#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

POC For CVE-2020-1481 - Jira Username Enumerator/Validator
Check @Debian and @Ubuntu #GNU / #Linux for CVE-2019-3462 in APT

This is a python script that can be used with Shodan CLI to mass hunting Confluence Servers vulnerable to CVE-2022-26134

Proof-of-concept Python script that enumerates valid ServiceNow user accounts by exploiting the password-reset response discrepancy in CVE-2021-45901.

Scanner for CVE-2023-36845 with Shodan and Censys integration for automated host discovery and exploitation of Juniper devices.

L1 SOC Analysis: OSINT detection and risk validation of publicly exposed MikroTik RouterOS vulnerable to RCE | Tools: Shodan, NIST NVD

Nmap NSE to check for CVE-2023-5612

Get trails lib: Get all urls indexed of target

Python Pastebin Webcrawler that returns list of public pastebins containing keywords

Hunt for AI coding artifacts containing secrets.

Brute-force scraper for HackerOne disclosed reports via their public API, collecting report IDs, links, titles, and states for security research and…

HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).

Find credentials in screenshots, save them to your secret manager, and irreversibly redact them from the image — local, offline, OCR-based.

Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (CVE-2021-31159) - https://ricardojoserf.github.io/CVE-2021-31159/

Search vulnerable FortiOS devices via Shodan (CVE-2023-27997)

Osqery extension HP BIOS WMI


CVE-2021-41773 Shodan scanner