#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
wddadk/offensive-osint-toolsCurated list of OSINT tools for offensive security, covering email harvesting, subdomain enumeration, threat intelligence, and social engineering for…
d4vinci/cr3dov3rKnow the dangers of credential reuse attacks.
hslatman/awesome-industrial-control-system-securityA curated list of resources related to Industrial Control System (ICS) security.
blechschmidt/massdnsA high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
microsoft/ethrCross-platform CLI for network performance testing over TCP, UDP, HTTP, HTTPS, and ICMP: bandwidth, connections/s, packets/s, latency, loss, jitter,…
hannob/snallygasterTool to scan for secret files on HTTP servers
ghostmanager/ghostwriterThe SpecterOps project management and reporting engine
tomnomnom/waybackurlsFetch all the URLs that the Wayback Machine knows about for a domain
thehive-project/cortexCortex: a Powerful Observable Analysis and Active Response Engine
nahamsec/lazyreconThis script is intended to automate your reconnaissance process in an organized fashion
koutto/pi-pwnbox-rogueapHomemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:
scipag/vulscanAdvanced vulnerability scanning with Nmap NSE
hisxo/gitgrabergitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github,…
circl/ail-frameworkAIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
initstring/cloud_enumMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
cujanovic/ssrf-testingSSRF (Server Side Request Forgery) testing resources
wapiti-scanner/wapitiWeb vulnerability scanner written in Python3
