Tools

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

webbreacher/whatsmyname

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

jonaslejon/ad-autopwn

Automated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…

defectdojo/django-defectdojo

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

fknmega/aether

AI-driven OSINT and security research agent that builds a live knowledge graph from public data, with bundled recon tools and offensive-security…

t-beckett/h-osint

Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…

sherlock-project/sherlock

Hunt down social media accounts by username across social networks

wmal/linux-kodachi

Hardened Debian-based privacy OS with pre-integrated anonymity stack (Tor, VPN, DNSCrypt), anti-forensic tooling, SOC security center, and standalone…

owasp/open-sammy

Web-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.

anoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

snizi/cve-2026-18963-exploit

Exploit for Keycloak CVE-2026-18963 enabling unauthenticated account takeover via reset-credentials bypass. Includes safe detection, non-destructive…

h4zaz/cve-2026-8794

Username Enumeration via Authentication Timing Side-Channel in PaperCut NG

bdalrhmnhamdalalm-jpg/cve-2018-15473-user-enumeration-

python code use to check for user in ssh

theopaid/cve-2026-66418-openclaw-dashboard-v3.0.0-stored-xss-via-failed-login-username-field

Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover (openclaw-dashboard)

mebus/cupp

Interactive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…

msnightmare/legacyhive

Windows ProfSvc 0day