#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
projectdiscovery/naabuA fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface…
ullaakut/cameradarCameradar hacks its way into RTSP videosurveillance cameras
cartography-cncf/cartographyPulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…
osintbrazuca/osint-brazucaRepositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
netalertx/netalertxCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
bee-san/pywhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…
megadose/toutatisToutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more
awarexone/agentic-bug-hunterAI-powered bug bounty hunting toolkit that works with or without subscription.
landgrey/springbootvulexploitSpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
shuvonsec/claude-bug-bountyAI-powered bug bounty hunting toolkit that works with or without subscription.
dirkjanm/roadtoolsA collection of Azure AD/Entra tools for offensive and defensive security purposes
7h30th3r0n3/evil-m5projectMulti-purpose WiFi penetration testing toolkit for M5Stack devices. Performs network scanning, evil-twin attacks, deauthentication, captive portal…
yogeshojha/renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…
kaifcodec/user-scannerMulti-platform OSINT scanner for email and username reconnaissance across 295+ vectors. Extracts profile metadata, checks account registrations, and…
martin-olivier/airgorahRust-based GUI tool for WiFi security auditing: captures traffic, discovers clients, performs deauthentication attacks, captures handshakes, and…
gommzystudio/device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…
cipher387/api-s-for-osintList of API's for gathering information about phone numbers, addresses, domains etc
