osint-brazuca

OSINT Open-source intelligence Navegación : 🏠 README Principal | 📖 Ejemplos Prácticos | 🔀 Flujogramas | 📊 Guía Rápida | 🤝 Contribuir Introducción El proyecto OSINT Brazuca es un repositorio creado con el propósito de reunir información, fuentes sitios web/portales y trucos de OSINT dentro del...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

kernelpop

kernelpop kernelpop is a framework for performing automated kernel vulnerability enumeration and exploitation on the following operating systems: Linux Mac It is designed to be python version-agnostic, meaning that it should work with both python2 and python3 please let me know if you find that i...

deepdarkCTI

deepdarkCTI Colección de fuentes de Inteligencia de Amenazas Cibernéticas de la Deep y Dark Web El sitio web oficial del proyecto es https://www.deepdarkcti.com. El objetivo de este proyecto es recopilar las fuentes, presentes en la Deep y Dark Web, que pueden ser útiles en contextos de...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

DDOS-RootSec

Archivo RootSec Resumen del Archivo RootSec Bienvenido al Archivo RootSec , tu recurso definitivo para herramientas de DDOS, escáneres, botnets, exploits y más. Nuestro archivo incluye: Ediciones Mirai: Versiones privadas y públicas Ediciones QBot: Versiones privadas y públicas Otras variantes de...

disclo

disclo Buscador de contactos de dominio. Dale un dominio, obtén cada correo electrónico, handle y lead asociado con él, a través de 12 fuentes pasivas, en paralelo. root@kitploit: $ python disclo.py gitlab.com disclo - gitlab.com...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2026-78555

creationtimestamp| type| source ---|---|--- 2026-08-24 20:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu6ksdv5v25 2026-08-24 21:08:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hsi2l5kmjjwul 2026-08-24 22:07:41+00:00| seen|...

coeus-ci

Coeus CI Inteligencia Competitiva que lo ve todo. Nombrado en honor a Coeus SEE-us, el Titán griego de los cien ojos de la mente inquisitiva — cuyo nombre significa literalmente "indagar". CI significa Inteligencia Competitiva. Una herramienta OSINT de inteligencia empresarial que construye...

zannotate

ZAnnotate ZAnnotate es una utilidad en Go que facilita anotar grandes conjuntos de datos de IP con metadatos de red. Actualmente esto incluye: CLI Flag| Descripción| Requiere API Key| Requiere descarga de datos ---|---|---|--- --censys| Inteligencia de internet de Censys API en vivo| Sí| --cymru|...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

cveye

C V E y e Zero-dependency CLI for CVE details & expl...

CVE-2026-75593 BuildKit: Malicious client can bypass destination directory validation on local sources upload

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to...