qyvora-anansi
qyvora/qyvora-anansiTerminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.
exploitationinformation-gatheringnetwork-mapping+8
4
qyvora/qyvora-anansiTerminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.
jankoboy88/higernesa passive OSINT toolkit in python - usernames, emails, domains, ips, phones, hashes. no keys, no logins.
vqkro/higernesa passive OSINT toolkit in python usernames, emails, domains, ips, phones, hashes. no keys, no logins.
ankhcorp/nuke.shBash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux tools (curl, dig, openssl, nmap, python3).
devcop95/bugbounty-lab101A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report templates,…
0xshe/fuck-cdnAutomated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…
karim852/kumo-domain-recon-toolDomain OSINT and security reconnaissance framework running 26 parallel modules for DNS, ports, subdomains, leaked credentials, exposed endpoints,…
sakispat/simple-pentestingAn educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host…
r3fr4kt/devvortexHackTheBox Devvortex walkthrough covering subdomain fuzzing, Joomla API enumeration, template-based web shell, bcrypt hash cracking, and Apport-CLI…
gmh5225/domain-enumeration-sicariusAnother tool for subdomain enumeration with some magics 🧙🏻♂️
yeee3642/edu-reconAuthorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…
sec-dan/wp2shell-scannerRead-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)
tq17oa7/spyder-osintOpen-source intelligence (OSINT) tool for gathering information from phone numbers, IP addresses, social media, emails, usernames, domains, and…
yashas-13/pentx-vapt-skillOpen-source AI-powered 5-phase VAPT pentest agent — recon/scan/vuln/exploit/report with PoC
randomrobbiebf/subdomain-tkoDetects subdomain takeover vulnerabilities by analyzing DNS records and HTTP responses. Automatically identifies takeover-prone subdomains for…
wattocyber/vegadnsRust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.
dozermx/argusMulti-phase reconnaissance and attack-surface scanner that maps domains, IPs, ASNs, cloud assets, and CVEs into a knowledge graph with CVSS scoring…
wattocyber/bug-bounty-libraryCurated bug-bounty methodology library with runbooks, recon/fuzz playbooks, checklists, and CLI helpers for target scoping, cert enumeration, and…