OSINT (Open Source Intelligence)

cybersafeblr/thedorkbox

Curated collection of Google Dorks and OSINT techniques presented as an HTML template for confidential data discovery and cybercrime investigation…

649/pingpon-exploit

Exploit for Mass Remote Code Execution on GPON home routers (CVE-2018-10562) obtained from Shodan.

hjunker/twittersearch2gephi

This windows CLI app lets you collect data from twitter via REST API and convert it into a CSV data set that can be used with Gephi. Other social…

an00byss/godehashed

A golang tool that uses the dehashed.com API to search for compromised assets.

hotpotcookie/cve-2022-44877-white-box

Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)

n2x4/feb2023-cve-2021-21974-osint

Analysis of the ransom demands from Shodan results

sh1katagana1/threatintelligence

A repo for all things cyber threat intel

tacone/prosey

Download YouTube transcripts

enriquenegri-cyberlaw/boa-cve-2009-4496-analysis

Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.

s-rah/onionscan

OnionScan is a free and open source tool for investigating the Dark Web.

matamorphosis/scrummage

A Holistic OSINT and Threat Hunting Platform

fuckjsonp/fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

警惕 一种针对红队的新型溯源手段!

expl0itabl3/check_mdi

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

chaelsoo/zetsu

A personal RAG system for offensive security knowledge

spyboy-productions/unve1ler

A social engineering tool designed to seamlessly locate profiles using usernames while offering convenient reverse image search functionality.

joelgmsec/azuregraph

PowerShell tool for enumerating Azure AD users, devices, applications, and domains via Microsoft Graph API, with offline data export capability.