
EasyEASM
Zero-dollar attack surface management tool

Zero-dollar attack surface management tool

A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).

Passive OSINT triage console for email, username, domain, IP, and crypto wallet reconnaissance. Features case management, curated resource links, and…

Exploit for CVE-2015-6357 Cisco FireSIGHT Management Center Certificate Validation Vulnerability

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

Squid Web Proxy Cache - Source Code

A network sniffer that logs all DNS server replies for use in a passive DNS setup

In-depth ldap enumeration utility

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

ioc2rpz is a place where threat intelligence meets DNS.

analyze a web-based network traffic 🕶 to detect central command and control servers

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

Self-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…

Graph-first network traffic visualizer for live capture and PCAP replay with checkpoint diffing, path tracing, and Wireshark-style display filters…

OSINT intelligence on any IP, domain, or ASN

Shell Companies Inside Apple's Privacy Relay

Cookie-based authentication vulnerability on Tk-Rt-Wr135G