goodoldsearch-oss

Good Old Search 使用精确短语、站点过滤器、排除项、日期范围、文件类型以及一键式链接，跨搜索引擎和垂直搜索目标构建精准搜索查询。 这不是搜索引擎、元搜索聚合器、爬虫或 API 代理。它是一个本地静态查询构建器，用于打开你选择的搜索引擎。 该应用具有五个界面： 简单：日常精确搜索构建器，位于 index.html。 高级搜索实验室：面向专业操作符的构建器，位于 advanced.html，支持 Google 搜索语法、文件类型搜索、站点/路径过滤器、标题/URL/正文操作符、日期范围、预设以及原始操作符行。 Shodan：一个 Shodan 查询构建器和搜索助手，位于...

gatekeeper

Gatekeeper Gatekeeper 是什么？ Gatekeeper 是首个开源 DDoS 防护系统。它旨在扩展到任何峰值带宽，因此能够抵御现在和未来的 DDoS 攻击。尽管 Gatekeeper 采用地理分布式架构，但描述所有必须对入站流量执行的决策的网络策略是集中式的。这种集中式策略使网络运营商能够利用在极高延迟下不可行的分布式算法（例如分布式数据库），并同时抵御多个多向量 DDoS 攻击。 Gatekeeper 的目标用户是机构、服务提供商和内容提供商、企业网络等的网络运营商。它不旨在被个人互联网用户使用。 更多信息，请参阅 Gatekeeper 维基。 如何设置 配置大页...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

shodan

Shodan 搜索技巧 by twitter.com/lothos612 欢迎提出建议 Shodan 搜索技巧 基础 Shodan 过滤器 city: 查找特定城市的设备。 city:"Bangalore" country: 查找特定国家的设备。 country:"IN" geo: 通过指定地理坐标查找设备。 geo:"56.913055,118.250862" 位置 country:us country:ru country:de city:chicago hostname: 查找匹配主机名的设备。 server: "gws" hostname:"google"...

ThreatActors-TTPs

ACTORES DE AMENAZAS Y RANSOMWARES - TTPs Este repositorio fue creado con el objetivo de ayudar a empresas e investigadores independientes a estudiar las Tácticas, Técnicas y Procedimientos TTPs , basadas en el marco MITRE ATT &CK, adoptadas por operadores/grupos de ransomware activos o inactivos ...

twitter-advanced-search

🔍 Twitter 高级搜索 这些操作符适用于 网页版、移动版、Tweetdeck。 存在一些重叠，但大部分情况下，这些操作符不适用于 v1.1 搜索、高级搜索 或 v2 搜索 API。 改编自 TweetDeck 帮助、@lucahammer 指南、@eevee Twitter 手册、@pushshift 以及 Twitter/Tweetdeck 本身。欢迎贡献/测试/提供示例！类别| 运算符| 查找推文...| 示例： ---|---|---|--- 推文内容| nasa esa nasa esa| 同时包含 "nasa" 和 "esa"。空格隐含...

BackupOperatorToDA

从备份操作员到域管理员 如果您攻陷了“备份操作员”组成员账户，您无需在域控制器上使用RDP或WinRM即可成为域管理员。 全部功劳归功于 filipdragovic 及其初始 POC！我构建此项目是因为我想要一个更通用的、带参数的二进制文件，并且能够将 SAM 数据库导出到远程共享！ PS C:\Users\mpgn\POC .\BackupOperatorToDA.exe -h Backup Operator to Domain Admin by @mpgnx64 此工具感谢 @filipdragovic / https://github.com/Wh04m1001 必选参数： -t...

CVE-2025-21293

CVE-2025-21293 CVE-2025-21293 es una vulnerabilidad de elevación de privilegios en Active Directory Domain Services. Permite que "Network Configuration Operators" ejecuten código con privilegios SYSTEM a través de Windows Performance Counters. Las versiones afectadas de Windows incluyen Windows 1...

google-dorks

google-dorks Update Jan 2026 Read this, my Medium Blog Space:👩‍💻Proviesec Security Medium Articles - read it Table of Contents Introduction My love google dork Search filters Operators Search Term OR Ideas Links Example Preventing GOOGLE DORKS Introduction ⭐ Star us on GitHub — it motivates a lot!...

twint

TWINT - Twitter Intelligence Tool No authentication. No API. No limits. Twint is an advanced Twitter scraping tool written in Python that allows for scraping Tweets from Twitter profiles without using Twitter's API. Twint utilizes Twitter's search operators to let you scrape Tweets from specific...

Rocky Linux 9.6 [TuxCare] Security Update: exim / exim-greylist / exim-mon / exim-mysql / exim-pgsql (ALMALINUX9.6:CLSA-2026:1778690918)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778690918 advisory. - In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present...

CVE-2026-101880

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...

EUVD-2026-90253

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...

CVE-2026-93760 NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard

Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that forwards externally supplied filter parameters in this way, a party with no credentials may influence how the databas...

USN-8765-1: python-sql vulnerability

Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks...

USN-8765-1 python-sql vulnerability

Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks...

Astra Linux – Vulnerability in exim4

In Exim before 4.99.2, when utf8 operators are enabled, there is a potential for out-of-bounds reading if large UTF-8 trailing characters are present malformed UTF-8 header data. Information may be disclosed within an error message generated during the processing of an unrelated email message...

Improper Neutralization of Special Elements in Data Query Logic

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic using NoSQL operators in the GridFS file identifier handling in gridfs/synchronous/gridfile.py, gridfs/asynchronous/gridfile.py, and gridfs/gridfileshared.py, where delete,...

CVE-2026-19633 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

CVE-2026-19633

PostgreSQL Anonymizer is a PostgreSQL extension for data masking. This vulnerability allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated within the extension's masking ...