Emora-Project

Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...

tookie-osint

Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...

sherlock

通过用户名在 400+ 社交网络中搜索社交媒体账号 安装 • 使用方法 • 贡献 安装 !WARNING 由第三方维护的 ParrotOS 和 Ubuntu 24.04 软件包似乎已损坏。 这些系统的用户应使用 uv/pipx/pip 或 Docker。 方法| 备注 ---|--- pipx install sherlock-project| 可使用 pip 或 uv 代替 社区维护的软件包可用于 Debian = 13、Ubuntu = 22.10、Homebrew、Kali 和 BlackArch。这些软件包不由 Sherlock Project 直接支持或维护。...

go-sherlock

go-sherlock go-sherlock is an implementation of sherlock written in Go with some changes for better performance and more accurate results. Provided by Skele's Choice. Skele's Choice, it's the best choice! Ask your bones! skele.company Inspiration, Reference, & Credits sherlock WhatsMyName Effecti...

Sherlock

Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - 通过 pullrequesttarget 注入实现 RCE → 供应链攻击 发现并报告者：Astaruf 完整技术文章：https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ 上游安全公告：sherlock-project/sherlock GHSA 安全公告 NVD 条目：https://nvd.nist.gov/vuln/detail/CVE-2026-44590 CVE...

2026-07-tare-nightbox33-cloud

Tare contest details - Join Sherlock Discordhttps://discor...

Linux Distros Unpatched Vulnerability : CVE-2026-44590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is...

CVE-2026-44590 Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml

Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is vulnerable to command injection via the pullrequesttarget trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltra...

sherlock 操作系统命令注入漏洞

Sherlock is an open-source username search tool developed by Sherlock. Versions of Sherlock prior to 0.16.1 contained a vulnerability related to operating system command injection. This vulnerability originated from the pullrequesttarget trigger in the GitHub Actions workflow...

Exploit for CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullr...

AutoRDPwn

This is a post-exploitation framework called AutoRDPwn, written in PowerShell. It is designed to automate the Shadow attack on Microsoft Windows computers, which allows a remote attacker to view and control the victim's desktop without their consent. The framework has a user-friendly interface an...

Malicious code in sherlock-frontier-client (npm)

The package sherlock-frontier-client was found to contain malicious code...

Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

MAL-2025-33092 Malicious code in sherlock-frontier-client (npm)

The package sherlock-frontier-client was found to contain malicious code...

MAL-2025-20733 Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation

Sherlock Holmes is famous for his incredible ability to sort through mounds of information; he removes the irrelevant and exposes the hidden truth. His philosophy is plain yet brilliant: "When you have eliminated the impossible, whatever remains, however improbable, must be the truth." Rather tha...

Malicious code in sherlock-front (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3013 Malicious code in sherlock-front (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4299

The system configuration interface of HGiga iSherlock including MailSherlock, SpamSherock, AuditSherlock fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enablin...