sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

Rabbit Hole

Overview Rabbit Hole provides a very limited subset of the functionality of Maltego, focused on creating visual representations of information for Penetration Testing. It provides creation of various types of nodes such as IP Addresses, Ports, Services, etc and links between them, with a much mor...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

OSINT-Cheat-sheet

OSINT CHEAT SHEET - List OSINT Tools Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible take your own risks, only for knowledge or educational purposes. Apologies if some of the resources are n...

holehe

Holehe OSINT - Email to Registered Accounts 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Holehe Online Version Summar...

ripVT

ripVT Maltego Canari transforms for Virus Total private API. Provided AS-IS, no warranties, no guarantees. No jokes in this repo. It's as serious as you are. Installation 1. Requires Canari, specifically this branch/version 2. Install Malformity 3. root@kitploit: sudo python setup.py install cana...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

msploitego

msploitego - Maltego的渗透测试套件 这是一个测试版，请多多包涵并报告任何问题。 更新内容 新功能 现在通过Postgres查询支持Metasploit的多个工作区 一个bash脚本，可对目标运行大量辅助模块，真正让Metasploit数据库变得“丰满” 转换： 枚举Metasploit工作区 Nikto解析器从文件 Enum4linux解析器（从文件） DNS扫描 错误修复 基于nmap的转换返回假阴性 错误的路径...

sploitego

Sploitego: el cómplice local de Maltego 1.0 - Introducción Sploitego es un paquete de transforms de pentest local que utiliza el Canari Framework para la ejecución local de transforms en Maltego. El framework se presentó por primera vez en DEFCON 20 y desde entonces ha ido ganando impulso. 2.0 -...

skiptracer

Account moved to: https://gitlab.com/illwill No longer supported at this time. Python 3 migration in progress, please do not report issues yet, as the code and the sources need a bunch of upgrading. Project moved to https://gitlab.com/illwill/skiptracer...

inquisitor

Inquisitor Aviso Este proyecto está solo parcialmente completo y aún tengo que implementar muchas de las características descritas en la siguiente publicación de blog que hice: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor es una herramienta simple para recolectar información sobre...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

Internet-Security-Project

Internet-Security-Project Aquí puedes encontrar mi informe sobre el proyecto que realicé para el curso de Seguridad en Internet. El informe está en italiano. Como lo escribí en Latex, también puedes encontrar los archivos fuente de Latex. El proyecto trata sobre la vulnerabilidad de Maltego...

MaltegoHeartbleed

MaltegoHeartbleed Transform de Maltego para detectar la vulnerabilidad Heartbleed de OpenSSL CVE-2014-0160 Para más información, lee el artículo en mi blog: http://disk0nn3ct.svbtle.com/maltego-openssl-heartbleed-transform...

SDK

SDK Público de Intelligence X El kit de desarrollo de software SDK permite a cualquier persona utilizar el motor de búsqueda de Intelligence X. Es de uso gratuito e Intelligence X agradece cualquier integración en herramientas y servicios de terceros. Intelligence X es un motor de búsqueda y...

Internet-Security-Project

Internet-Security-Project 你可以在这里找到我为互联网安全课程所做的项目报告。报告是意大利语的。因为我用LaTeX编写了它，你也可以找到LaTeX源文件。该项目讨论了Maltego漏洞CVE-2020-24656，该漏洞允许攻击者通过XXE注入攻击窃取数据。...

EUVD-2020-17371

Malware in sbrugna...

EUVD-2020-0111

Malware in sbrugna...

Uncovering Black-Hat SEO Based Fake E-Commerce Scam Groups from Their Redirectors and Websites

While law enforcements agencies and cybercrime researchers are working hard, fake E-commerce scam is still a big threat to Internet users. One of the major techniques to victimize users is luring them by black-hat search-engine-optimization SEO; making search engines display their lure pages as i...