#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

Repository to index useful tools for CTF's

Generates domain name permutations for subdomain enumeration and recon, supporting custom wordlists, cloud patterns, and fast mode for security…

Extracting OSINT Insights from 15TB of GitHub Event Logs

Curated directory of threat intelligence sources, feeds, frameworks, tools, and research for SOC/CTI teams—covering IOCs, STIX/TAXII formats, and…

A curated list of useful resources that cover Offensive AI.

Small, fast tool for performing reverse DNS lookups en masse.

Clusters and elements to attach to MISP events or attributes (like threat actors)

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…

Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

An easy-to-use client-side OSINT query builder for discovering exposed file managers across search engines.

Hunting for passwords with deep learning

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Gets updates from various clearnet domains and ransomware threat actor domains

Current links from the OSINT Inception start-me project

Structured OSINT dataset of LockBit ransomware-linked identities, including usernames, IDs, join dates, Bitcoin addresses, and media artifacts for…