
Nuke.sh
Bash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux tools (curl, dig, openssl, nmap, python3).

Bash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux tools (curl, dig, openssl, nmap, python3).

Finds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.

Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting

Published security research repository featuring academic papers on domain hijacking, 2FA bypass, and large-scale spoofing techniques, authored by…

AlienTec-Recon-Tool


The modern, high-speed successor to nsec3walker. A specialized NSEC3 forensics engine built in Go for rapid zone harvesting and automated hash…

Python 2.7

Get trails lib: Get all urls indexed of target

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

Maryam: Open-source Intelligence(OSINT) Framework

a low(zero) cost threat intelligence&response tool against phishing domains

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

Find subdomains with GPT, for free

Build interactive map of cameras from Shodan

Nodesub is a command-line tool for finding subdomains in bug bounty programs