Tools

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

emrekybs/draculaos

Dracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber ​​Intelligence missions.

alfredredbird/tookie-osint

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

ultrasecurity/storm-breaker

Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.

oryon-osint/querytool

Querytool is an OSINT framework based on Google Spreadsheet. With this tool you can perform complex search of terms, people, email addresses, files…

logisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

v4d1/spoofthatmail

Bash script to check if a domain or list of domains can be spoofed based in DMARC records

qsecure-labs/overlord

Python-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…

aahmad097/badoutlook

Proof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…

alteredsecurity/365-stealer

Automates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…

arjunindia/fb-phisher-python

A python server tool based on flask , this tool can phish some Facebook credentials!

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

alb-uss/secmon

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

hackerxphantom/spoof_anymail

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

criticalpathsecurity/zeek-intelligence-feeds

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

aramosf/cve-2026-24031

Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…

mohwahyudi/poc-cve-2026-64638-

PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…