
maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites

🕵️♂️ Collect a dossier on a person by username from 6K websites

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

The most exhaustive list of reliable DNS resolvers.

DNS Enumeration Script

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

Fast and customizable subdomain wordlist generator using DSL

Fast and configurable TLS grabber focused on TLS based data collection.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

Fast passive subdomain enumeration tool.

A collection of custom security tools for quick needs.

Community curated list of search queries for various products across multiple search engines.

Rust CLI for bounded network reconnaissance: TCP/UDP port discovery, service identification, DNS/TLS/HTTP evidence collection, and public-source…

Deliberately vulnerable Docker lab with a routable DNS estate and machine-readable answer keys per target, scoring scanner precision, recall and…

Python DNS toolkit supporting queries, zone transfers, dynamic updates, TSIG, EDNS0, DNSSEC, DNS-over-HTTPS, and DNS-over-QUIC with high- and…

a passive OSINT toolkit in python usernames, emails, domains, ips, phones, hashes. no keys, no logins.

a passive OSINT toolkit in python - usernames, emails, domains, ips, phones, hashes. no keys, no logins.