#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended
ljagiello/ctf-skillsAgent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
specterops/nemesisCentralized data enrichment platform for offensive security assessments that ingests, enriches, and enables collaborative analysis of collected files…
asgeirtj/system_prompts_leaksCurated collection of extracted system prompts from major AI chatbots including Claude, ChatGPT, Gemini, Grok, and Copilot. Updated regularly with…
projectdiscovery/subfinderFast passive subdomain enumeration tool.
projectdiscovery/vulnxModern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
depthsecurity/armoryArmory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related…
thehive-project/cortexCortex: a Powerful Observable Analysis and Active Response Engine
thalesgroup-cert/watcherAI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
bst04/cybersourcesA curated list of cybersecurity tools and resources.
dgtlmoon/changedetection.ioBest and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price…
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
infostealers-stats/data-breachA continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…
flythenimbus/brambleLocal-first password manager with direct device-to-device sync
qyvora/qyvora-anansiTerminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.
nomi-sec/hacker-trendsTrends Website (URL) from Twitter hackers.
ryandfir/hindsightBrowser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
