public-passwd

!WARNING Only use this on systems you own or have authorisation to test. It is recommended to keep a root shell open if you won't be able to reboot the system in case of failure, as you may not be able to clear the page cache for /etc/shadow without root. public-passwd Use CVE-2026-46333 and...

pwnedOrNot

OSINT Tool for Finding Passwords of Compromised Email Accounts Created by Lohitya Pushkar thewhiteh4t. Twitter - Blog Available| in| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot works in two phases. In the first phase it tests the given email address using HaveIBeenPwned v3...

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks Date| Description| Notes ---|---|--- April 2025| Thoughts of AWS Access key ID's from an S3 bucket| The keys to the AWS kingdom March 2025| 16,000 subscribers to Nine newspapers from Australia| name, postal address...

ParrotSec-Linux-Hardening-Project

ParrotSec Linux - Public Kiosk Project Designing & Implementing A restricted & Trustworthy Environment Hardened kernel - GrSecurity Patched Kernel - PaX Hardening - x PaXctl - x PaXTest - x PaXctld - x Hardened Kernel Runtime Parameters - x Kernel Self Protection Project KSPP - x pti=on - Kernel...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

OSINT-Search

OSINT-Search Description Script in Python that applies OSINT techniques by searching public data using email addresses, phone numbers, domains, IP addresses or URLs. Create an account at https://pipl.com/api and get the API key. Create an account at https://www.opencnam.com/ and get the Account S...

Cyber-Defence

Introduction This repository holds information released publicly by NCC Group's Cyber Incident Response Team. Contact To request further information about anything in this repository please contact the team at [email protected]. To engage with our CIRT team due to a breach please contact...

Zeek-Intelligence-Feeds

Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...

public-pentesting-reports

Public penetration testing reports A repository containing public penetration test reports published by consulting firms and academic security groups. Maintained by Julio @ Blaze Information Security https://www.blazeinfosec.com. Based on a list started in 2015 by Arne Padmos. See this repo for a...

geowifi

📡💘🌎 | geowifi Search WiFi geolocation data by BSSID and SSID on different public databases. 💾 Databases Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ DiscontinuedOpenWifi ✔️Prerequisites Python3. In order to display emojis on Windows , it is recommended to...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

Ultimate-Social-Scrapers

Ultimate Social Scrapers by Cyfy Labs 📢 Important Update 📢 Cyfy Labs is no longer active. Thank you for all your support on this journey! 🫶 Cyfy Labs provides modern social media scraping tools. Our products enable businesses and researchers to collect hundreds of public data points for use cases...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

snapchat-map-scraper

Snapchat Story Downloader This program can search Snapchat's public Snap Map at multiple locations and download all stories for later investigation and categorization. A lot is unknown about how Snapchat decides which videos show up at which "point" on the map, so the scraper can also randomize t...

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and then 192.168.1...

CVE-2026-0257

CVE-2026-0257: GlobalProtect Authentication Bypass Overview This exploit achieves unauthenticated VPN access to a Palo Alto GlobalProtect gateway/portal by forging an authentication cookie using only the server's publicly available TLS certificate. The Core Vulnerability Why It Works GlobalProtec...

CVE-2026-112237

The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply the authorization check that protects the other methods, so the URL it fetches is fully controlled by the requester. An unauthenticated attacker can...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...