OSINT (Open Source Intelligence)

chrismaddalena/odin

Automated network asset, email, and social media profile discovery and cataloguing.

jimywork/certstreamcatcher

This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA)…

silascutler/malpipe

Malware/IOC ingestion and processing engine

viralmaniar/smwyg-show-me-what-you-got

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text…

cyb0r9/quasar

Modular information gathering framework for penetration testers, featuring website analysis, email/phone lookup, credit card BIN checking, IP…

weebsec/weebdns

DNS Enumeration with Asynchronicity

warflop/whoisleak

This tool queries the emails that registered the domain and verifies if they were leaked in some data leak.

tvdstaaij/telegram-history-dump

Backup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…

ekultek/strutter

Proof of Concept for CVE-2018-11776

0x00-0x00/cve-2018-15131

Zimbra Collaboration Suite Username Enumeration

0x00-0x00/cve-2018-10949

Zimbra Collaboration Suite Username Enumeration

hadojae/data

Credential Phish Analysis and Automation

tismayil/password-generator

-> Password List Generator for Brute Force.

busterb/msmailprobe

Enumerate valid users on Office 365 and Exchange via time-based and error-based techniques across multiple exposed services, including OWA,…

zoutepopcorn/whatsfoto

Chrome extension to download WhatsApp profile pictures in bulk from a CSV list of phone numbers, outputting images as a ZIP archive for OSINT…

omergunal/pot

Phishing on Twitter