Tools

morph3/crawpy

Asynchronous HTTP content discovery tool with auto-calibration, recursive scanning, and report generation for enumerating hidden web directories and…

zerobyte-id/secraper

Search engine scraper tool with BASH script.

z0m31en7/uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface…

zyn3rgy/clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

a3h1nt/grawler

Grawler is a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them…

novitae/sterraxcyl

Instagram OSINT tool to export and analyse followers | following with their details

s0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

affolter-engineering/xssearch

Rust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.

apurvsinghgautam/robin

AI-powered dark web OSINT tool that uses LLMs to refine queries, filter search results, and generate investigation summaries with a web UI and Docker…

anoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

hahwul/deadfinder

Fast CLI tool to scan websites, sitemaps, and URL lists for broken links, with concurrent workers, coverage reporting, and multiple output formats.

epi052/feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

hackunderway/searchphone

Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…

dragonked2/egyscan

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious…

timf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

oksuzkayra/gaia

Attack surface discovery and AI-assisted triage for security researchers. Endpoint & parameter mapping with actionable testing hints.

spider12223/penscope

Passive recon & attack surface mapper — zero requests sent

searxng/searxng

Privacy-respecting metasearch engine that aggregates results from multiple search services without tracking or profiling users. Self-hostable with…