Tools

bishopfox/spoofcheckselftest

Web application that lets you test if your domain is vulnerable to email spoofing

synacktiv/depfuzzer

Scans project dependencies for dependency confusion vulnerabilities and checks package owner email takeover risks across multiple registries (npm,…

bishopfox/exchange-scanner

Identify public-facing Microsoft Exchange servers and determine their software versions

bytespulse-oe/wp2shell-hestia-scanner

Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted…

hamed233/cybersecurity-mastery-roadmap

A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance

osintnet/osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, image intelligence and AI image detection.

jasonxtn/argus

The Ultimate Information Gathering Toolkit

s0md3v/striker

Striker is an offensive information and vulnerability scanner.

xfreed0m/smtptester

small python3 tool to check common vulnerabilities in SMTP servers

black-scorp10/email-vulnerability-checker

Automated SPF and DMARC configuration checker that identifies email spoofing vulnerabilities across single or bulk domains using DNS lookups.

iamthefrogy/frogy2.0

Orbis is an full spectrum automated external attack surface intelligent toolkit.

sairson/yasso

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库…

blacklanternsecurity/bbot

The recursive internet scanner for hackers. 🧡

alb-uss/secmon

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

siwecos/infoleak-scanner

Web scanner that detects CMS versions, plugins, vulnerable JavaScript libraries, email addresses, and phone numbers on target websites, scoring…