sf

Infoga is a tool gathering electronic mail accounts informations (ip,hostname,country,...) from dissimilar world source (search engines, pgp substitution servers in addition to shodan) in addition to banking concern agree if emails was leaked using haveibeenpwned.com API. Is a actually unproblematic tool, but really effective for the early on stages of a penetration test or only to know the visibility of your society inward the Internet.  Installation $ git clone https://github.com/m4ll0k/Infoga.git infoga $ cd infoga $ python setup.py install $ python infoga.py Usage $ python infoga.py --domain nsa.gov --source all --breach -v ii --report ../nsa_gov.txt $ python infoga.py --info m4ll0k@protonmail.com --breach -v three --report ../m4ll0k.txt Download Infoga

Influenza A virus subtype H5N1 information leak differs from a information breach inwards that the one-time unremarkably happens through omission or faulty practices rather than overt action, as well as may last as well as then slight that it is never detected. While a information breach unremarkably way that sensitive information has been harvested yesteryear mortal who should non accept accessed it, a information leak is a province of affairs where such sensitive information powerfulness accept been inadvertently exposed. pwndb is an onion service where leaked accounts are searchable using a uncomplicated form. After a breach occurs the information obtained is oft seat on sale. Sometimes, people endeavor to blackmail the affected company, bespeak for coin inwards central of non posting the information online. The mo pick is selling the information to a competitor, a challenger or fifty-fifty an enemy. This information is used inwards as well as then many dissimilar ways yest...

Collect information near leaked electronic mail addresses from Pastebin About Script parses Pastebin email:password dumps together with get together information near each electronic mail address. It supports Google, Trumail, Pipl, FullContact together with HaveIBeenPwned . Moreover, it allows you lot to shipping an informational postal service to someone near his leaked password, at the terminate every information lands inward Elasticsearch for farther exploration. It supports alone ane format - email:password. Everything else volition non work! For now, notification plant when it finds jibe on FullContact together with side past times side sends you lot electronic mail address together with associated social media accounts. Requirements: Python 3 FullContact API https://www.fullcontact.com/developer/ Google Pipl API https://pipl.com/api/ HaveIBeenPwned SafePush (for notification - optional - In progress) https://www.pushsafer.com/ Trumail https://trumail.io/ Gmai...

Tool to respect as well as extract credentials from telephone configuration files inwards environments managed past times Cisco's CUCM (Call Manager). When using Cisco's CUCM (Call Manager), telephone configuration files are stored on a TFTP server. These telephone configuration files quite oft incorporate sensitive data, including telephone SSH/admin credentials. There is also an number amongst how closed to browsers autofill fields such every bit the SSH Username & Password fields amongst their CUCM credentials (commonly their AD credentials) , if the administrator has saved the credentials inwards their browser. This number has also been faced past times administrators using password managers that automatically plug inwards credentials, where they flora that their credentials were beingness automatically inputted into the SSH Username & Password fields, as well as thence beingness saved (and stored inwards plaintext inwards the configuration files). W...