Tools

cerberusmrxi/cve-2025-48932-invision-community-sqli-exploit

CVE-2025-48932 - Unauthenticated SQL injection exploit for Invision Community ≤ 4.7.20. Fully automated exploitation with database enumeration,…

efeanilarslan/cve-2026-42167-exploit

Python exploit for CVE-2026-42167 (ProFTPD mod_sql). Features automated file scanning and timing-based blind data exfiltration.

jfriedli/cve-2025-11973

Proof-of-concept exploit for CVE-2025-11973 demonstrating local file inclusion (LFI) in WordPress via file:// protocol, with automated exfiltration…

shoucheng3/asf__nifi_cve-2023-36542_1-22-0

Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…

shoucheng3/apache__nifi_cve-2022-33140_1-16-22

Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…

mitrecnd/whodat

Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)

emanuelepns/immich-exfiltration-demo

Cybersecurity demo exploiting CVE-2026-35455 with automatic API key generation and exfiltration

instaloader/instaloader

Download pictures (or videos) along with their captions and other metadata from Instagram.

paulpierre/informer

A Telegram Mass Surveillance Bot in Python

darksight-analytics/tgspyder

CLI tool for structured Telegram OSINT data collection. Scrapes members, messages, invite links, and user metadata from public/private groups,…

rodricios/wxpath

wxpath - declarative web crawling with XPath; a Web Query Language (WQL)

neur0map/polymaster

Monitor large transactions on Polymarket and Kalshi prediction markets with anomaly detection

shadowbq/pastenum

Pastenum is a text dump enumeration tool.

p0dalirius/cve-2022-26159-ametys-autocompletion-xml

A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.

osintbuddy/web

Entity graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights 🌐 (Web version)

iitoneloc/sigint

Real-time OSINT intelligence dashboard: 7 live data sources (aircraft, AIS vessels, seismic, fires, weather, GDELT events, news) on an interactive…

gmh5225/logineo-scraper

Quick script to scrape personal information from Logineo instances

twintproject/twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following,…