#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
blacklanternsecurity/bbotThe recursive internet scanner for hackers. 🧡
firecrawl/firecrawl-mcp-serverMCP server providing web scraping, crawling, and search capabilities for AI agents. Supports structured data extraction, interactive browsing, and…
jakejarvis/awesome-shodan-queries🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
techchipnet/camphishGrab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
oj/gobusterDirectory/File, DNS and VHost busting tool written in Go
azeemidrisi/phonesploit-proAn all-in-one hacking tool to remotely take over Android devices.
specterops/bloodhound-legacySix Degrees of Domain Admin
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
bishopfox/unredacterNever ever ever use pixelation as a redaction technique
aboul3la/sublist3rFast subdomains enumeration tool for penetration testers
autorecon/autoreconMulti-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
shmilylty/oneforallMulti-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…
efforg/rayhunterRust tool to detect cell site simulators on an orbic mobile hotspot
samratashok/nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
webbreacher/whatsmynameCommunity-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
