#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended

Tools and Techniques for Blue Team / Incident Response
All about bug bounty (bypasses, payloads, and etc)

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

Never ever ever use pixelation as a redaction technique

Fast subdomains enumeration tool for penetration testers

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…

Multi-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…

Awesome-Cellular-Hacking

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

Multi-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…

Open Source Deep Packet Inspection Software Toolkit

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Rust tool to detect cell site simulators on an orbic mobile hotspot

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface…

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.