cipher387/osint_stuff_tool_collectionCurated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…
wddadk/offensive-osint-toolsCurated list of OSINT tools for offensive security, covering email harvesting, subdomain enumeration, threat intelligence, and social engineering for…
emrekybs/veiled-eyeOSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.
lockfale/osint-frameworkCurated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…
kingofbugbounty/kingofbugbountytipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…
trickest/wordlistsReal-world infosec wordlists, updated regularly
trickest/resolversThe most exhaustive list of reliable DNS resolvers.
sakispat/simple-pentestingAn educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host…
r3fr4kt/devvortexHackTheBox Devvortex walkthrough covering subdomain fuzzing, Joomla API enumeration, template-based web shell, bcrypt hash cracking, and Apport-CLI…
yeee3642/edu-reconAuthorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…
wattocyber/bug-bounty-libraryCurated bug-bounty methodology library with runbooks, recon/fuzz playbooks, checklists, and CLI helpers for target scoping, cert enumeration, and…
parbatzone/reconvault🔍 Recon notes organizer for bug bounty hunters and CTF players — subdomains, ports, endpoints, vulns, all in one place.
foxvr-sudo/bugbounty-arsenal-resourcesChecklists and templates for bug bounty programs. MIT licensed.
shiva108/waesCPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
escape-technologies/awesome-attack-surface-managementA curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
emadshanab/nuclei-templates-collectionNuclei Templates Collection
ya551n3/bug-bounty-wordlistsCurated collection of wordlists for bug bounty hunting, covering directories, subdomains, parameters, usernames, passwords, and web fuzzing payloads.
