#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended
d4vinci/cr3dov3rKnow the dangers of credential reuse attacks.
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
projectdiscovery/vulnxModern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
rawfilejson/awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
dedsec1121fk/dedsecEducational Android (Termux) toolkit for learning penetration testing, OSINT, social engineering, and network security through hands-on scripts,…
edoardottt/cariddiTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
wddadk/offensive-osint-toolsCurated list of OSINT tools for offensive security, covering email harvesting, subdomain enumeration, threat intelligence, and social engineering for…
eonraider/violent-python3Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…
jieyab89/osint-cheat-sheetCurated OSINT cheat sheet with tools, datasets, wiki, and tips for reconnaissance, social media intelligence, and red team operations. Includes…
eonraider/blackhat-python3Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…
phishdestroy/destroylistReal-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats
blechschmidt/massdnsA high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
lucksi/mr.holmesModular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
m14r41/pentestingeverythingComplete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network…
tomnomnom/waybackurlsFetch all the URLs that the Wayback Machine knows about for a domain
tom0li/collection-documentCollection of quality safety articles. Awesome articles.
