InfoG

InfoG v2.0 InfoG se pronuncia Info-yi es una herramienta de recopilación de información. Puedes encontrar direcciones IP, detalles de números de teléfono y mucho más. Cómo usar: Primero clona el repositorio: git clonehttps://github.com/Tech-Sec/InfoG.git Cambia tu directorio a la carpeta InfoG: c...

CloudFail

CloudFail CloudFail 是一款战术侦察工具，旨在收集足够多的关于受 Cloudflare 保护的目标的信息，以期发现服务器的真实位置。该工具使用 Tor 掩盖所有请求，目前拥有 3 种不同的攻击阶段。 1. 利用 DNSDumpster.com 进行错误配置的 DNS 扫描。 2. 扫描 Crimeflare.com 数据库。 3. 暴力破解超过 2500 个子域名。 欢迎为此项目贡献。如果您有想法或改进，请提交拉取请求！ 免责声明 该工具是一个概念验证（PoC），不保证结果。有可能正确配置 Cloudflare，使得 IP...

HatCloud

HatCloud - 已停用 HatCloud 使用 Ruby 构建。它用于绕过 CloudFlare 以发现真实 IP。 这在你需要测试服务器和网站时很有用。用于测试你对 DDoS（分布式拒绝服务）或 DoS（拒绝服务）的防护能力。 CloudFlare 是一项提供分布式域名服务器服务的服务，位于访问者和 Cloudflare 用户的主机提供商之间，充当网站的逆向代理。 其网络通过 DNS 变更来保护、加速并提升网站或移动应用的可用性。 版本：1.0 用法： ruby hatcloud.rb -h 或 --help ruby hatcloud.rb -b 你的网站 或 ruby...

SharpSniper

SharpSniper A menudo, un compromiso de Red Team va más allá de simplemente convertirte en administrador de dominio. Algunos clientes querrán saber si se puede comprometer a usuarios específicos del dominio, por ejemplo, el CEO. SharpSniper es una herramienta simple para encontrar la dirección IP ...

Malicious code in @edgecommons/streamlog-node (npm)

The @edgecommons/streamlog-node package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

Malicious code in salesforce-vscode-slds (npm)

The salesforce-vscode-slds package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a...

MAL-2026-10234 Malicious code in slds-lsp-client (npm)

The slds-lsp-client package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Salesforce SLD...

MAL-2026-10228 Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...

MAL-2026-10229 Malicious code in enbd-react-error-boundry (npm)

The enbd-react-error-boundry package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization an 'enb...

Malicious code in @logdna-web/styles (npm)

The @logdna-web/styles package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...

EUVD-2008-5819

Malware in sbrugna...

PT-2024-15799 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: AnythingLLM affected versions not specified Description: If an instance of AnythingLLM is hosted on an internal network and the attacker is granted a permission level of manager or admin, they could link-scrape internally to resolve IPs of...

CVE-2022-3596

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...

SUSE CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

DEBIAN-CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

Osmedeus v1.5 - Fully Automated Offensive Security Framework For Reconnaissance And Vulnerability Scanning

Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Installation git clone https://github.com/j3ssie/Osmedeus cd Osmedeus ./install.sh This install only focus on Kali linux, check more install on Wiki page How to use I...

Osmedeus - Fully Automated Offensive Security Tool For Reconnaissance And Vulnerability Scanning

Osmedeus allow you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. How to use If you have no idea what are you doing just type the command below or check out the Advance Usage ./osmedeus.py -t example.com Installation git clone...

openSUSE: Security Advisory for plasma5-workspace (openSUSE-SU-2018:0397-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...