#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other…
AI powered OSINT engine to discover and map 840+ social media identities across the web

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

Autonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…

A high performance offensive security tool for reconnaissance and vulnerability scanning

🎤⌨️ Acoustic keyboard eavesdropping

An offline tool for querying IP geographic information and CDN provider. 一个查询IP地理信息和CDN服务提供商的离线终端工具.

OSINT Tools for the Dark Web

Curated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…

List of API's for gathering information about phone numbers, addresses, domains etc

Curated collection of tools, bookmarks, and guides for open-source intelligence (OSINT) gathering, reconnaissance, and information gathering.


🤖 Top-rated tools to scrape all major public sections from Facebook, Instagram, and Twitter (X) including posts (likes/comments), photos/videos,…

Autonomous AI red team agent for penetration testing with 13+ specialized agents, 120+ OWASP test cases, and MITRE ATT&CK integration. Supports 15+…

This program show you IMSI numbers of cellphones around you.

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more