https://github.com/elebumm/RedditVideoMakerBot
付费的解说视频生成器 营销号生成器
有激活卡号 有官方网站 是关于自媒体自动化的
https://github.com/elebumm/RedditVideoMakerBot
付费的解说视频生成器 营销号生成器
有激活卡号 有官方网站 是关于自媒体自动化的
zhihuq query zhihu articles by keywords and relevance
trending scraper for bilibili, baidu, zhihu, weibo
基于node.js的抓取微博、百度热搜、知乎日报、bilibili等热榜榜爬虫 热搜
trending reddit videos scraper and video uploader for youtube with special transition effects
通过百度 微视(腾讯小视频)是可以搜索的
image search engines sourced from search by image browser plugin:
Google, Bing, Yandex, Baidu and TinEye
google tts for python:
import gtts
爬取课程视频 去水印
coursera udemy khanacademy icourse163
爬取tumblr 知乎 腾讯新闻
https://github.com/zhangslob/awesome_crawl
图片下载api
https://github.com/CharlesPikachu/imagedl
免费聊天api 青云客api 腾讯智能闲聊
https://zhuanlan.zhihu.com/p/110785806
http://api.qingyunke.com/api.php?key=free&appid=0&msg=你好
思知对话机器人 语义理解 自然语言转化为结构化数据
https://www.ownthink.com/docs/bot/
https://github.com/ownthink/robot/
流行视频下载api
https://github.com/CharlesPikachu/videodl
热搜
https://github.com/Eurkon/weibo-top-api
https://github.com/ningyuwhut/query_suggestion
https://github.com/Arrackisarookie/weibo-hot-search
https://github.com/justjavac/zhihu-trending-top-search
https://github.com/justjavac/weibo-trending-hot-search
https://github.com/huqi-pr/trending-in-one
https://github.com/jw-star/weiboPush-go-actions
热搜2
https://github.com/wanghuafeng/baidu_spider
https://github.com/TauWu/weibo_daily_hotkey
https://github.com/quarrying/baidu-top-crawler
https://github.com/towelong/zhihu-hot-questions
https://github.com/gaussic/baidu_hot_words
https://github.com/ctts/TopSearch
https://github.com/henrylee123/baiduIndexCrawler
https://github.com/realzhengyiming/Spider_of_keywordRank
登录主流网站
https://github.com/CharlesPikachu/DecryptLogin
微博热搜
https://github.com/Eurkon/weibo-top-api
微博 python api
https://pypi.org/project/weibo/
github actions抓取微博热搜
https://github.com/xiadd/tg-wb-trending
百度搜索api
https://github.com/wcadaydayup/python-baidusearch
https://github.com/1049451037/MagicBaidu
https://github.com/alkalixin/jsonp
微软小冰api
https://github.com/yanwii/msxiaoiceapi
https://github.com/BennyThink/realXiaoice
搜狗微信
https://github.com/chyroc/WechatSogou
https://github.com/jaryee/wechat_sogou_crawlhttps://github.com/pujinxiao/weixin
知乎爬虫
https://github.com/LiuRoy/zhihu_spider
搜索引擎爬虫 图片下载
https://github.com/tasos-py/Search-Engines-Scraper
https://github.com/ostrolucky/Bulk-Bing-Image-downloader
rapidapi do not use this
imgur funny gifs
video dataset:
youtube8m by google
giphy gif apis:
https://github.com/austinkelleher/giphy-api
https://github.com/Giphy/giphy-js
https://github.com/sogamoso/giphy
https://github.com/Giphy/GiphyAPI
https://developers.giphy.com/branch/master/docs/
https://github.com/shaunduncan/giphypop
enternainment apis and more, search for free apis/public apis:
https://apipheny.io/free-api/#entertainment-apis
find things from public apis:
https://github.com/public-apis/public-apis
download video from ifunny.co
https://github.com/vidovichb/iFunny_Downloader
memes app from reddit
https://github.com/victorqribeiro/memes
ml algorithm to download funny music videos
https://github.com/dfarren/funny_music_videos
create funny videos
https://github.com/PhotoBoxPW/VideoBox
search gifs from bukk.it
https://github.com/olivierlacan/gifhub
搞笑视频去水印
https://github.com/5ime/video_spider
搞笑图片 搞笑音频抓取
https://github.com/zhaofucheng1129/KuailewoAppServer
搞笑视频
https://github.com/ecitlm/Node-SpliderApi
搞笑视频 哔哩哔哩封面图获取
哔哩哔哩对user agent有校验 要使用浏览器的UA或者fake_useragent的UA
生成随机的dm_*
参数
1 | { |
合成wbi
校验数据的算法没有变化
如果有必要的话,用curl-cffi
对抗tls fingerprinting
api合集
https://www.bilibili.com/read/cv3430609/
官方接口文档
https://github.com/fython/BilibiliAPIDocs
直播api
https://github.com/lovelyyoshino/Bilibili-Live-API
野生api收集
https://github.com/SocialSisterYi/bilibili-API-collect
python api
https://github.com/MoyuScript/bilibili-api
https://github.com/Nemo2011/bilibili-api (current)
def compare(a,b,reverse=False):
seg_low, seg_high = get_allowed_segments(bpm, low, high, tolerance=0.8) # the tolerance is compared with a common function called compare. it can be customized to output only value >=1 or vice versa.
candidates = sorted_lyrics_nearby_bpm_candidates + sorted_remained_bpm_candidates # priortize lyrics candidates.
soul绕过ssl双向验证 justTRUSTME(xposed)加上反编译SDK获取证书密码 backup blog
use adb to setup mitmproxy on android
1 | cd ~/Library/Android/sdk/platform-tools/ |
可能的系统设置
1 | su -c settings list global | grep proxy |
灵魂测试卡片信息,获取签名*
https://api.soulapp.cn/html/measureResult/info/v2?userIdEcpt=加密用户ID
用户头像和签名等信息*
https://api-h5.soulapp.cn/html/v2/user/info?userIdEcpt=加密用户ID
单条瞬间展开信息*
https://api-h5.soulapp.cn/html/v3/post/detail?postIdEcpt=加密瞬间ID
单条瞬间展开页面*
https://w3.soulapp-inc.cn/activity/#/web/topic/detail?postIdEcpt=加密瞬间ID
用户发布瞬间信息,只有最新的10条*
https://api-h5.soulapp.cn/html/v2/post/homepage?userIdEcpt=加密用户ID
用户发布瞬间页面,只有最新的10条*
https://w3.soulapp-inc.cn/activity/#/web/user?userIdEcpt=加密用户ID
获取热门瞬间,只有最新的30条*
https://api-h5.soulapp.cn/html/v2/post/hot?pageIndex=1(前3页)
获取标签的瞬间信息,只有最新的30条*
https://api-h5.soulapp.cn/html/v2/tag/post?tagIdEcpt=加密标签ID
获取标签的瞬间页面,只有最新的30条*
https://w3.soulapp-inc.cn/activity/#/web/tag?tagIdEcpt=加密标签ID
随机播放音频信息,随机几首*
https://api-h5.soulapp.cn/html/v2/post/orimusicList/recommend
设置超萌捏脸页面*
https://app.soulapp.cn/avator/#/avatar/create?sex=1&version=3.10.0
注销账号页面*
delete ~/.cache/tracker
win 7 扩容:
开始菜单 计算机 右键 管理 存储 磁盘管理
original article:
https://www.patricia-anong.com/blog/2017/11/1/extend-vmdk-on-virtualbox
When I first started using Oracle VirtualBox, I would mostly stick with the default options when creating a virtual machine. I soon realized, that wouldn’t work for RDBMS installations, and although I would just add new virtual disk drives, I started to have unused or 100% full disks on some VMs. Rather than delete the VM, I decided to learn how to extend the existing disks, the steps are listed below:
Note: The Oracle Virtualbox Hypervisor is installed on a Windows OS
Open a command prompt:
Change directories to the VirtualBox Installation
cd C:\Program Files\oracle\VirtualBox
List the info on the disk you want to resize
VBoxManage showhdinfo “C:\Users\panong\VirtualBox VMs\CENTOS-6.7\D0.vmdk”
Run the command to resize:
VBoxManage modifyhd “C:\Users\panong\VirtualBox VMs\CENTOS-6.7\D0.vmdk” –resize 50000
6.png
If you receive the error below, then you will have to create a new disk, clone the data on the existing disk to the new disk and then delete the original disk:
7.png
Create a new VMDK “dynamic” disk
VBoxManage createhd –filename “C:\Users\panong\VirtualBox VMs\CENTOS-6.7\D11.vmdk” –size 50000
Clone old disk to the newly created disk
VBoxManage clonehd “C:\Users\panong\VirtualBox VMs\CENTOS-6.7\D0.vmdk” –existing “C:\Users\panong\VirtualBox VMs\CENTOS-6.7\D11.vmdk”
Release the old disk
Go to Virtualbox Media Manager —> Select D0.vmdk —> Click the “Release” option.
Note: DO NOT DELETE IT YET
Add the new disk to the Virtual Machine
Open the Machine folder and check the permission of the created hard disk. If it doesn’t have the proper permission then it gives error while attaching to the machine
Open the Settings of the Virtual Machine —-> Storage —> Add Hardisk —–> Select the hard disk that was just created.
Make sure to remove all disks, then add the new one first to be /dev/sda.
You’re not done yet! If you start the VM now, the disk space will not be present since it has not yet been presented and allocated to your Linux Server.
To allocate the new disk, you will need to use GParted - a GUI for editing disk partitions.
To download GParted, go to http://gparted.sourceforge.net/livecd.php to download the ISO file named GParted Live CD (Be sure to get the current version based on the architecture of your OS e.g. 32-bit vs 64-bit).
Create a new virtual machine for the GParted ISO on a Linux OS. Select Do not add a Hard Drive and ignore the warning.
Select the GParted VM, go to Settings —–> Storage —–> Controller: IDE Controller —–> Add a new CD/DVD. Add the GParted ISO file as the first item under Controller: IDE section and delete any additional empty disk slots. Add the disk that you wish to resize( C:\Users\panong\VirtualBox VMs\CENTOS-6.7\D11.vmdk) under the Controller: SATA Controller section —–> OK.
Start the GParted VM —-> GParted Live. Do not change any of the default settings. Press the power button on the GParted VM to start it.
Now, you should have made a backup of your vdi at this point. If you haven’t go back and do that – so many things can go wrong here and you are on your own!
If it is any partition other than /dev/sda1 you can right-click the partition you wish to resize and choose Resize/Move.
IF YOU PREFER TO CREATE A NEW PARTITION WITH THE ADDITIONAL DISK SPACE YOU NEED TO CREATE A PARTITION:
Device —-> Create Partition Table
It should be back to main screen, click on New —-> Add (it should have selected all the free space - 20000MiB) —-> Add
You should see it now listed as New partition #1 not unallocated anymore.
Click on Apply at the top of the GUI, then confirm again by clicking Apply. Click Close. You should now see the disk listed as /dev/sda# with 20Gb.
Exit the GParted VM.
Log on to the VM for the disk you just resized and everything should be functional and the /dev/sda drive should show the new size of 50Gb.
Delete the Original Disk Drive
Click the Remove option - this allows you to keep the HDD without deleting it from the system if you choose.
OSINT/recon 其实就是社工 但是一般人喜欢把社工库和社工分开 因为社工库是社工收集来的数据集合 而社工则是一个过程
loading/transforming leaked txt files will be time-consuming. use pypy to speedup the process. use database specific batch processing method to import the data.
entity fragmentation in followthmoney is kind of for “entity recognition in multiple social platforms”, suitable for finding patterns/clients in large leaked databases.
socialscan Python library for accurately querying username and email usage on online platforms
Zen collect email on github
maigret a powerful fork of sherlock (customizable, finding accounts by username, but only having 300+ sites ) with 2000+ sites
emailAll collect email by passing domain
emailfinder find email by domain
theHarvestor email, subdomain and names collector
gitscan scan for email and password (if possible) with predefined domains and rules by searching github
ghunt needs companion browser plugin to get credentials. can collect info on given email
EMAGNET collect database leaks, email and password from recent pastebin records
occrp (anti corruption & crime) aleph is a bad source for getting email (anonymous/unauthorized user can only get hundreds, having no clue what the email relates to). however, it has a tool called follow the money which works with csv files and exports cypher to neo4j
search for leaked database on github
linkedin database leak 2021 (hate mega since it has download quota)
you typically find links to these databases on anonfiles.com
(or else), so query like site:anonfiles.com email rar
in duckduckgo (no DMCA censorship)
breachedforum’s index contains “credits only” threads which requires 4-8 credits to unlock. to get credits you need to create thread (which will earn 0 credit) and get 1 credit per reply. post to trivial threads like manga.
in leakbase you earn credits and download leaked databases easier. it has official telegram bot claims to leak free databases everyday.
find telegram bots collection in privacy.club (only OSINT bots) and here (with many other bots)
摆烂bot 永久免费
(gone?) FreeSGKbot
although i find many leaked databases as torrent, but those torrent search engines usually collect video/movies instead of anything related to leaked database.
44.65GB QQ 微博社工库 or qq8e/qq 基本上传的就是这个了 或许可以在QQ群里面找到一些别的社工库 使用这个数据库的还有 q绑 (有反调试 带去水印工具 但是其实这个到处都有吧) aiuys’s retrofit 后台是privacy (只是部分的可以导入 其他的自行处理)
Using aMule on macOS, Kad is firewalled (2.2.1 works well said by people, but I’d not use macOS), reason unclear. Maybe on Linux or Windows it will be different.
Some (dead) links of other databases in ed2k emule format:
1 | ed2k://|file|2010.06-江西移动全库-408万-access.7z|1329999527|5231E1EC5EE1123C6E694AD6399F9807|h=DORZC7XFNG63ZWX6C3RSN3Q7CWZXG5G4|/ |
reg007 counterpart only check if that account “exists”, but no actual account shown. search for reg007 on github you will get a bunch of links relating to OSINT.
holehe only check if an email address is registered as account elsewhere using “forget my password” APIs.
sreg is found from a collection of security tools, which is a deprecated tool for getting registration status with phone/email/username on multiple chinese platforms.
Usually it only verify existance of given email, like emailhippo (100 requests free per day per ip), or mailforguess checking “gmail”,”laposte”,”protonmail”,”yahoo” emails
Some of them verify email with password: verify email address and password with API of my.com
h8mail email osint tool, can chase and link to social profile, with many API-key required free services
mosint automated email osint tool, requires many API keys.
ignorant checks if a phone number is used for snapchat/instagram
proton mail unofficial client in python
before it was using 2captcha, now using 5sim to receive sms
only login such account through pop3 and imap to prevent revocation
using 2captcha and anycaptcha for captcha solving (paid)
using noptcha or nopecha browser extension (free for 100 captcha solves per day) solving hcaptcha, recaptcha. this extension cannot be used with proxy.
I place the list under /root/.muumuu_emails
the muumuu mail is programmatically connectable using account and password. seems it is using default ports for these services. POP3 is for both sending and receiving. IMAP is for receiving. SMTP is for sending.
this guy’s code is full of hacks. seems only being able to run on his own computer and will break on slightest errors.
he stored potential password combinations and also registered accounts (need testing, some may not work) on this google doc. you can download the sheet named “Sheet1” by this api, which adds double quotes and takes more space than exported from web interfaces, method described here.
tempumail get free temp edu email
email proxy for resending email to you, which I used for github registration (but with a very high block rate without proxy)
icloud’s “hide my email” service seems only provide few email aliases. but according to 3rd party icloud alias generator (cannot be used for chinese version of icloud) you can generate at least 10 aliases. or use hidemyemail-api to login with pyicloud and get aliases as API service. account registered from web without logged in any apple device (maybe virtualbox -> macos has a shot?) will not have email service.
to send email from alias, you can try setting “FROM” address as your alias via smtp protocol, but the credential shall stay the same. the working approach could be platform specific
yahoo provides the most email alias up to 500, but 10 for send only emails. however to get one yahoo account one needs offshore phone numbers.
searching for “site:pastebin.com @yahoo.com” to get some email addresses, also searching in github might help as well.
mailcat find email address by nickname (check if deliverable?)
use other’s links/contents to increase diversity and increase anonymity. put your related contents among them.
email marketing is quantity over quality. know your customers’ preferences and behaviors (language, country, life schedule (by year? month? week? time in a day?)) by linking their accounts on other platforms, telemetry.
email bulk senders are equipped with email templates, statistics (like opened or not, click data monitoring)
vary your email style and content unless you want to get blocked/trashed by servers
premail is an easy-to-use component-based build system for MJML, the email templating language
发送短信 邮件 第一步是收集目标的邮箱和手机号码 收集目标ID 可从社工库中获取 可以根据社工的metadata决定推送内容类别
smsboom by whalefall 远程获取的api 不知道是干啥的 有待研究
这个的原理是收集了大量发验证码到目标的手机号的api
repo转移到了openethan下面
考虑破解这些网站 获取它们的短信验证所需要的credential
https://github.com/WhaleFell/SMSBoom
send sms 1 per day per ip (you might use tor to do ip switching):
https://github.com/HACK3RY2J/Anon-SMS
https://github.com/typpo/textbelt
freesms: (don’t work for my phone number as recipient though, but I found some interesting projects on github relating to free SMS sending, some using OCR to crack captcha and access API)
https://www.afreesms.com/freesms/
yoy might want phone number lists for sending ads via free sms providers
shows [number]@139.com is the only email2sms gateway in china
list of email2sms providers:
https://www.howtogeek.com/howto/27051/use-email-to-send-text-messages-sms-to-mobile-phones-for-free/
http://www.mutube.com/projects/open-email-to-sms/gateway-list/
http://en.wikipedia.org/wiki/List_of_carriers_providing_Email_or_Web_to_SMS
5sim paid sms receive service worldwide
sms auto regist is written in go, utilizing yunjiema.top
for sms receiving
online sms receivers are not so reliable (not even usable for yahoo registration), and those found from google searches (like free receive sms (这个网站有反js调试 打开debugger自动暂停执行), which has simple interface for fetching data, and you can search this site on github to get more sources and potential API adaptors like disposable phonebook) have chances to get registered yahoo accounts.
account generator helper including:
1 | Temp email services |
Proxy-Cheap pay by data amount
universal termsrv.dll patch
use patched termsrv.dll