#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended
lefayjey/linwinpwnBash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…
arxhr007/aliens_eyeAI powered OSINT engine to discover and map 840+ social media identities across the web
ivre/ivreNetwork recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…
opsdisk/pagodopagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
antirez/dump1090Dump1090 is a simple Mode S decoder for RTLSDR devices
jtesta/ssh-auditSSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
ssrajadh/sentrysearchSemantic search over videos using Gemini Embedding 2 or Qwen3-VL.
idescriptor/idescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt
pavel-odintsov/fastnetmonVery fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
evyatarmeged/raccoonA high performance offensive security tool for reconnaissance and vulnerability scanning
ggerganov/kbd-audio🎤⌨️ Acoustic keyboard eavesdropping
darkoperator/dnsreconDNS Enumeration Script
nullarray/autosploitAutomated Mass Exploiter
apurvsinghgautam/dark-web-osint-toolsOSINT Tools for the Dark Web
zu1k/naliAn offline tool for querying IP geographic information and CDN provider. 一个查询IP地理信息和CDN服务提供商的离线终端工具.
alufers/mitmproxy2swaggerAutomagically reverse-engineer REST APIs via capturing traffic
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
