💡Snov finds email addresses on any website. #OSINT

snov.io/email-finder

💡Blackbird is a powerful OSINT tool designed for fast and efficient searches of user accounts by username or email across multiple platforms, streamlining digital investigations.

https://github.com/p1ngul1n0/blackbird

Ninjasworkout:-- Vulnerable NodeJS Web Application.

ADDED BUGS:-
Prototype Pollution ✅1
No SQL Injection ✅2
Cross site Scripting ✅3
Broken Access Control ✅4
Broken Session Management ✅5
Weak Regex Implementation ✅ 6
Race Condition ✅7
CSRF -Cross Site Request Forgery ✅8
Weak Bruteforce Protection ✅9
User Enumeration ✅10
Reset Password token leaking in Referrer ✅11
Reset Password bugs ✅12
Sensitive Data Exposure ✅13
Unicode Case Mapping Collision ✅14
File Upload ✅ 15
SSRF ✅ 16
XXE
Open Redirection ✅ 17
Directory Traversal ✅ 18
Insecure Deserilization => Remote Code Execution ✅ 19


https://github.com/effortlessdevsec/ninjasworkout

Github subdomain takeover
Reward: $200
Program: Public
dev[.]to: https://dev.to/c4ng4c31r0/github-subdomain-takeover-3j6k

CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating❗️

Two vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.

Search at Netlas.io:
👉 Link: https://nt.ls/bGSFv
👉 Dork: dns.banner:"BIND" OR dns_tcp.banner:"BIND"

Read more: https://kb.isc.org/docs/cve-2024-12705

ProjectSend IDOR ---> https://t.iss.one/brutsecurity_poc/29