inquisitor

Inquisitor お知らせ このプロジェクトは部分的にしか完成しておらず、以下のブログ記事で説明されている機能の多くはまだ実装されていません：https://penafieljlm.com/2017/07/14/inquisitor/...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

DDOS-RootSec

RootSec Archive Overview of RootSec Archive Welcome to the RootSec Archive , your ultimate resource for DDOS tools, scanners, botnets, exploits, and more. Our archive includes: Mirai Edits: Private and Public Versions QBot Edits: Private and Public Versions Other Botnet Variants: Diverse...

creepy-plugins

creepy-plugins 説明 cree.py 用のプラグイン cree.py のアーキテクチャでは、複数のユーザー定義の位置情報ソースを利用できます。これらのソースはプラグインとして定義され、インストールディレクトリ内の plugins フォルダにコピーすることで cree.py にインストールできます。 新しいプラグイン 他のユーザーと共有したい場合は、新しいプラグインのプルリクエストを作成してください。確認後、リポジトリにマージします。 開発 cree.py のプラグインには少なくとも 3 つのファイルが必要です。 pluginname.yapsy-plugin...

CVE-2026-90607

creationtimestamp| type| source ---|---|--- 2026-09-14 01:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvgvuaeebq2y 2026-09-14 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117267157816858685 2026-09-14 03:00:28+00:00| seen|...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2022-24818

CVE-2022-24818: Java Deserialization via Unchecked JNDI Lookups in GeoServer and GeoTools The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code execution. As an example thi...

TelemetrySource

TelemetrySource 该项目旨在映射来自各种遥测源中负责触发事件的功能。 主要映射表：事件映射 Google Sheet 目前已映射的源： Sysmon Windows 安全事件 Microsoft-Windows-Security-Auditing 威胁情报事件 Microsoft-Windows-Threat-Intelligence 每个源都有自己的 README 文件，其中包含理解映射工作方式所需的信息。 博客： 我已就“将这些事件追踪到 API”的方法撰写了几篇文章，如果您感兴趣，请阅读： Uncovering Windows Events - Part 1:...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.801...

disclo

disclo Domain contact finder. Give it a domain, get every email, handle, and lead associated with it - across 12 passive sources, in parallel. root@kitploit: $ python disclo.py gitlab.com disclo - gitlab.com ---------------------------------------------------------------------- hackerone...

coeus-ci

Coeus CI Competitive Intelligence that sees all. Named after Coeus SEE-us, the 100 eyed Greek Titan of the inquisitive mind — whose name literally means "querying." CI stands for Competitive Intelligence. A business intelligence OSINT tool that builds company profiles from free public data source...

CVE-2026-87629

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit an incorrect authorization vulnerability in the Sources component. This could lead to the disclosure of sensitive information...

DEBIAN-CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87629

Google Chrome prior to version 153.0.8010.36 is affected by an incorrect authorization vulnerability in the Sources component. A remote attacker leveraging social engineering can leak sensitive information via a crafted HTML page. Chromium rates the security severity as Low . The CVSS 3.1 base sc...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-87629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information...

PT-2026-88729

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2024-11080

creationtimestamp| type| source ---|---|--- 2026-09-05 09:48:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iboyimczc3bcm 2026-09-05 10:07:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muraacd22e2f 2026-09-05 10:30:05+00:00| seen|...