52 matches found
Emora-Project
Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...
tookie-osint
Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...
go-sherlock
go-sherlock go-sherlock is an implementation of sherlock written in Go with some changes for better performance and more accurate results. Provided by Skele's Choice. Skele's Choice, it's the best choice! Ask your bones! skele.company Inspiration, Reference, & Credits sherlock WhatsMyName Effecti...
sherlock
Rintraccia account sui social media tramite username su oltre 400+ social network Installazione • Utilizzo • Contribuire Installazione !WARNING I pacchetti per ParrotOS e Ubuntu 24.04, mantenuti da terze parti, risultano non funzionanti. Gli utenti di questi sistemi dovrebbero affidarsi a...
Sherlock
Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...
CVE-2026-44590
CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream advisory: sherlock-project/sherlock GHSA advisory NVD...
sherlock v0.16.2
Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...
2026-07-tare-nightbox33-cloud
Tare contest details - Join Sherlock Discordhttps://discor...
Linux Distros Unpatched Vulnerability : CVE-2026-44590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is...
CVE-2026-44590 Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml
Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is vulnerable to command injection via the pullrequesttarget trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltra...
CVE-2026-44590: Improper Neutralization of Special Elements used in an OS Command
Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is vulnerable to command injection via the pullrequesttarget trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltra...
sherlock 操作系统命令注入漏洞
Sherlock is an open-source username search tool developed by Sherlock. Versions of Sherlock prior to 0.16.1 contained a vulnerability related to operating system command injection. This vulnerability originated from the pullrequesttarget trigger in the GitHub Actions workflow...
Exploit for CVE-2026-44590
CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullr...
AutoRDPwn
This is a post-exploitation framework called AutoRDPwn, written in PowerShell. It is designed to automate the Shadow attack on Microsoft Windows computers, which allows a remote attacker to view and control the victim's desktop without their consent. The framework has a user-friendly interface an...
Malicious code in focus-sherlock (npm)
The package focus-sherlock was found to contain malicious code...
Malicious code in sherlock-frontier-client (npm)
The package sherlock-frontier-client was found to contain malicious code...
MAL-2025-33092 Malicious code in sherlock-frontier-client (npm)
The package sherlock-frontier-client was found to contain malicious code...
MAL-2025-20733 Malicious code in focus-sherlock (npm)
The package focus-sherlock was found to contain malicious code...
A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation
Sherlock Holmes is famous for his incredible ability to sort through mounds of information; he removes the irrelevant and exposes the hidden truth. His philosophy is plain yet brilliant: "When you have eliminated the impossible, whatever remains, however improbable, must be the truth." Rather tha...