OsintFlow ✙

🔎 Инструменты для работы с дорками

Небольшая подборка инструментов, которые позволят вам автоматизировать процесс доркинга.

▫️ GitDorker
▫️ Katana
▫️ Fast-Google-Dorks-Scan
▫️ oxdork
▫️ SDorker
▫️ pagodo
▫️ dorks-eye

Online инструменты:

▫️ Dorksearch
▫️ FilePhish
▫️ Bug Bounty Helper
▫️ Pentest-tools google-hacking

#web #recon #dork

368 viewsᅠ, 23:05

OsintFlow ✙

https://github.com/rapid7/metasploit-framework/pull/16563

GitHub

Zyxel Firewall Unauthenticated Command Injection (CVE-2022-30525) by jbaines-r7 · Pull Request #16563 · rapid7/metasploit-framework

This module exploits CVE-2022-30525, an unauthenticated and remote command injection vulnerability affecting Zyxel firewalls with zero touch provisioning (ZTP) support. This module exploits a comma...

423 viewsᅠ, 23:06

OsintFlow ✙

Forwarded from PT SWARM

😎 F5 BIG-IP RCE (CVE-2022-1388). How it works.

347 viewsᅠ, 23:09

OsintFlow ✙

Forwarded from SHADOW:Group

⚡️ Небольшая подборка плагинов для OWASP ZAP

▫️ Access Control Testing
Позволяет проводить тестирование контроля доступа и выявлять потенциальные проблемы с контролем доступа.

▫️ Advanced SQLInjection Add-on
Инструмент активного сканирования для обнаружения SQLi (на основе SQLMap).

▫️ Attack Surface Detector
Плагин помогает выявить конечные точки веб-приложения, параметры, которые принимают эти конечные точки, и тип данных этих параметров.

▫️ DOM XSS Active Scan Rule
Активный сканер для обнаружения уязвимостей DOM XSS.

▫️ Directory List v2.3
Предоставляет файлы с именами каталогов для брутфорса или фаззинга.

▫️ Eval Villain
Расширение для ZAP и Firefox, которое будет подключаться к опасным функциям, таким как eval, и предупреждать вас об их использовании.

▫️ GraphQL Support
Плагин для получения структуры и запросов GraphQL.

▫️ Out-of-band Application Security Testing Support
Сервер OAST для обнаружения внешних и слепых уязвимостей. Аналог Burp Collaborator, только для ZAP.

▫️ HUNT v2
Выполняет пассивное сканирование на наличие потенциально уязвимых параметров.

▫️ Community-scripts
Большая коллекция скриптов ZAP предоставленная комьюнити

#web #tools

392 viewsᅠ, 23:16

OsintFlow ✙

Forwarded from PT SWARM

A Tip for SQL Injection WAF Bypass

338 viewsᅠ, 23:21

OsintFlow ✙

List of #osint tools https://github.com/topics/osint-tools

GitHub

GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.

423 viewsᅠ, edited 23:42

OsintFlow ✙

ddos-tg.py

1.7 KB

Telegram Desktop 2.9.2 - Denial of Service (PoC)

538 viewsᅠ, 13:58

OsintFlow ✙

Apache CouchDB 3.2.1 - 2022.05 RCE https://github.com/sadshade/erlang-otp-rce

GitHub

GitHub - sadshade/erlang-otp-rce: Python script to execute commands via Erlang/OTP Distribution Protocol

Python script to execute commands via Erlang/OTP Distribution Protocol - sadshade/erlang-otp-rce

395 viewsᅠ, 14:03

OsintFlow ✙

BirdHunt

In order to regularly find geotagged data on Twitter I use a great OSINT tool developed by Louis Tomos Evans entitled BirdHunt which allows me to select any area on the world map to find tweets posted within a certain radius (plus other options).

https://birdhunt.co/

birdhunt.huntintel.io

BirdHunt | Find Tweets By Location

BirdHunt is a Free OSINT tool to find tweets by location. BirdHunt uses Twitters GeoCoded tweet search to find tweets by location. BirdHunt is simple to use, mobile friendly and designed for OSINT researchers. How to tell where a tweet came from? Use the…

395 viewsᅠ, 16:56

OsintFlow ✙

YouTube Geofind

I came across this tool a while ago whilst looking for something to help me find geotagged YouTube videos specifically. As much as I find twitter and telegram extremely useful to find data from Ukraine, most of the footage shared on those platforms tend to be quite short, often less than a minute long.

https://mattw.io/youtube-geofind/location

mattw.io

Location Search - Discover Geo-tagged Videos - MW Geofind

Search YouTube for geographically tagged videos by location, topic, or channel. Videos are viewable in a map and data exportable in JSON and CSV.

402 viewsᅠ, 16:59

OsintFlow ✙

Google Earth Pro. This tool is a must have to any OSINT analyst and is free to download to any operating systems (yes, even Linux).
If you don’t want to download it you can also use the web version although with some limitations.

https://earth.google.com/

Google Earth

Create and collaborate on immersive, data-driven maps from anywhere with the new Google Earth. See the world from above with high-resolution satellite imagery, explore 3D terrain and buildings in hundreds of cities, and dive into streets and neighborhoods…

🔥1

373 viewsᅠ, 17:05

OsintFlow ✙

CarNet.ai today found it extremely useful for OSINT investigations. According to the description on their website: “CarNET API provides you with the ability to detect a car’s make, model, generation, color and angle from an image of the car. Our API is powered by computer vision and deep learning technologies, and is capable of correctly recognizing cars in different lighting and weather conditions.”

https://carnet.ai/

carnet.ai

CarNet.AI - Car Make/Model Recognition API

Car Make/Model Recognition API with 97% Accuracy

🔥1

367 viewsᅠ, edited 17:54

OsintFlow ✙

https://kepler.gl

kepler.gl

Large-scale WebGL-powered Geospatial Data Visualization Tool

Kepler.gl is a powerful web-based geospatial data analysis tool. Built on a high performance rendering engine and designed for large-scale data sets.

363 viewsᅠ, 08:34

OsintFlow ✙