#1Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.
Kitploit recommended
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
germondai/trawlSelf-hosted scraping engine — bypasses any JS challenge & captcha: Cloudflare, Turnstile, reCAPTCHA, hCaptcha, GeeTest. FlareSolverr & Byparr…
hackunderway/searchphonePhone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…
arxhr007/aliens_eyeHunt down 840+ social media accounts using AI
panniantong/agent-reachGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
m14r41/scan4secretsFind credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…
ffuf/ffufFast web fuzzer written in Go
d4vinci/scraplingAdaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…
projectdiscovery/katanaA next-generation crawling and spidering framework.
projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
piratesshield/apiharvesterThe one shot API attacker tool - finds the API url from the given root simulate the automated attacks
emrekybs/socmintelligenceA modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
divinelabio/argusThe Ultimate Information Gathering Toolkit
soxoj/maigret🕵️♂️ Collect a dossier on a person by username from 6K websites
