{"uuid": "cd99c20e-2cd2-404e-8557-9b767f019bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/NinjaSecurity/20", "content": "A large selection of Python code examples using the Netlas API (50 requests per day for free) to automate various tasks related to OSINT and pentesting.\n\nhttps://github.com/netlas-io/netlas-cookbook\n\nIt will also be useful for automating work with other IP search engines (Shodan, Censys, Fofa), and, in general, with a wide variety of REST APIs.\n\n\u2014 This repository includes around a thousand Unix/Linux commands and 55 programming languages.\n\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\nRepository: RedTiger - Penetration Testing and Hacking Tool\n\nRedTiger is a free multi-tool with a variety of cybersecurity and hacking features.\n\n\u2014 This tool allows you to carry out and implement various attacks, such as SQL injections, extract information via email, etc.\n\nhttps://github.com/loxy0dev/RedTiger-Tools\n\nLazyXss - Cross site scriptiong Testing Automation Tool v1.2\n\nhttp://github.com/iamunixtz/LazyXss\n\nPANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data\n\nGetting Started\n\ngit clone https://github.com/ALW1EZ/PANO.git\n\nFinalRecon | All-in-one #OSINT web reconnaissance tool\n\nFinalRecon is an automated web reconnaissance tool written in Python. The goal of FinalRecon is to provide an overview of the target in a short period while maintaining result accuracy. Instead of running multiple tools one after another, it can provide similar results while keeping dependencies small and simple.\nhttps://github.com/thewhiteh4t/finalrecon\n\nSnipRecover CLI\n\nDetection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303\n\nSnipRecover CLI is a minimal, dependency-free command-line utility designed to:\n\nDetect PNG files modified by the Windows Snipping Tool vulnerability (CVE-2023\u201128303).\n\nRestore the original image by recovering compressed data appended after the IEND chunk.\n\nBy default, restored images use RGBA and a resolution of 1920 \u00d7 1080, and if no output path is specified, the tool writes to restored-.png.\n\nLink: https://github.com/m31r0n/SnipRecover-CL\n\nA tool to remotely extract and copy sensitive Windows files (SAM, LSA) without saving a disk\n\nip\n-Target-IP\n-aes -key\n-DUMP\n-Sam\n--lsa\n-DCC2\n--relay\n-Relay-port\n\nhttps://github.com/jfjallid/go-secdump\nhttps://github.com/jfjallid/go-secdump/releases\n\n#soft #golang #redteam #gosecdump\n\nPoC to record audio from a Bluetooth device\nhttps://github.com/TarlogicSecurity/BlueSpy\n\nSSRFUtility - SSRF Exploitation Tool\n\nhttps://ssrf.cvssadvisor.com\n\nNuclei Templates for a Custom Scanner\nHere you can download the templates for the nuclei tool with more than 1244 files focused on finding SQLi and XSS vulnerabilities \u2014 templates commonly used by bug bounty hunters.\n\n\nUnzip the file and use it freely with the templates you choose.\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\nExtracts URLs from OSINT Archives for Security Insights.\nhttps://github.com/hahwul/urx\n\nhttps://github.com/Meowmycks/koneko\n\nRobust Cobalt Strike shellcode loader with multiple advanced evasion features\n#github #CS #tools\nhttps://github.com/RainbowSoftwares/XWorm-RCE-Patch\n\nXWorm 4.0 Modded + RCE Patched\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nhttps://github.com/OssamaN7/LFI_Racer\n\nA tool to exploit Local File Inclusion (LFI) vulnerabilities for Remote Code Execution (RCE)\n#github #exploit\nhttps://github.com/OssamaN7/LFI_Racer\n\nRepository: Bbot - Recursive web crawler\n\nBEE bot is a multipurpose scanner inspired by Spiderfoot, designed to automate your reconnaissance, bug bounty, and ASM missions.\n\n\u2014 This tool is capable of performing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with the gowitness module), vulnerability scanning (with kernels), and more.\nhttps://github.com/blacklanternsecurity/bbot", "creation_timestamp": "2026-08-19T21:00:05.267333Z"}