
OSINT-Framework
Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…
Tools for discovering subdomains and DNS records associated with target domains.

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

E-mails, subdomains and names Harvester - OSINT

Incredibly fast crawler designed for OSINT.

Fast passive subdomain enumeration tool.

🕵️♂️ Collect a dossier on a person by username from 3000+ sites

In-depth attack surface mapping and asset discovery

Directory/File, DNS and VHost busting tool written in Go

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

OSINT Tools for the Dark Web

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

DNS Enumeration Script

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

Quickly discover exposed hosts on the internet using multiple search engines.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.