#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
joshkar/x-reconA utility for detecting webpage inputs and conducting XSS scans.
ankhcorp/snoopOSINT Tool for research social media accounts by username
gwen001/github-endpointsFind endpoints on GitHub.
win3zz/cve-2023-25157CVE-2023-25157 - GeoServer SQL Injection - PoC
tw-d/wifi-pineapple-mk7_rest-clientWiFi Hacking Workflow with WiFi Pineapple Mark VII API
nccgroup/ble-replayBLE-Replay is a Bluetooth Low Energy (BLE) peripheral assessment tool
ustayready/golddiggerRecursively searches files for sensitive information using customizable regex patterns, designed for penetration testers to rapidly discover secrets…
appsecco/spaces-finderA tool to hunt for publicly accessible DigitalOcean Spaces
davidhuser/mxmapAutomated pipeline that resolves Swiss municipality domains, scrapes websites for email addresses, and classifies email providers via MX, SPF, DKIM,…
squalr/squalrA generic game/software hacking tool written from the ground up in Rust.
tarihub/blackjumpJumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
packetlss/android-locdumpandroid location service cache dumper
rvn0xsy/red-tldrOffline, full-text search tool for red team commands and techniques with MITRE ATT&CK mapping, fuzzy matching, and built-in MCP server for AI…
busescanfly/rpi-hunterAuto discover and exploit LAN raspberry pi's
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API
shirosaidev/sharesnifferNetwork share sniffer and auto-mounter for crawling remote file systems
tjnull/tj-optThis repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Obsidian
blackfan/bfscanTool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…
