osint-pattern-analyzer

Analizador de Patrones OSINT Herramienta para automatizar investigaciones OSINT a través de múltiples vectores de identidad números de teléfono, nombres de usuario y soporte futuro para correo electrónico, diseñada para extraer datos estructurados y permitir la detección de patrones y el análisis...

telegram-phish-simulator

es-define-property Object.defineProperty, but not IE 8's broken one. Example root@kitploit: const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty...

Moriarty-Project

Moriarty Project 重制版 V4.1.2. 文档页面 https://azizkpln.github.io/moriartyproject/ 关于 Moriarty Project 是一个强大的基于网页的电话号码调查工具。它拥有 6 个功能，允许你选择全部功能或你喜欢的部分功能。你可以访问文档页面了解更多功能详情。 当前状态 社交媒体卡顿问题已修复。 当前功能 尝试查找给定电话号码的机主。 尝试查找给定电话号码的垃圾短信风险情况。 尝试获取与给定号码相关的链接。 尝试查找针对该号码的评论。 尝试查找与该电话号码关联的社交媒体平台。 功能限制与未来开发...

Osint-Sync

Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...

whatsapp-census

¡Hola! Estás usando WhatsApp Este es el repositorio de GitHub para la versión extendida del artículo ¡Hola! Estás usando WhatsApp: Enumerando tres mil millones de cuentas para la seguridad y privacidad. Resumen WhatsApp, con 3.5 mil millones de cuentas activas a principios de 2025, es la platafor...

phoneinfoga

电话号码信息收集框架 文档 • API 文档 • 相关博客文章 关于 PhoneInfoga 是扫描国际电话号码的最先进工具之一。它可以让你先收集国家、地区、运营商和线路类型等基本信息，然后运用各种技术尝试查找 VoIP 提供商或识别机主。它依靠一组扫描器来工作，这些扫描器必须经过配置，工具才能有效发挥作用。PhoneInfoga 不会自动化所有事情，它只是帮助你对电话号码进行调查。 当前状态 该项目稳定但已停止维护。后续出现的 Bug 将不会被修复，仓库随时可能被归档。 功能特性 检查电话号码是否存在 收集国家、线路类型和运营商等基本信息 使用外部 API、电话簿和搜索引擎进行 OSI...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

CVE-2022-28601

CVE-2022-28601 A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor Vulnerability Details Risk : Medium Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Disclosed by: Flaviu Popescu Description: Two-Factor Authentication Bypass...

TrueCalle-Bot

TrueCalle-Bot TrueCaller Python 机器人：搜索电话号码并在终端打印结果 由 hossamsalem23 制作 首先： 下载 Chrome webdriver root@kitploit: https://chromedriver.chromium.org/downloads 安装 root@kitploit: git clone https://github.com/hossamsalem23/TrueCalle-Bot cd TrueCalle-Bot/ sudo apt install python3 sudo apt install python3-p...

Vaim-sms

Vaim-sms ¿Qué es Vaim-sms ? Este es un bombardero de SMS que envía OTP al número de teléfono objetivo de forma ilimitada. Muchas veces solo quieres molestar o gastar una broma a tus amigos. Si te encuentras en esa situación, entonces este Bombardero de SMS es la herramienta perfecta para ti. Pued...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

The tracing method of this honeypot targets red team members using mobile hotspots. The honeypot directly obtains the attacker's phone number for tracing. It catches them every time. Red team members, be careful. First, when you open the website, it monitors whether the F12 console is opened. If...

InfoLeak-Scanner

InfoLeak-Scanner Docker 首先运行 docker run --rm -p 8000:80 siwecos/infoleak-scanner。 打开浏览器使用扫描器：http://localhost/?url= 安装 安装 php5、curl 和网络服务器： root@kitploit: sudo apt-get install apache2 php5 php5-curl 将应用程序复制到网络服务器目录： root@kitploit: cp -R . /var/www/html/ 这是什么？ 内容管理系统（CMS） Drupal Joomla vbulletin...

PhoneNumber-OSINT

PhoneNumber-OSINT Una herramienta OSINT para recopilar información sobre números de teléfono Fue creada por Spider Anongreyhat Anonspidey Captura de pantalla Cómo instalar PhoneNumber-OSINT en Termux: root@kitploit: apt update && apt upgrade apt install python3 apt install git apt install pip git...

escort-network-osint

陪护网络OSINT调查 概述 本项目分析跨多个平台的陪护相关列表网络，识别共享基础设施、身份复用和集中协调的模式。 目标 识别个人资料、电话号码与平台之间的关系 检测身份复用和轮换的模式 分析潜在的有组织活动指标 关键发现 电话号码在多个身份间被重复使用 存在单人、双人及团体形式的个人资料 跨平台分发策略 集中协调的强烈迹象 查看完整发现：findings/findings.md 数据结构 rawdata/ → 原始数据集（Excel） entities/ → 结构化实体（电话号码、人员、个人资料、平台） evidences/ → 截图与证据 analysis/ → 分析笔记...

CVE-2026-14567 WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...

CVE-2026-14832

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...

CVE-2026-14832 ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...

CVE-2026-14832

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...