#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
owasp/owasp-cstgVendor-neutral cloud security testing guide with structured phases for enumeration, privilege escalation, lateral movement, and post-exploitation…
octoberfest7/cohab_processesA small Aggressor script to help Red Teams identify foreign processes on a host machine
google/aura-inspectorAutomated security testing tool for Salesforce Experience Cloud that discovers misconfigured Aura applications, accessible records, and unauthorized…
daxakahackerman/xss-catcherA blind XSS detection and XSS data capture framework
randomuserid/tyliumPrimary data pipelines for intrusion detection, security analytics and threat hunting
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
alex-cart/leafLinux Evidence Acquisition Framework
killswitch-gui/persistence-survivabilityPowershell Persistence Locator
aurva-io/aiostackAI runtime inventory: discover shadow AI, trace LLM calls
dwisiswant0/proxylogscanA fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as…
quantika14/email-prediction-asterisksPredicts emails hidden behind asterisks using Intelx leaks for OSINT investigations. Automatically generates a CSV dataset of related emails for…
crissyfield/troll-aExtracts secrets (passwords, API keys, tokens) from WARC web archives using Gitleaks rules. Supports HTTP, S3, local files, and compressed archives…
badsectorlabs/sccm-http-looterFind interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
binganao/cve-2024-23897Proof-of-concept exploit for CVE-2024-23897, a Jenkins arbitrary file read vulnerability, allowing retrieval of sensitive files via crafted HTTP…
hackclub/ktrKog traceroute. Highly asynchronous traceroute program written in Rust with ASN WHOIS and PeeringDB lookups.
puzzlepeaches/ffufwAutomates web content discovery and directory bruteforcing with multithreaded ffuf execution, tech-aware wordlists, endpoint filtering, WAF…
0xzdh/bridgekeeperScrape, Hunt, and Transform names and usernames
chopicalqui/kaliintelligencesuiteAutomated intelligence-gathering framework that orchestrates Kali Linux tools and public APIs to collect, store, and analyze reconnaissance data for…
