#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…

Curated OSINT cheat sheet with tools, datasets, wiki, and tips for reconnaissance, social media intelligence, and red team operations. Includes…

Useful Google Dorks for WebSecurity and Bug Bounty

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

OSINT Tool for Finding Passwords of Compromised Email Addresses

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Microsoft Threat Intelligence Security Tools

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network…

Generates permutations, alterations and mutations of subdomains and then resolves them

Modular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

Know the dangers of credential reuse attacks.


Fetch all the URLs that the Wayback Machine knows about for a domain

Cortex: a Powerful Observable Analysis and Active Response Engine

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github,…