#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended
rndinfosecguy/scavengerCrawler (Bot) searching for credential leaks on paste sites.
zmap/zannotateUtility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
blacklanternsecurity/manspiderSpider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
khashashin/ogiOpen Source Link Analysis & OSINT Framework
opengraphintel/ogi-transformsOpen Source Link Analysis & OSINT Framework
anmolksachan/thetimemachineWeaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
strategic-automation/violinAgentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…
emrekybs/signalopsAll-source intelligence fusion dashboard — WiFi, cellular, CCTV, ADS-B, orbital & SDR feeds unified into a single tactical map. Security research…
dedsec1121fk/dedsecEducational Android (Termux) toolkit for learning penetration testing, OSINT, social engineering, and network security through hands-on scripts,…
kalix127/secret-stripperA small Rust CLI that strips secrets from your clipboard on demand.
pnwcomputers/ultimate-cybersecurity-master-guideThis repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and…
gromhacks/payload-and-polyglot-listsGromHacks Labs -- The payload lists they don't want you to have. 1,324 injection probes beamed down from the mothership to detect what's injectable…
mverschu/adwsdomaindumpActive Directory information dumper via ADWS for evasion purposes.
lc/gauFetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
wmal/linux-kodachiHardened Debian-based privacy OS with pre-integrated anonymity stack (Tor, VPN, DNSCrypt), anti-forensic tooling, SOC security center, and standalone…
rapid7/recogPattern recognition for hosts, services, and content
ooafa/bucketbusterScans public cloud object-storage endpoints across Yandex, VK, Selectel, Sber, Alibaba, Tencent, Huawei, and Baidu to find listable buckets and…
simsong/bulk_extractorThis is the development tree. Production downloads are at:
