#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended
redhuntlabs/bucketlootBucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom…
josehelps/git-wild-huntA tool to hunt for credentials in github wild AKA git*hunt
hahwul/urxExtracts URLs from OSINT Archives for Security Insights
dark-warlord14/jsscannerYou can read the writeup on this script here
threatunknown/jsubfinderGo-based tool that scans webpages and JavaScript files to discover hidden subdomains and secrets, with optional crawling and real-time proxy analysis…
aydinnyunus/exiflooterExtracts geolocation and EXIF metadata from image URLs and directories, with OpenStreetMap integration for mapping GPS coordinates.
guibacellar/texTelegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…
andrewaeva/dgaThe repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…
zxsecurity/steamerFor importing, searching, and managing public password breach data
powerexploit/ashokAshok is a OSINT Recon Tool , a.k.a 😍 Swiss Army knife .
t4d/phishingkithunterFind phishing kits which use your brand/organization's files and image.
nox-project/nox-frameworkHigh-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.
cve-search/git-vuln-finderFinding potential software vulnerabilities from git commit messages
ecstatic-nobel/osweepDon't Just Search OSINT. Sweep It.
qeeqbox/ravenAdvanced Cyber Threat Map (Simplified, customizable, responsive and optimized)
rix4uni/wordlistCurated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…
chrismaddalena/goreportA Python script to collect campaign data from Gophish and generate a report
