#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended
depthsecurity/armoryArmory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related…
freelabz/secatorsecator - the pentester's swiss knife
specterops/bloodhoundSix Degrees of Domain Admin
wietze/hijacklibsProject for tracking publicly disclosed DLL Hijacking opportunities.
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
berylliumsec/nebulaAI-powered penetration testing assistant that automates reconnaissance, vulnerability analysis, and note-taking via integrated LLMs and CLI tool…
smittix/interceptiNTERCEPT, a free and open-source platform that unites the best signal intelligence tools into a single, accessible interface.
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
firecrawl/firecrawl-mcp-serverMCP server providing web scraping, crawling, and search capabilities for AI agents. Supports structured data extraction, interactive browsing, and…
g0h4n/rusthound-ceActive Directory data ingestor for BloodHound Community Edition written in Rust. 🦀
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
circl/ail-frameworkAIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
ed1s0nz/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
xalgord/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
derv82/wifit3Wifite but USB-only & cross-platform.
laluka/bypass-url-parserTests hundreds of URL bypass techniques against 40X protected pages using raw curl requests, with multi-mode scanning, header spoofing, and JSON/HTML…
bigbodycobain/shadowbrokerReal-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…
