TrueConf Server Authentication Bypass

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access under an arbitrary username without a password...

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

CVE-2019-8449

CVE-2019-8449 CVE-2019-8449 Exploit for Jira Releases Below v8.3.4 CVSS Score: 5.0 Vulnerability Types: Information Disclosure Authentication: Not Required Affected Versions: 2.1 - 8.3.4 Publish Date: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 Description The...

CVE-2020-10199

CVE-2020-10199 Echo version, casually written untested bug Usage: python http://127.0.0.1:8080 username password Reference: https://www.cnblogs.com/magic-zero/p/12641068.html...

CVE-2024-6043

CVE-2024-6043 CVE-2024-6043 CVE-2024-6043 Overview This Python tool exploits the CVE-2024-6043 vulnerability, which affects the SourceCodester Best House Rental Management System 1.0. The vulnerability allows remote attackers to perform SQL Injection via the adminclass.php file, specifically...

opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

CVE-2022-23342

CVE-2022-23342 Security Advisory – Username Enumeration in OnBase Affected software versions and builds: OnBase Application Server OnBase releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are impacted. Fixed software versions and builds: OnBase EP3 releases great...

woo

Woocommerce 3.3 to 5.5 - Unauthenticated SQL Injection https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 Exploit woocommerce SQLI and grab user and password hash Commands usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h, --help show this help message and...

Ominis-OSINT

Ominis-OSINT: Web Hunter 🌐🕵️‍♂️ SURPRISE UPDATE SCHEDULED FOR DEVELOPMENT RESCHEDULED. WINTERGATE WILL BE EXPANDING THIS PROJECT Github Actions Visit actions/workflows and chose any of the 3 options to try out Ominis OSINT right from github! Web Search :...

go-sherlock

go-sherlock go-sherlock is an implementation of sherlock written in Go with some changes for better performance and more accurate results. Provided by Skele's Choice. Skele's Choice, it's the best choice! Ask your bones! skele.company Inspiration, Reference, & Credits sherlock WhatsMyName Effecti...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...

Instagram-Crawler

Instagram-Crawler Non API. Crawling post photo, likes, comments, date ... by username, hashtags Installation 1. Make sure you have Chrome browser installed. 2. Download chromedriver and put it into driver folder: ./driver/chromedriver 3. Install requirements pip install -r requirements.txt...

blackbird

Blackbird An OSINT tool to search fast for accounts by username across 574 sites. The Lockheed SR-71 "Blackbird" is a long-range, high-altitude, Mach 3+ strategic reconnaissance aircraft developed and manufactured by the American aerospace company Lockheed Corporation. Disclaimer This or previous...

osint-tools-mcp-server

🔍 OSINT Tools MCP Server A comprehensive MCP server that exposes multiple OSINT tools to AI assistants like Claude. This server allows AI to perform sophisticated reconnaissance and information gathering tasks using industry-standard OSINT tools. 🛠️ Available Tools 🔍 Sherlock - Username Search...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

CVE-2022-40684

CVE-2022-40684 One-click enumeration of all usernames and writing SSH public key Integrated and optimized the code from these two repositories to achieve one-click enumeration of all usernames and writing SSH public key results: https://github.com/carlosevieira/CVE-2022-40684/blob/main/exploit.py...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Edited version of the original exploit: https://www.exploit-db.com/exploits/45233 Converted to Python3 Added username wordlist option How To Run Ensure that you install the requirements: foo@bar:$ pip3 install -r requirements.txt For...