#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
daffainfo/oneliner-bugbountyA collection oneliner scripts for bug bounty
abdulrhmanalfaifi/fennecArtifact collection tool for *nix systems
damian89/extended-xss-searchA better version of my xssfinder tool - scans for different types of xss on a list of urls.
notsosecure/udp-hunterNetwork assessment tool for various UDP Services covering both IPv4 and IPv6 protocols
reverseclabs/gwtmapMaps attack surface of GWT applications by extracting obfuscated RPC endpoints and generating serialized request payloads for security testing.
allyomalley/dnsobserverA handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band…
abhinavbom/threat-intelligence-hunterTIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea…
phillipmartin/gopassivednsNetwork-based passive DNS logger capturing and logging DNS queries from live traffic or pcap files, outputting JSON for integration with SIEM and…
h4x0r-dz/cve-2024-23897Python exploit for Jenkins CVE-2024-23897: arbitrary file read via CLI args4j parsing, enabling RCE. Scans hosts and extracts sensitive files from…
649/crashcast-exploitThis tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
loresuso/pscthe ps utility, with an eBPF twist and container context
cyb0r9/quasarModular information gathering framework for penetration testers, featuring website analysis, email/phone lookup, credit card BIN checking, IP…
ioactive/i-know-where-your-page-livesI Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
batuhaniskr/twitter-intelligenceTwitter Intelligence OSINT project performs tracking and analysis of the Twitter
whxitte/white-defaceThis is a simple python tool to automatically deface webdav vulnerable websites.
serain/bbreconPython library and CLI for the Bug Bounty Recon API
xsser/digmacOS dig wrapper that appends spoofed local TXT records to DNS query output, designed to deceive LLM agents into performing automated penetration…
crowdstrike/sccmhoundA BloodHound collector for Microsoft Configuration Manager
