Reconky-Automated_Bash_Script

Reconky-自动化Bash脚本 root@kitploit: \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / 用法 ./reconky.sh 关于 Reconky 是一个用 bash 编写的脚本，用于自动化侦察和信息收集任务。该 Bash...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: root@kitploit: ▶ cat domains.txt | waybackurls urls Install: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

JWTXposer

JWTXposer 面向漏洞赏金猎人和红队成员的自动化JWT发现与分析工具 JWTXposer是什么？ JWTXposer 是一款自动化侦察工具 ，能够扫描像 Wayback Machine 这样的公共存档，提取泄露的 JWT 令牌 ，并对其进行解码以识别可能被利用的信息。 专为漏洞赏金猎人 、红队成员 和CTF玩家 打造，JWTXposer 消除了手动寻找JWT的繁琐工作，并高亮显示 关键声明 （如 userId、accesstoken、scope、authType 等）。 它执行自动化被动侦察 、活端点分析 和JWT解码 ，以提取可能引发以下风险的关键令牌： 🔓 访问控制失效 🔐...

goodoldsearch-oss

Good Old Search 使用精确短语、站点过滤器、排除项、日期范围、文件类型以及一键式链接，跨搜索引擎和垂直搜索目标构建精准搜索查询。 这不是搜索引擎、元搜索聚合器、爬虫或 API 代理。它是一个本地静态查询构建器，用于打开你选择的搜索引擎。 该应用具有五个界面： 简单：日常精确搜索构建器，位于 index.html。 高级搜索实验室：面向专业操作符的构建器，位于 advanced.html，支持 Google 搜索语法、文件类型搜索、站点/路径过滤器、标题/URL/正文操作符、日期范围、预设以及原始操作符行。 Shodan：一个 Shodan 查询构建器和搜索助手，位于...

CWFF

CWFF - 用于模糊测试的自定义单词列表 CWFF 是一个工具，它通过并发以最高速度为您创建高质量的特殊模糊测试/内容发现单词列表，并且它深受 @tomnomnom 的 Who, What, Where, When, Wordlist NahamCon2020 启发。 用法 root@kitploit: CWFF -h --threads --github --subdomains --recursive --js-libraries --connected-websites --juicy-files --use-filter-model -o domain positional...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

NextRecon

NextRecon NextRecon es una herramienta de reconocimiento simple basada en Python diseñada para cazadores de recompensas por errores, investigadores de seguridad y probadores de penetración. Realiza reconocimiento pasivo recolectando URLs archivadas de Wayback Machine y obteniendo credenciales...

urx

从 OSINT 归档中提取 URL，用于安全洞察。 Urx 是一款命令行工具，旨在从 OSINT 归档（如 Wayback Machine 和 Common Crawl）中收集 URL。基于 Rust 构建以实现高效，它利用异步处理快速查询多个数据源。该工具简化了为指定域名收集 URL 信息的过程，提供全面的数据集，可用于多种目的，包括安全测试和分析。 特性 从多个数据源并行获取 URL（Wayback Machine、Common Crawl、OTX、Arquivo.pt） 默认无密钥：Wayback、Common Crawl、OTX、Arquivo.pt 和 URLScan（匿名）均...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

TheTimeMachine

🚀 TheTimeMachine v3.0 - Armando Wayback para Reconocimiento, Bug Bounties, OSINT y más! Has oído hablar de los viajes en el tiempo en películas y cómics, ¿verdad? Bueno, esto ya no es ficción 😎. TheTimeMachine te permite explorar el pasado de cualquier aplicación web extrayendo URLs archivadas de...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

Omise: PII Exposure via Email Confirmation Link – Email Embedded in Token & Leaked via Wayback Machine

The vulnerability involved the exposure of personally identifiable information PII, specifically email addresses, through an email confirmation link used by Omise. The email address was embedded directly in a token that was visible in the URL. This token was subsequently archived by the Wayback...

Internet Archive (Archive.org) Goes Down Following “Power Outage” (Updated)

The Internet Archive Archive.org, home to the Wayback Machine, is temporarily offline due to a reported power outage.…...

Internet Archive attackers email support users: “Your data is now in the hands of some random guy”

Those who hacked the Internet Archive haven't gone away. Users of the Internet Archive who have submitted helpdesk tickets are reporting replies to the tickets from the hackers themselves. Internet Archive, most known for its Wayback Machine, is a digital library that allows users to look at...

Internet Archive Breach Exposes 31 Million Users

The hack exposed the data of 31 million users as the embattled Wayback Machine maker scrambles to stay online and contain the fallout of digital—and legal—attacks...

WebSecProbe - Web Security Assessment Tool, Bypass 403

A cutting-edge utility designed exclusively for web security aficionados, penetration testers, and system administrators. WebSecProbe is your advanced toolkit for conducting intricate web security assessments with precision and depth. This robust tool streamlines the intricate process of...

Arsenal - Recon Tool installer

Arsenal is a Simple shell script Bash used to install the most important tools and requirements for your environment and save time in installing all these tools. Tools in Arsenal Name | description ---|--- Amass | The OWASP Amass Project performs network mapping of attack surfaces and external...

Planet Labs: Api data leak

A security vulnerability was identified where sensitive API keys were exposed through archived data accessible via the Wayback Machine. Some of these API keys were found to be valid...

Logitech: Steal any users `access_token` via open redirect in https://streamlabs.com/global/identity?popup=1&r=

Heyy there, After reading the disclosed report 1178239, I started to look for bypasses but I found that it's restricted to only streamlabs.com and merch.streamlabs.com , providing any other domain or subdomain of streamlabs.com gives an error instead of the 302 redirect. From wayback machine...