#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

Tool to find metadata and hidden information in the documents.

OSINT tool for finding profiles by username

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

A DNS meta-query spider that enumerates DNS records, and subdomains.

OnionScan is a free and open source tool for investigating the Dark Web.

Phishing catcher using Certstream

An offline tool for querying IP geographic information and CDN provider. 一个查询IP地理信息和CDN服务提供商的离线终端工具.

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Autonomous AI red team agent for penetration testing with 13+ specialized agents, 120+ OWASP test cases, and MITRE ATT&CK integration. Supports 15+…

A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace.

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

This is the development tree. Production downloads are at:

Tips and Tutorials for Bug Bounty and also Penetration Tests.

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.