#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
ssteelfactor-oss/kestrelLow-observability Active Directory security enumeration tool using native ADSI/COM interfaces. Enumerates ACLs, delegation, trusts, ADCS, Kerberoast…
theblackturtle/fprobeTake a list of domains/subdomains and probe for working http/https server.
mnemonic-no/grafeoOpen platform for modelling, collection and exchange of knowledge
mr-rizwan-syed/chomteshCHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
adulau/the-art-of-pivotingThe Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World
yuyudhn/tldhuntBash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…
hash1da1/gotandaBrowser extension for OSINT that searches threat intelligence and reconnaissance data from selected IOCs (IP, domain, URL, hash, SNS) via multiple…
syss-research/smbcrawlersmbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares
billyv4/id-entifySearch for information related to domain: Emails - IP addresses - Sub-Domains - Information on WEB technology - Type of Firewall - NS and MX records.
trimstray/massh-enumOpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
baguswiratmaadi/catnipCat-Nip Automated Basic Pentest Tool - Designed For Kali Linux
sigploiter/m3uascanA Scanner for M3UA protocol to detect Sigtran supporting nodes
assetnote/jira-mobile-ssrf-exploitExploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)
xcapri/subdosecFast, accurate subdomain takeover scanner with zero false positives. Detects vulnerable subdomains, collects metadata (IP, CNAME, title, status…
rotemreiss/uddupUrls de-duplication tool for better recon.
nicolas-carolo/houndsploitAn advanced graphical search engine for Exploit-DB
jeet-ganguly/birdy-edwardsAutomated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.…
