#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
lockfale/osint-frameworkCurated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…
soxoj/maigret🕵️♂️ Collect a dossier on a person by username from 6K websites
lissy93/web-check🕵️♂️ All-in-one OSINT tool for analysing any website
laramies/theharvesterE-mails, subdomains and names Harvester - OSINT
hunxbyts/ghosttrackUseful tool to track location or mobile number
cipher387/osint_stuff_tool_collectionCurated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.
owasp-amass/amassIn-depth attack surface mapping and asset discovery
1n3/sn1perAutomated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
projectdiscovery/subfinderFast passive subdomain enumeration tool.
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…
kingofbugbounty/kingofbugbountytipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…
shmilylty/oneforallMulti-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
borntoberoot/networkmanagerA powerful open-source tool for managing networks and troubleshooting network problems!
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
