criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
ultrasecurity/storm-breakerFull-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
trustedsec/unicornUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…
alfredredbird/tookie-osintTookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
deadshot0x7/007-thebondThis Script will help you to gather information about your victim or friend.
agampreet-singh/redrootRedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…
shredzwho/ig-detectiveOSINT tool researched and designed to hunt down IG handles
oryon-osint/querytoolQuerytool is an OSINT framework based on Google Spreadsheet. With this tool you can perform complex search of terms, people, email addresses, files…
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
doctoreww/evilfonttoolA font-based deception tool for red teaming, security research, and whatever else.
mohwahyudi/poc-cve-2026-64638-PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…
h1ssbl1tz/blind-trust-cve-2024-21413-researchA security research tool for simulating targeted phishing campaigns using CVE-2024-21413 (Moniker Link).
osintnet/osintnet-publicOsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, image intelligence and AI image detection.
mannansainicyber/url_checkerHybrid ML and heuristic-based URL phishing detector with real-time analysis, explainable confidence scores, and REST API for programmatic security…
alteredsecurity/365-stealerAutomates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…
edoardottt/longtongueGenerate customized Password/Passphrase wordlist based on target information
logisek/azureadenumerationMicrosoft Entra ID (Azure AD) Unauthenticated Enumeration
emrekybs/draculaosDracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber Intelligence missions.
