Information Gathering

bittentech/bug-bounty-beginner-roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

sa7mon/s3scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

rabbitmask/weblogicscan

Automated vulnerability scanner for Oracle WebLogic Server, detecting historical CVEs including deserialization, SSRF, and arbitrary file upload with…

datasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

s-rah/onionscan

OnionScan is a free and open source tool for investigating the Dark Web.

therook/subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

sw33tlie/bbscope

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

0xsteph/pentest-ai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

mandatoryprogrammer/xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

openai/php2shell-checker

CLI that checks a website's PHP version or a local PHP binary against embedded patch cutoffs to determine php2shell vulnerability status, with JSON…

s0md3v/smap

a drop-in replacement for Nmap powered by shodan.io

the404hacking/androrat

AndroRAT | Remote Administrator Tool for Android OS Hacking

ragnt/angryoxide

Offensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…

secgroundzero/warberry

WarBerryPi - Tactical Exploitation

kpcyrd/sn0int

Semi-automatic OSINT framework and package manager

ghostop14/sparrow-wifi

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux