voidaccess v1.9.4

VoidAccess Self-hostable OSINT for turning dark-web research queries into structured threat intelligence. Built for security researchers, threat-intelligence teams, and authorized investigators who need collection, enrichment, relationship mapping, and export in one workflow. Terminal Output Quic...

user-scanner v1.4.2

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 380+ total scan vectors —including 155+ email-integrated sites and 225+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...

Exploit for Command Injection in Php

Vulnerability Assessment and OSINT: CVE-2012-1823 My reposito...

socid-extractor v0.1.1

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

Telegram Channel Profiler

Passive Telegram surface profiling via public t.me previews and optional Bot API getChat for authorized investigations. No account login required. from kittysploit import import json import re from urllib.parse import quote from core.osint.providers import telegrambottoken from...

OpenAPI Swagger Finder

Probe common OpenAPI/Swagger paths and validate exposed API specifications for version, title, and sensitive endpoint inventory. !/usr/bin/env python3 -- coding: utf-8 -- """Discover exposed OpenAPI and Swagger documentation endpoints.""" from future import annotations import json import re from...

Favicon HTTP Fingerprint

Collect favicon hashes Shodan-compatible MurmurHash3 and HTTP fingerprints Server, powered-by, title for host correlation and shadow-asset discovery. !/usr/bin/env python3 -- coding: utf-8 -- """Favicon and HTTP fingerprint pivoting for host correlation.""" from future import annotations import...

Web Surface Harvester

Passive harvest of security.txt, robots.txt, and sitemap.xml — contacts, disallowed paths, and public URL inventory. !/usr/bin/env python3 -- coding: utf-8 -- """Harvest security.txt, robots.txt, and sitemap.xml from a target domain.""" from future import annotations import json import re from...

Email Pattern Harvester

Harvest organizational email addresses and patterns from passive sources: DMARC/SPF TXT records, RDAP contacts, and certificate transparency naming hints. from kittysploit import import json import os import re from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient...

termux-tx

TX — Termux eXecutive 🚀 Advanced Cybersecurity CLI Tool f...

kiro-cybersecurity-skills

CyberSecurity Skills A collection of 15 security workflows co...

CVE-2026-42866

Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's writetxt, writecsv, writejson, and commented-but-shipping scanfile helpers open their output as openf"user.", where user comes unsanitized from the -u CLI flag or any line of a -U usernames file. A userna...

blog-coeur (>=0.0.12, <=0.0.19), chat-portal (>=0.1.0, <=0.2.1) +8 more potentially affected by unknown CVE via instagrapi (>=2.0.0, <=2.6.6)

instagrapi PYPI version =2.0.0, =0.0.12, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.3.7, =0.1.0, =0.1.0, =1.0.2, =2.8.50 Source cves: unknown CVE Source advisory: SNYK:PYTHON-INSTAGRAPI-17670585...

blog-coeur (>=0.0.12, <=0.0.19), chat-portal (>=0.1.0, <=0.2.1) +8 more potentially affected by unknown CVE via instagrapi (>=2.0.0, <=2.6.6)

instagrapi PYPI version =2.0.0, =0.0.12, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.3.7, =0.1.0, =0.1.0, =1.0.2, =2.8.50 Source cves: unknown CVE Source advisory: GHSA-GGXF-37HM-9WQF...

CVE-2026-42158

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, an adversary with knowledge of an investigation ID, could update the metadata of an investigation of another user. This vulnerability is fixed in 1.2.3...

PT-2026-40948

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Flowsint allows a user to create investigations, which are used to manage sketches and analyses. Sketches have controllable graphs, which are comprised...

EUVD-2026-29873

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

CVE-2026-44352

Flowsint, an open-source OSINT graph exploration tool, has a Broken Access Control vulnerability prior to version 1.2.3 that allows reading of sketch logs by any user. The issue is fixed in 1.2.3. Available records (CVE-2026-44352) cite a base score of 5.3 (Medium) with network access and low att...

PT-2026-40470

Name of the Vulnerable Software and Affected Versions Flowsint versions prior to 1.2.3 Description Broken Access Control allows unauthorized reading of sketch logs from any user. This issue affects an open-source OSINT graph exploration tool used for cybersecurity investigation, transparency, and...

CVE-2026-44352: Improper Access Control

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Broken Access Control allows reading of sketch logs from any user. This vulnerability is fixed in 1.2.3...