#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended
postuf/telegram-osint-libPHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…
skyplabs/probequestToolkit for Playing with Wi-Fi Probe Requests
ghostpack/deeppassHunting for passwords with deep learning
misp/misp-dashboardA live dashboard for a real-time overview of threat intelligence from MISP instances
mrcl0wnlab/scanner-inurlbrAdvanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…
ninoseki/miteruA phishing kit collector for scavengers
ustayready/python-pentestingJust a repo of random Python scripts to get pentesters started with the Python language on engagements.
c6fc/warcannonHigh speed/Low cost CommonCrawl RegExp in Node.js
puzzlepeaches/msprobeFinding all things on-prem Microsoft for password spraying and enumeration.
strangerealintel/eternallibertyCurated repository of threat actor aliases and naming schemes used by major threat intelligence vendors, enabling cross-vendor search, attribution,…
synthient/public-researchOpen source research and talks on threat intelligence, fingerprinting, and fraud detection.
cyber-courses/cyber-libraryCommunity-maintained Markdown knowledge base covering cybersecurity foundations, offensive and defensive practice, governance, threat intelligence,…
emrekybs/pip-intelModular OSINT tool that aggregates email, phone, IP, and social media intelligence via pip packages. Automates data collection and analysis for…
nerrorsec/google-dorkerAutomate dorking while doing bug bounty or other stuffs.
canuk40/xpfarmAutomated bug bounty & recon framework — wraps Subfinder, Naabu, Httpx, Nuclei, Nmap, CVEMap, Gowitness, Katana & more behind a unified web UI
expl0itabl3/check_mdiPython script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.
