#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Finding potential software vulnerabilities from git commit messages

Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器

Mass reconnaissance, version fingerprinting, CVE tester and live exploitation framework for Ollama open instances.

ShunyaNet Sentinel is a lightweight program that monitors RSS feeds, sends them to an LLM for analysis, and delivers summaries or alerts directly to…

Get information client with getdatareport (Plugin)

Advanced scanner for CVE-2020-0796 - SMBv3 RCE

Proof-of-concept exploit for CVE-2024-4577 with Shodan integration for automated discovery of vulnerable targets on the internet.

Osqery extension HP BIOS WMI

Shodan-based scanner that discovers FortiGate SSL VPN devices and tests them for CVE-2024-21762 vulnerability, displaying organization and country…

Zimbra Collaboration Suite Username Enumeration

A modular Python application to collect intelligence for malicious hosts.

Find endpoints on GitHub.

User enumeration with Microsoft Teams API

Colocando el dominio de correo electrónico de una empresa se obtiene información usando el DNS, NMAP y Shodan

Gather a list of Citrix appliances in a country / state pair, and check if they're vulnerable to CVE-2019-19781

CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server…

Using google to scan sites for "ShellShock" (CVE-2014-6271)