fav-up

Fav-up 파비콘 아이콘에서 시작하여 Shodan을 사용하여 실제 IP를 조회합니다. 설치 pip3 install -r requirements.txt Shodan API 키 무료가 아닌 사용법 CLI API 키를 전달하는 방법을 먼저 정의하세요: -k 또는 --key : 키를 stdin으로 전달 -kf 또는 --key-file : 키를 가져올 파일 이름 전달 -sc 또는 --shodan-cli : Shodan CLI에서 키 가져오기 초기화한 경우 현재 이 도구는 세 가지 방법으로 사용할 수 있습니다: -ff 또는...

CloudFail

CloudFail CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases. 1. Misconfigured DNS...

CF-Hero

CF-Hero CF-Hero 它是什么？ • 功能特性 • 背景 • 安装 • 使用方法 • 运行 cf-hero • ZoomEye（赞助商） • 待办事项 它是什么？ CF-Hero 是一款综合性侦察工具，旨在发现由 Cloudflare 保护的 Web 应用的真实 IP 地址。它通过各种方法执行多源情报收集。 DNS 侦察 当前的 DNS 记录（A、TXT） 历史 DNS 数据分析 关联域名发现 情报来源 ZoomEye 搜索引擎 Censys 搜索引擎 Shodan 搜索引擎 SecurityTrails 历史记录 主动 DNS 枚举 关联域名相关性分析...

InfoG

InfoG v2.0 InfoG it's Info-jee is an information gathering tool. You can find ip addresses, phone number details and much more. How to use: First clone the repository: git clonehttps://github.com/Tech-Sec/InfoG.git Change your directory to InfoG folder: cd InfoG Then type: pip install -r...

SharpSniper

SharpSniper Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires...

HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

unwaf

Unwaf Unwafは、パッシブテクニック を用いてWAFバイパスの特定を支援するために設計されたGoツールです。複数の発見手法を組み合わせ、HTML類似度比較、SSL証明書フィンガープリント、HTTPヘッダー分析を通じて候補を検証することで、WAF/CDN背後にある実際のオリジンIPを発見するプロセスを自動化します。 Unwafは、こちらのLinkedIn投稿で説明した手順を自動化するものです: Passive WAF bypassing 現在のバージョン: 3.0.0 — バージョン履歴についてはCHANGELOG.mdを参照してください。 目次 仕組み 発見手法 検証手法...

FUCK-CDN

FUCK-CDN あらゆる手段を尽くして、CDN の下着を剥ぎ取り、真の IP を見つけ出す。 Claude Code のために作られた自動化 CDN オリジンサーバー追跡スキル（Skill）。対象ドメインを入力すると、優先度に従って 40 種類以上の OSINT 手法を自動実行し、証拠チェーンを構築して最終判定を出力します。 ╔══════════════════════════════════════════════════╗ ║ 真の IP: 103...32 ║ ║ 信頼度: 確定 95%+ ║ ║ 所在地: 中国広東深圳 · 電信 ║ ║ 証拠チェーン: S SSL証明書の完全...

Malicious code in @edgecommons/streamlog-node (npm)

The @edgecommons/streamlog-node package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

Malicious code in salesforce-vscode-slds (npm)

The salesforce-vscode-slds package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a...

MAL-2026-10228 Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

MAL-2026-10234 Malicious code in slds-lsp-client (npm)

The slds-lsp-client package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Salesforce SLD...

MAL-2026-10229 Malicious code in enbd-react-error-boundry (npm)

The enbd-react-error-boundry package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization an 'enb...

Malicious code in @logdna-web/styles (npm)

The @logdna-web/styles package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...

EUVD-2008-5819

Malware in sbrugna...

PT-2024-15799 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: AnythingLLM affected versions not specified Description: If an instance of AnythingLLM is hosted on an internal network and the attacker is granted a permission level of manager or admin, they could link-scrape internally to resolve IPs of...

CVE-2022-3596

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...

SUSE CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...