#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
cyb0r9/socialboxBrute-force attack framework targeting social media platforms (Facebook, Gmail, Instagram, Twitter) with automated credential testing and account…
betterleaks/betterleaksFast, configurable secrets scanner for filesystems, git history, containers, and cloud sources, with Expr-based filtering, credential validation, and…
cure53/httpleaksEnumerates all HTML elements and attributes that can leak HTTP requests, enabling testing of browsers, web proxies, and email clients for unintended…
obheda12/gitdorkerA Python program to scrape secrets from GitHub through usage of a large repository of dorks.
cve-search/cve-searchLocal CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.
thewhiteh4t/pwnedornotOSINT Tool for Finding Passwords of Compromised Email Addresses
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
m4ll0k/secretfinderSecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
sabri-zaki/easy_hackHack the World using Termux
trhhubsd/artexMulti-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…
lucksi/mr.holmesModular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…
infosec-au/altdnsGenerates permutations, alterations and mutations of subdomains and then resolves them
lanjelot/patatorPatator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
thehackingsage/hacktronianTools for Pentesting
botesjuan/burp-suite-certified-practitioner-exam-studyPractical study notes and walkthroughs for PortSwigger Academy labs, covering web vulnerabilities, payloads, enumeration, and BSCP exam strategies.
projectdiscovery/vulnxModern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
d4vinci/cr3dov3rKnow the dangers of credential reuse attacks.
