
Awesome-Asset-Discovery
Curated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…

Curated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…

An OSINT tool to search for accounts by username and email in social networks.

a passive OSINT toolkit in python and c++ usernames, emails, domains, ips, phones, hashes. no keys, no logins.

The Ultimate Information Gathering Toolkit

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

Searches Elasticsearch database for email addresses

A workflow to gather responsible disclosure emails from a given host(s).

Recon, Subdomain Bruting, Zone Transfers

Python 2.7

CVE-2026-XXXX: Atlassian GraphQL Email Enumeration Oracle (CWE-204, CVSS 5.3 MEDIUM)

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

Information gathering framework for phone numbers

Async offensive Google framework for OSINT, enabling email/Gaia ID/Drive/geolocation reconnaissance via CLI or Python library with JSON export.

Incredibly fast crawler designed for OSINT.

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

🕵️♂️ Collect a dossier on a person by username from 6K websites

Fast passive subdomain enumeration tool.

MCP server exposing multiple OSINT tools for AI assistants like Claude