#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
majd/ipatoolCommand-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS…
jofpin/trapePeople tracker on the Internet: OSINT analysis and research tool by Jose Pino
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
cognis-digital/c2detectC2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
projectdiscovery/subfinderFast passive subdomain enumeration tool.
ammarion/waf-detector🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and…
hac01/azure-pentesting-suiteGo toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…
mxrch/ghuntAsync offensive Google framework for OSINT, enabling email/Gaia ID/Drive/geolocation reconnaissance via CLI or Python library with JSON export.
emrekybs/socmintelligenceA modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.
trickest/cveGather and update all available and newest CVEs with their PoC.
manisso/fsocietyfsociety Hacking Tools Pack – A Penetration Testing Framework
piratesshield/apiharvesterThe one shot API attacker tool - finds the API url from the given root simulate the automated attacks
shahinst/cdn-ip-scannerWeb-based scanner that discovers fast, low-latency CDN IP addresses from Cloudflare, Fastly and other providers using multi-threaded 5-attempt…
fleetdm/fleetOpen-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…
urbanadventurer/whatwebNext generation web scanner
davidsonrafaelk/evillimiterTool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
