, they could link-scrape internally to resolve IPs of...

CVE-2022-3596

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...

SUSE CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

DEBIAN-CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

Osmedeus v1.5 - Fully Automated Offensive Security Framework For Reconnaissance And Vulnerability Scanning

Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Installation git clone https://github.com/j3ssie/Osmedeus cd Osmedeus ./install.sh This install only focus on Kali linux, check more install on Wiki page How to use I...