Tools

gamelinux/passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

activecm/rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

escape-technologies/awesome-attack-surface-management

A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).

squid-cache/squid

Squid Web Proxy Cache - Source Code

homas/ioc2rpz

ioc2rpz is a place where threat intelligence meets DNS.

tg12/dns-honeypot

dns-honeypot

yakushstanislav/ultraviolet

Self-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…

jgoyd/fourteen_endpoints

Shell Companies Inside Apple's Privacy Relay

aws-alchemy/squidmagic

analyze a web-based network traffic 🕶 to detect central command and control servers

teycir/seekyou

OSINT intelligence on any IP, domain, or ASN

fevar54/cve-2026-33634-scanner

Scanner de IOCs del ataque de cadena de suministro TeamPCP (CVE-2026-33634).

security-onion-solutions/security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

m0vi0/pacmap

Graph-first network traffic visualizer for live capture and PCAP replay with checkpoint diffing, path tracing, and Wireshark-style display filters…

g0ldencybersec/easyeasm

Zero-dollar attack surface management tool

mattimustang/firepwner

Exploit for CVE-2015-6357 Cisco FireSIGHT Management Center Certificate Validation Vulnerability

franc-pentest/ldeep

In-depth ldap enumeration utility

awesom3alex/osint-menace

Passive OSINT triage console for email, username, domain, IP, and crypto wallet reconnaissance. Features case management, curated resource links, and…

edoardogerosa/pockint

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️