Scavenger

Scavenger - OSINT-Bot - ÜBERARBEITET Bot in Aktion Einleitung Nur der Code meines OSINT-Bots, der auf Paste-Seiten nach sensiblen Datenlecks sucht. Suchbegriffe: Anmeldeinformationen private RSA-Schlüssel WordPress-Konfigurationsdateien MySQL-Verbindungszeichenfolgen Onion-Links SQL-Dumps...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites Plugin = 1.0.7 - CSRF zur beliebigen Plugin-Installation 📌 Übersicht CVE-2025-25101 ist eine Cross-Site-Request-Forgery CSRF -Sicherheitslücke im MetricThemes Munk Sites -Plugin für WordPress Versionen ≤ 1.0.7. Diese Sicherheitslücke ermöglicht es einem nic...

DarkScrape

=====The Dark-Scrape===== Strumento OSINT per trovare i link multimediali nei siti Tor Disponibile in Testato su Kali Linux 2019.2 Ubuntu 18.04 Nethunter Arc Linux Installazione root@kitploit: git clone https://github.com/itsmehacker/DarkScrape.git pip3 install -r requirements.txt Caratteristiche...

PasteHunter

PasteHunter PasteHunter è un'applicazione python3 progettata per interrogare una raccolta di siti che ospitano dati incollati pubblicamente. Per tutti i paste che trova, scansiona i contenuti grezzi con una serie di regole Yara alla ricerca di informazioni che possano essere utilizzate da...

CVE-2022-23361

Mobile Verification Bypass While Registering a New Account ------ Affected Product JDOmni---- All the Websites Built With JDOmni are Vulnerable. Questo repository è un riferimento pubblico per CVE-2022-23361. Questa vulnerabilità è stata ora corretta dal fornitore. Contattami:- LinkedIn-...

pastenum

Pastenum Pastenum एक टेक्स्ट डंप गणना उपकरण है। इसे सार्वजनिक साइटों पर पोस्ट किए गए डेटाडंप और डॉक्स खोजने और गिनने में मदद करने के लिए डिज़ाइन किया गया है। यह वर्तमान में github.com, gist.github.com, pastebin.com, pastee.org और pastie.org साइटों की खोज करता है। Pastenum, nullthreat के मूल...

recomposer

Recomposer.py Ever have that not so safe feeling uploading your malware binaries to VirusTotal or other AV sites because you can look up binaries by hashes? Example: https://github.com/mubix/vt-notify Feel somewhat safer with Recomposer! Recomposer will take your binary and randomly do the...

b2evolution CMS <6.11.6 - Open Redirect

b2evolution CMS before 6.11.6 contains an open redirect vulnerability via the redirectto parameter in emailpassthrough.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-22840 info:...

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - Broken Access Control

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 suffers from broken access control. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. id: CVE-2019-2578 info: name: Oracle Fusion...

Prometheus - Open Redirect

Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and...

vBulletin - Open Redirect

vBulletin 3.x.x and 4.2.x through 4.2.5 contains an open redirect vulnerability via the redirector.php URL parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-6200 info: name:...

Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting

The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to multiple instances of cross-site scripting that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Impacted versions that are affected are 11.1.1.8.0, 12.2.1.2....

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

Travelpayouts <= 1.1.16 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0337...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

Oracle WebCenter Sites (August 2026 CSPU)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported...

CVE-2026-61034

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61058

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...