
Serein
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day…
Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.

massive SQL injection vulnerability scanner

Trap AI web scrapers in an endless poison pit.

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

OSINT python webscaping framework


Generates targeted password wordlists by combining personal info, applying case/leet transforms, and scraping artist lyrics for enhanced cracking…

A high performance go implementation of Wappalyzer Technology Detection Library

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

⛏️ The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

Universal Reddit Scraper - A comprehensive Reddit scraping/archival command-line tool.

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

Advanced cross-platform web crawler for security professionals, enabling automated reconnaissance, information gathering, and OSINT data collection…

A fast WordPress plugin enumeration tool

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.