Information Gathering

General purpose tools for collecting various types of information about targets.

Kitploit recommended

Top tools

10 selected

nmap

nmap/nmap

13.3k8h 25m ago

amass

owasp-amass/amass

15.0k4 days ago

spiderfoot

smicallef/spiderfoot

20.1k2 years ago

subfinder

projectdiscovery/subfinder

14.2k3 days ago

theHarvester

laramies/theharvester

17.0k9 days ago

reconftw

six2dez/reconftw

8.0k9h 26m ago

httpx

projectdiscovery/httpx

10.3k10h 11m ago

WhatWeb

urbanadventurer/whatweb

6.8k7 months ago

naabu

projectdiscovery/naabu

6.2k2 days ago

#10

FinalRecon

thewhiteh4t/finalrecon

2.9k5 months ago

Newest Relevance Most popular Recently updated

6379 results

OSINT

sinwindie/osint

Curated collection of tools, bookmarks, and guides for open-source intelligence (OSINT) gathering, reconnaissance, and information gathering.

osintreconnaissanceinformation-gathering+1

3.7k3 years ago

hakrawler

hakluke/hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

reconnaissanceinformation-gatheringweb-security+2

5.1k2 months ago

libc-database

niklasb/libc-database

Build a database of libc offsets to simplify exploitation

vulnerability-analysisexploitationinformation-gathering+2

1.9k5 days ago

IMSI-catcher

oros42/imsi-catcher

This program show you IMSI numbers of cellphones around you.

osintreconnaissancenetwork-mapping+3

4.5k4 months ago

androrat

wszf/androrat

androrat

android-securityreconnaissancedata-exfiltration+6

2.0k6 years ago

Ultimate-Social-Scrapers

harismuneer/ultimate-social-scrapers

🤖 Top-rated tools to scrape all major public sections from Facebook, Instagram, and Twitter (X) including posts (likes/comments), photos/videos,…

osintreconnaissanceinformation-gathering+2

3.2k1 year ago

cloudmapper

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloud-infrastructure-securitypassword-crackingvulnerability-scanners+6

6.3k2 years ago

nmapAutomator

21y4d/nmapautomator

A script that you can run in the background!

reconnaissancevulnerability-scannersnetwork-mapping+3

3.1k5 years ago

AppInfoScanner

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

android-securityosintreconnaissance+6

3.5k19 days ago

geo-sleuth

oldcircle/geo-sleuth

An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…

osintreconnaissanceosint-social-engineering+4

4.5k17h 51m ago

public-bugbounty-programs

projectdiscovery/public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

reconnaissancevulnerability-analysisinformation-gathering+2

1.3k5 days ago

cariddi

edoardottt/cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

osintreconnaissancevulnerability-scanners+4

3.6k7 days ago

EyeWitness

redsiege/eyewitness

Automated web screenshot tool for reconnaissance, capturing site visuals, server headers, and identifying default credentials. Supports multiple…

osintreconnaissanceinformation-gathering+2

5.8k9 months ago

wafw00f

enablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

reconnaissancevulnerability-scannersweb-vulnerability-scanners+6

6.5k6 months ago

malwoverview

alexandreborges/malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia,…

android-securityioc-managementosint+4

4.1k1 month ago

whapa

b16f00t/whapa

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

android-securityencryption-decryption-toolsios-security+5

1.5k2 months ago

wordlists

trickest/wordlists

Real-world infosec wordlists, updated regularly

reconnaissanceinformation-gatheringweb-security+3

1.8k13 days ago

pacu

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-infrastructure-securitypenetration-testing-frameworksprivilege-escalation+7

5.3k7 months ago

Information Gathering

General purpose tools for collecting various types of information about targets.

Kitploit recommended

Top tools

10 selected

nmap

nmap/nmap

13.3k8h 25m ago

amass

owasp-amass/amass

15.0k4 days ago

spiderfoot

smicallef/spiderfoot

20.1k2 years ago

subfinder

projectdiscovery/subfinder

14.2k3 days ago

theHarvester

laramies/theharvester

17.0k9 days ago

reconftw

six2dez/reconftw

8.0k9h 26m ago

httpx

projectdiscovery/httpx

10.3k10h 11m ago

WhatWeb

urbanadventurer/whatweb

6.8k7 months ago

naabu

projectdiscovery/naabu

6.2k2 days ago

#10

FinalRecon

thewhiteh4t/finalrecon

2.9k5 months ago

Newest Relevance Most popular Recently updated

6379 results

OSINT

sinwindie/osint

Curated collection of tools, bookmarks, and guides for open-source intelligence (OSINT) gathering, reconnaissance, and information gathering.

osintreconnaissanceinformation-gathering+1

3.7k3 years ago

hakrawler

hakluke/hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

reconnaissanceinformation-gatheringweb-security+2

5.1k2 months ago

libc-database

niklasb/libc-database

Build a database of libc offsets to simplify exploitation

vulnerability-analysisexploitationinformation-gathering+2

1.9k5 days ago

IMSI-catcher

oros42/imsi-catcher

This program show you IMSI numbers of cellphones around you.

osintreconnaissancenetwork-mapping+3

4.5k4 months ago

androrat

wszf/androrat

androrat

android-securityreconnaissancedata-exfiltration+6

2.0k6 years ago

Ultimate-Social-Scrapers

harismuneer/ultimate-social-scrapers

🤖 Top-rated tools to scrape all major public sections from Facebook, Instagram, and Twitter (X) including posts (likes/comments), photos/videos,…

osintreconnaissanceinformation-gathering+2

3.2k1 year ago

cloudmapper

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloud-infrastructure-securitypassword-crackingvulnerability-scanners+6

6.3k2 years ago

nmapAutomator

21y4d/nmapautomator

A script that you can run in the background!

reconnaissancevulnerability-scannersnetwork-mapping+3

3.1k5 years ago

AppInfoScanner

kelvinben/appinfoscanner

android-securityosintreconnaissance+6

3.5k19 days ago

geo-sleuth

oldcircle/geo-sleuth

An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…

osintreconnaissanceosint-social-engineering+4

4.5k17h 51m ago

public-bugbounty-programs

projectdiscovery/public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

reconnaissancevulnerability-analysisinformation-gathering+2

1.3k5 days ago

cariddi

edoardottt/cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

osintreconnaissancevulnerability-scanners+4

3.6k7 days ago

EyeWitness

redsiege/eyewitness

Automated web screenshot tool for reconnaissance, capturing site visuals, server headers, and identifying default credentials. Supports multiple…

osintreconnaissanceinformation-gathering+2

5.8k9 months ago

wafw00f

enablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

reconnaissancevulnerability-scannersweb-vulnerability-scanners+6

6.5k6 months ago

malwoverview

alexandreborges/malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia,…

android-securityioc-managementosint+4

4.1k1 month ago

whapa

b16f00t/whapa

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

android-securityencryption-decryption-toolsios-security+5

1.5k2 months ago

wordlists

trickest/wordlists

Real-world infosec wordlists, updated regularly

reconnaissanceinformation-gatheringweb-security+3

1.8k13 days ago

pacu

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-infrastructure-securitypenetration-testing-frameworksprivilege-escalation+7

5.3k7 months ago

Information Gathering — Page 11 | Kitploit