Information Gathering

orange-cyberdefense/arsenal

Arsenal is just a quick inventory and launcher for hacking programs

sense-of-security/adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current…

arthaud/git-dumper

A tool to dump a git repository from a website

intelisecurelabs/linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

gonzosint/geowifi

Search WiFi geolocation data by BSSID and SSID on different public databases.

thalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

orlyjamie/mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

tomnomnom/assetfinder

Find domains and subdomains related to a given domain

codingo/nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

salesforce/jarm

Active TLS server fingerprinting tool that sends crafted Client Hello packets to generate unique JARM hashes for identifying server configurations,…

narasimha1997/fake-sms

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

sparkyniner/netryx-astra-v2-geolocation-tool

The world's most sophisticated street level image geolocation software

wietze/hijacklibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

trickest/resolvers

The most exhaustive list of reliable DNS resolvers.

cisagov/vulnrichment

A repo to conduct vulnerability enrichment.

gquere/pwn_jenkins

Notes about attacking Jenkins servers