
chiasmodon
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves…

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves…

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

HostHunter a recon tool for discovering hostnames using OSINT techniques.

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

E-mails, subdomains and names Harvester - OSINT

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

This Script will help you to gather information about your victim or friend.

Shodan-powered tool to discover real IP addresses behind Cloudflare by hashing favicon icons using MurmurHash3, enabling origin server identification…

ShodanX is a tool to gather information of targets using shodan dorks⚡.

Gotator is a tool to generate DNS wordlists through permutations.

Tool to discover external and internal network attack surface

Inforfinder is a tool to collect information of any domains pointing at some server (ip, domain, range, file). Is able to detect all domains pointing…

Subdomains analysis and generation tool. Reveal the hidden!

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Concurrent virtual host scanner that brute-forces subdomains across multiple IPs on common web ports, filtering results by status codes and content…