Ultimate-Social-Scrapers

由 Cyfy Labs 打造的终极社交媒体抓取工具 📢 重要更新 📢 Cyfy Labs 已不再运营。 感谢您在这段旅程中的所有支持！🫶 Cyfy Labs 提供现代化的社交媒体抓取工具 。我们的产品使企业和研究人员能够收集数百个公开数据点 ，用于潜在客户生成、情感分析、市场研究等用例。 🌐 我们的抓取器在全球范围内受到信赖，提供所有主要平台上最全面的社交媒体数据覆盖 ，帮助您通过可操作的 、数据驱动的洞察 保持领先。 立即开始您的旅程，使用最强大的抓取工具！ 访问我们的官方网站：👉 Cyfy Labs 🌟 传播消息 如果您觉得我们的产品有用，请给这个仓库一个...

snapchat-map-scraper

Snapchat 故事下载器 该程序可以搜索 Snapchat 的公开 Snap Map 在多个地点并下载所有故事，以便后续调查和 分类。关于 Snapchat 如何决定哪些视频出现在地图上的哪个“点”，目前尚不清楚，因此爬取器还可以将爬取的地理位置随机化几百米，以期让 API 提供更多相关视频。 已在 Linux 上测试过，但应该也能在 Windows/Mac 上运行（需安装视频播放器）。 安装说明 root@kitploit: git clone https://github.com/nemec/snapchat-map-scraper.git cd...

web

Aún no tengo datos. Es un error mayúsculo teorizar antes de tener datos. Insensiblemente uno comienza a torcer los hechos para que se ajusten a las teorías, en lugar de teorías que se ajusten a los hechos. 🚧 ⚠️ Trabajo en progreso; Aún no listo para usar,todavía ⚠️ 🚧 Presentando OSINTBuddy...

OSINT-Search

OSINT-Search 描述 基于 Python 的脚本，通过搜索电子邮件地址、电话号码、域名、IP 地址或 URL 等公共数据，应用 OSINT 技术。 在 https://pipl.com/api 创建账户并获取 API 密钥。 在 https://www.opencnam.com/ 创建账户并获取账户 SID 和身份验证令牌。 在 https://www.shodan.io/ 创建账户并获取 Shodan API 密钥。 在 https://whatcms.org/API 创建账户并获取 WhatCMS API 密钥。 在 https://censys.io/register...

gods-eye-view

🌐 God's Eye View A spy-satellite simulator in your browser — then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...

Belati

Belati Belati - 用于OSINT的传统瑞士军刀 Belati 是一款用于从网站和其他服务中收集公开数据与公开文档的工具，专为OSINT目的设计。该工具灵感来源于 Foca 和 Datasploit 的 OSINT 功能 : 当前版本 v0.2.4 Belati 实战演示 为什么我要制作这个？ 纯粹为了学习以及OSINT目的。如有错误，欢迎指正。 Belati 能做什么？ 交互式命令行界面 Whois（支持印尼TLD） 横幅抓取 子域名枚举 对所有子域名机器进行服务扫描 支持 Web 应用识别（Web Appalyzer） DNS 映射/区域扫描 从网站及搜索引擎收集邮件 从...

osintbuddy

我还没有任何数据。在没有数据之前就进行理论推导是一个重大错误。人们会不知不觉地扭曲事实来适应理论，而不是让理论适应事实。 | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | 认识 OSINTBuddy 注意 – 不，这个项目并没有“死亡” ，我们正在进行一次重大重写（Python 插件仍将得到支持！）。重写版本位于 github.com/osintbuddy/osintbuddy 欢迎来到 OSINTBuddy...

unauthscout

UnauthScout UnauthScout es una herramienta CLI para reconocimiento OSINT no autenticado en plataformas públicas de desarrollo como GitHub y GitLab. Estandariza la recopilación de datos de usuario disponibles públicamente mediante una interfaz consistente y contratos de salida JSON normalizados...

coeus-ci

Coeus CI Inteligencia Competitiva que lo ve todo. Nombrado en honor a Coeus SEE-us, el Titán griego de los cien ojos de la mente inquisitiva — cuyo nombre significa literalmente "indagar". CI significa Inteligencia Competitiva. Una herramienta OSINT de inteligencia empresarial que construye...

CVE-2026-81270

Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

EUVD-2026-70924

Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-81270

Apache Allura versions through 1.20.0 are affected by an information exposure vulnerability in its search functionality , allowing non-public data to be disclosed. The flaw is exploitable over the network with low complexity , no privileges , and no user interaction , yielding a High confidential...

CVE-2026-81270 Apache Allura: Information exposure via search

Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

cveye

C V E y e Zero-dependency CLI for CVE details & expl...

MAL-2026-10225 Malicious code in @logdna-web/shared (npm)

The @logdna-web/shared package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...

CVE-2026-24755

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource...

CVE-2026-6376 Missing authentication for critical function in SpiceJet Online Booking System

A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification mechanisms. This results in exposure of extensive personal, travel, and booking metadata to any unauthenticated user...

CVE-2026-40259

SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authentication that accepts publish-service RoleReader tokens. The handler passes a caller-controlled id directly to a model...

PT-2026-27232

Security Advisory — Page Content Retrieval Improper Authorization Summary An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

The Iranian Cyber Capability 2026

The Iranian Cyber Capability 2026 By John Fokker and Ernesto Fernández Provecho · March 5, 2026 Introduction In 2024, we published an assessment of the Islamic Republic of Iran’s cyber capabilities, outlining the structure, tradecraft, and strategic intent of Iranian-aligned threat actors. The co...