#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata

Centralized OSINT investigation platform with CLI and GUI, integrating email breach checks, domain lookups, phone search, and API key support for…

Maryam: Open-source Intelligence(OSINT) Framework

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

Modular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…


Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…

OSINT Tools for the Dark Web

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial…

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

A collection of custom security tools for quick needs.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

Fast subdomains enumeration tool for penetration testers