Osint

Reecon is a lightweight network reconnaissance tool designed for early-stage network enumeration and information gathering. It features manual suggestions for various enumeration techniques, including HTTP/S and SMB, and operates as a standalone application with built-in components of the .NET Framework. Currently in development, it is not recommended for production use, and future enhancements are planned for broader functionality, such as improved DNS querying and service detection capabilities.

The TH095 project aims to reconstruct the original Japanese version 1.02a of the game "Shoot the Bullet" by providing a framework for precise byte-level comparison against an authenticated executable. Notable features include the support for exact function restoration, semantic analysis using IDA Pro, and tracking of source presence and validation for various game components, with an aspirational reconstruction target of 99.5% accuracy. Users can import their legal copy of the game executable to verify against established criteria, facilitating a comprehensive understanding of the game's architecture.

CTFlearn-Writeups is a compilation of detailed solutions for various Capture The Flag challenges across multiple domains such as Cryptography, Forensics, and Web security. The tool serves as a reference for practitioners and enthusiasts looking to enhance their skills in cybersecurity challenge-solving. Notable features include categorized writeups that cover a range of problem types, providing structured insights into methodologies and techniques used in each challenge.

cwv-scanner is a Python-based tool designed to identify common web application vulnerabilities by scanning specified URLs or IP addresses. It checks for 36 types of vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), and Remote Code Execution, facilitating website owners and security researchers in enhancing their application's security posture. Notable features include a straightforward installation and usage process, allowing for quick deployment in vulnerability assessments.

YouTube Comment Suite is a cross-platform tool designed for aggregating and analyzing comments from multiple YouTube videos, playlists, and channels. Its primary use case is to enhance comment management for creators and researchers by allowing users to search comments based on various criteria and display detailed statistics about comment activity and user engagement. Notable features include support for keyword searches, archiving capabilities for thumbnails and profiles, and the ability to view video context alongside comments.

MW Geofind is a tool designed for searching YouTube videos based on geographic tags, allowing users to find content by location, topic, or channel. Its notable features include the capability to view results on a map, filter for recent uploads or live events, and export data to CSV. The tool also supports OSINT investigations by enabling detailed searches for geotagged videos and integration with an API for sharing search results.

MW Metadata is a tool designed to extract comprehensive metadata for YouTube videos, playlists, or channels via the YouTube API, making it particularly useful for investigative purposes and OSINT tasks. Notable features include the ability to find unlisted videos, perform reverse image searches on thumbnails, and export or import data in various formats for future use. The tool also automates language translations and provides geolocation capabilities, streamlining the analysis of YouTube content.

ASIMOV CLI is a command-line interface designed for efficient data fetching and importation from various URLs, leveraging installed modules for enhanced functionality. Key features include the ability to automate data retrieval processes, execute external commands, and support multiple installation methods through popular package managers. This tool aims to streamline the data handling tasks in a public domain software environment.

The ASIMOV Software Development Kit (SDK) provides a polyglot framework for building trustworthy neurosymbolic artificial intelligence systems. It includes a command-line tool and a library that enables developers to create dataflow applications using reusable components called blocks, while supporting multiple programming languages such as Dart, Python, Ruby, Rust, and TypeScript. Notable features include a module system for ecosystem integration, flow-based program patterns for knowledge refinement, and its public domain licensing.

Awesome OSINT is a curated collection of open-source intelligence (OSINT) tools designed to facilitate various investigative processes, such as people searching, domain mapping, and breach data analysis. The repository categorizes tools based on specific use cases, including social media intelligence, geolocation, and threat intelligence, enabling users to efficiently select the appropriate resources for their OSINT needs. Notable features include frameworks that integrate multiple OSINT functions and extensive categorization for ease of navigation.

Snatch is a Python-based tool designed for OSINT (Open Source Intelligence) tasks, aimed at cybersecurity and hacking practitioners. It utilizes AI to automate the generation of resources such as password lists, email identification, and social media profiling based on user-defined prompts. Notable features include a ports scanner, website/video/data downloader, and a robust directory and subdomain listing module, although many features are still in development or forthcoming.

VERDICT is an autonomous web and API penetration testing agent that employs AI to conduct vulnerability assessments, confirming findings through reproducible evidence. Its primary use case is for in-depth security evaluations, particularly in applications with complex authentication mechanisms, utilizing a real browser for accurate session handling and multi-step testing. Notable features include precise detection accuracy backed by recorded evidence, an ability to map and exploit unknown applications autonomously, and integration with tools like Burp, all while adhering strictly to defined testing scopes.

Subdosec is a specialized scanner for identifying potential subdomain takeovers, designed to deliver fast and accurate results with zero false positives. Its primary use case involves scanning subdomains for vulnerabilities and providing detailed reconnaissance data, including relevant metadata such as IP addresses and CNAME records. Notable features include a public database of vulnerable subdomains, support for both public and private scanning modes, and an option for local result saving alongside AI analysis capabilities for undetected subdomains.

Zeravynex is a robust static malware analysis platform designed for Windows Portable Executable files, utilizing a combination of deterministic heuristics, YARA signatures, and machine learning techniques to provide explainable security decisions. Notable features include deep PE parsing, a built-in YARA rule engine for malware family detection, automatic indicator of compromise extraction, and a modern web dashboard for real-time analysis visualization, all while ensuring safety by performing static analysis only. The platform facilitates binary inspection through both command-line interface and FastAPI REST API, supporting comprehensive threat triage processes.

CredStalker is a Python-based credential and sensitive data scanner that automatically crawls websites to identify exposed credentials, API keys, and other sensitive information. It features multi-type detection capabilities, deep content analysis of HTML and JavaScript, and customizable crawling with detailed reporting and export functionality for further analysis. Ideal for security audits and penetration testing, it also includes options for verbose logging and same-domain crawling to ensure scope compliance.

The Daily Expired & Dropped Domains repository provides a public feed of expired and dropped domain names, specifically catered for cyber analysts, threat intelligence teams, and brand protection initiatives. It offers structured datasets that can be utilized for monitoring domain lifecycle changes, analyzing re-registration risks, and supporting research workflows, with features including daily updates on 10,000 domains and options for premium access to broader datasets and quicker data refresh cycles for improved threat detection.

Gitcolombo is an OSINT tool designed to extract identities such as names and emails from git repositories and GitHub, establishing connections between seemingly unrelated accounts. It features a Python CLI for repository cloning and analysis, alongside a web version that allows direct querying of the GitHub API without installation. Notable functionalities include detailed per-person identity analytics, correlation of authorship and commit data, and support for batch scanning across public repositories of users or organizations.

jsrip is an advanced JavaScript analysis tool designed for bug bounty hunters and penetration testers, capable of crawling web applications to extract and analyze JavaScript files for security vulnerabilities, such as secrets and endpoints. It features a sophisticated detection mechanism that identifies over 1700 patterns related to various cloud services, maps API routes and internal paths, and generates detailed interactive reports in multiple formats. Notable functionalities include subdomain enumeration, false positive mitigation, and scoping for shared-hosting environments.

Argus is an open-source tool designed for aggregating and visualizing over 229,000 traffic and CCTV camera feeds globally on a real-time interactive map. It features both 2D and 3D globe views, live feed playback, and a sophisticated data pipeline that scrapes metadata from various sources, allowing users to explore live streams and static images in an easy-to-navigate dashboard. Key functionalities include data synchronization, customizable filters, and a user-friendly interface built with React and TypeScript.

TI Mindmap HUB is a research platform leveraging Generative AI to enhance Cyber Threat Intelligence (CTI) workflows by automating the transformation of unstructured threat data into structured, actionable insights. Its notable features include automated ingestion of OSINT sources, AI-generated summaries and reports, integration with the MITRE ATT&CK framework, and STIX 2.1 export capabilities for seamless integration with security tools. Additionally, it offers a Model Context Protocol (MCP) server for AI assistant integration, facilitating interactive querying of threat intelligence.

The `web-reconstruction` tool is an evidence-driven solution for accurately reconstructing static websites, responsive pages, and complex UI elements utilizing WebGL/WebGPU/Canvas effects. It distinguishes between faithful replicas, visual approximations, and design transfers by using a structured approach to gather evidence, lock down routes, and verify outputs, ultimately facilitating multi-state verification and editable project creation. Key features include modular reconstruction paths for various target types, a progressive workflow that ensures accuracy, and no dependencies on third-party packages.

r3ngine v3.7.4 is an advanced web reconnaissance and vulnerability scanning tool that facilitates comprehensive security assessments through its Target Report Generation feature, allowing users to generate detailed multi-scan PDF reports with historical vulnerability tracking. Key features include an Attack Path Modeling Engine aligned with MITRE ATT&CK, integration with WPScan/WPTaint for static analysis, and enhanced infrastructure for scalability and reliability using Django and PostgreSQL. This enterprise-grade platform is designed for thorough and efficient security analysis while ensuring operational security and ease of use.

VeltCLI is a terminal-based OSINT and defensive security research toolkit that consolidates multiple reconnaissance and analysis tasks into a single interface. Its primary use case includes vulnerability assessment, DNS checks, web security analysis, and various research workflows across social media, emails, IP intelligence, and more, all while supporting data export in formats such as JSON, CSV, and Markdown. Notable features include comprehensive vulnerability scanning, domain and cloud analysis, and detailed reporting capabilities, streamlining the security research process for users.

Digital Footprint Cleaner is an open-source web application designed for identifying and managing personal information exposure online by facilitating the generation of data-removal requests. It features a multi-pass search mechanism, match confidence scoring, and provides an exposure report categorized by source, alongside a comprehensive data-broker opt-out checklist for 30+ sites. Additional functionalities include a removal tracker, scan coverage reporting, and optional passcode protection to enhance user security.

FindME is a CLI-based tool designed for discovering social media and online platform profiles associated with a specified username, enabling rapid reconnaissance across over 400 platforms. Key features include multi-threaded concurrent searching for fast results, real-time progress tracking, and no data collection to ensure user privacy. It serves multiple use cases such as cybersecurity research, digital footprint verification, and username availability checks.

Huntable CTI Studio is an advanced Cyber Threat Intelligence (CTI) tool designed to automate the collection, extraction, and generation of detection rules from over 38 OSINT sources. Its notable features include AI-driven relevance scoring, sigma rule generation, and a comprehensive workflow management system using LangGraph and Celery, which facilitates extensive threat intelligence aggregation while ensuring duplicate prevention through community rule comparisons. The tool also supports hardened deployments for secure operation in sensitive environments.

Krypton is a .NET Reactor devirtualizer designed to transform virtualized or protected assemblies into executable, standalone Common Intermediate Language (CIL) code. Its primary use case involves reconstructing VM-protected methods, recovering hidden calls, and decrypting strings/resources, all while ensuring the output maintains original runtime behavior and functionality without reliance on the .NET Reactor runtime. Notable features include automated semantic validation, a generic reconstruction engine adaptable to various inputs, and a range of post-deobfuscation capabilities to enhance code readability and execution efficiency.

The zhetical-showcase-website is a web application designed to showcase various projects and tools developed by Zethical. Its primary use case is to provide a visually appealing and organized online portfolio, leveraging features such as responsive design and easy navigation to enhance user engagement and project visibility.

ObuscatedBOT is a multi-functional Telegram bot designed for performing instant network scans and providing security insights, aimed at ethical hackers and security enthusiasts. Key features include real-time alerts for suspicious activity, comprehensive vulnerability reports, and a user-friendly interface within the Telegram platform, facilitating easy navigation and interaction.

SimpleReconDorking (SRDorking) is a Python-based tool for URL scraping using dorking techniques across multiple search engines, facilitating OSINT and reconnaissance operations. It accepts user-defined or categorized dorks and processes them in parallel, differentiating itself from other tools by focusing solely on search engine indices without a crawling mechanism. Notable features include asynchronous execution, no external shell dependencies, and an integrated dork catalog for efficient asset exposure audits.

Hermes Cybersecurity Lab is a comprehensive cybersecurity toolkit designed for the Hermes Agent, encompassing 2,077 skills, 131+ tools, and 28 frameworks, systematically organized across multiple repositories. Its primary use case includes security research, pentesting, forensics, and threat intelligence, with notable features like a preconfigured installation script, tool inventory awareness, and a structured methodology for tackling various phases of cybersecurity engagements. This ecosystem ensures continuous updates and knowledge accumulation, enhancing both operational efficiency and effectiveness in security practices.

Project Eyes On is a multi-threaded reconnaissance tool designed for the global scanning and identification of open IP cameras by leveraging both web dorking and directory scraping techniques. Notable features include support for multiple search engines, anti-rate limiting, path probing to locate hidden streams, and interactive TUI for user-friendly operation. This tool aims to serve educational and security auditing purposes but highlights the importance of device security for camera owners.

QueryTool is a standalone HTML application designed for constructing and executing OSINT queries while providing access to a curated source catalogue of 178 sources. Its primary use case is to facilitate the generation of complex queries using Google-style syntax, allowing users to filter sources by various criteria and open multiple links in new tabs. Notable features include offline functionality, the ability to import and export browser sessions as JSON, and a straightforward setup with no installation required.

Ordo is an OSINT investigation toolkit designed to trace scam operations from a single website or app to the underlying network of operators. Its primary features include two data collection methods (WebPivot and BinaryPivot) that extract identifying artifacts, followed by a robust analysis and visualization capability to correlate data points and create interactive network graphs and professional reports. Additionally, Ordo focuses on maintaining operational security by ensuring that investigation data remains local and secure within an ignored directory.

THEORY is an open-source tool designed to produce comprehensive threat actor intelligence dossiers by aggregating data from various cybersecurity sources, including MITRE ATT&CK and AlienVault OTX. It leverages a large language model to synthesize information into easily digestible executive summaries and detailed intelligence reports, which feature TTP tables, detection opportunities, and enriched IoCs. Key functionalities include the generation of IR playbooks and export options in multiple formats, making it suitable for threat intelligence analysts, detection engineers, and security researchers.

Awesome OSINT Repositories is a comprehensive catalog that organizes open-source investigative tools into 12 distinct categories, each tailored to specific input types such as usernames, domains, and IP addresses. The repository features a diverse range of projects, with additional sections highlighting emerging tools and AI-agent integrations, providing users with a robust resource for enhancing their open-source intelligence capabilities. It emphasizes only publicly accessible source-code repositories, ensuring a focused selection of actionable tools for investigations.

GMapsScraper is a Python-based tool designed for scraping business data from Google Maps without requiring an API key. It offers features such as multi-threaded querying, extraction of over 15 fields including contact details and GPS coordinates, and the ability to crawl business websites for additional information. Users can export data in formats like CSV, Excel, or JSON, making it a versatile solution for lead generation and data enrichment.

The OSINT Notebook is a comprehensive collection of tools, techniques, and resources aimed at facilitating ethical investigations and research based on publicly available information. Key use cases include username and email investigations, image analysis using reverse searches, geolocation identification, and social media behavior mapping. Notable features include the emphasis on anonymity through fictitious identities, structured methodologies for data correlation, and a dynamic approach that adapts to the evolving landscape of open-source intelligence.

Spotlight is an OSINT investigation orchestrator designed to convert leads into structured case files, integrating methodologies, sourced findings, and independent fact-checking. It features a client-driven workflow with explicit approval gates, allows for multiple research cycles, and maintains a separate knowledge vault for proven materials, ensuring that only verified data is published. Notable capabilities include drafting investigation briefs, running bounded research, and generating detailed reports with provenance records, making it suitable for rigorous investigative journalism and research.

SteamReveal is an OSINT tool tailored for the Steam community, enabling users to discover concealed profile information, including player location and Close Friends network. It utilizes advanced features such as geographic triangulation and AI-powered cheater probability analysis specific to Counter-Strike players, while also offering a responsive user interface and multilingual support. Developed with modern web technologies, it aggregates data from the Steam API and employs machine learning for enhanced analysis and insights.

Cyber Intelligence GPT is a specialized tool for operational security and cyber investigations, integrating OSINT, DFIR, threat intelligence, and AI security into a cohesive workflow. It enables users to collect, analyze, and report on information while providing capabilities for entity research, incident triage, and correlation of cyber threats across multiple public sources. Notable features include the ability to create collection plans, resolve contradictions, assess confidence in findings, and suggest strategic next actions based on intelligence gaps.

PI Recon is a lightweight AI red teaming harness designed for authorized agent security challenges, facilitating a streamlined workflow of task acquisition, reconnaissance, validation, and summarization. It features continuous scheduling, bounded execution, multi-stage reconnaissance, structured summaries, and secure builds that do not expose sensitive information. This tool emphasizes simplicity and efficiency, making it an ideal choice for users looking to optimize their red teaming processes without the overhead of a heavier framework.

Deep Focus is a high-performance asynchronous network reconnaissance tool designed for security researchers and network administrators to discover and fingerprint services across IP ranges. It features intelligent probing of common network services, detailed authentication detection, and structured export of actionable intelligence, all while managing system resources to prevent overheating on passively-cooled devices. Its notable capabilities include comprehensive scanning for services like HTTP, FTP, SSH, and more, along with robust thermal management to ensure optimal performance.

The repository provides a comprehensive collection of cybersecurity bookmarks curated by a senior information security engineer, focusing on critical topics such as OSINT, exploitation, privilege escalation, and malware analysis. It features over 40 tools for reconnaissance, privacy, and attack methodologies, along with curated news sources, making it a valuable resource for cybersecurity professionals looking to enhance their operational security and situational awareness. Notable features include categorized tools for specific cybersecurity tasks and a visually engaging presentation of the content.

ZeroBurst is an advanced command-line application security testing framework designed for ethical hacking and vulnerability assessment. With over 55 specialized modules, it enables users to conduct thorough reconnaissance, injection testing, and auditing of web applications, focusing on various attack vectors such as server-side request forgery and SQL injection. Notable features include automated vulnerability detection across multiple tiers, advanced auditing capabilities, and comprehensive mapping tools for application infrastructure.

Network Scanner is an open-source security tool designed for vulnerability assessments and penetration testing, enhancing traditional methodologies with AI capabilities for intelligent analysis and detailed reporting. Tailored for a diverse user base including beginners and professionals, it offers functionalities such as automated reconnaissance, various scan types (subdomain, port, DNS), and an AI assistant for context-sensitive support. Notable features include report generation in PDF/HTML formats, an educational learning mode, and API readiness for seamless integration.

Awesome Malware Persistence is a curated repository that compiles tools and resources related to malware persistence techniques across various platforms, including Windows, Linux, macOS, and cloud systems. Its primary use case is to provide cybersecurity professionals with insights into how adversaries maintain system access through various persistence methods, as well as strategies for detection, prevention, and removal of these threats. Notable features include a comprehensive categorization of persistence techniques and relevant forensic tools, linked to established frameworks such as MITRE ATT&CK.

Awesome OSINT Repositories is a comprehensive catalogue of open-source tools for Open Source Intelligence (OSINT) investigations, organized into 12 distinct categories based on concrete input types such as usernames, domains, and IP addresses. The repository features a total of 447 projects, including views for emerging tools and AI-based integrations, and excludes closed-source or incomplete resources. It provides easy navigation and documentation to facilitate the discovery and utilization of investigative software in various OSINT applications.

CyberLeaks is an OSINT tool designed to assess email compromise through data breaches by utilizing dual API engines from Apify and RapidAPI. It features an interactive command-line interface for user-friendly operations, integrates risk scoring and detailed breach reporting, and supports batch processing of multiple emails. Additional capabilities include secure API key management, password leak lookups, and report generation in various formats.

Atlos is a collaborative platform designed for investigators to catalog and verify eyewitness media efficiently at scale, addressing the unique requirements of visual investigations. It features automatic media archiving and incorporates industry-standard safety measures for researchers, making it a dual-purpose tool that functions as both a collaborative workspace and a robust database. Notably, it supports high-profile investigations, such as those conducted by Bellingcat on civilian harm in Ukraine.

BugHunter is an AI-powered bug bounty toolkit designed for effective vulnerability assessment and reporting directly from the terminal. It automates the processes from reconnaissance to reporting, generating submission-ready documents for various platforms while utilizing an intelligent session management feature that retains discovered patterns across targets. This tool can operate independently without a subscription, enhancing accessibility for users in the cybersecurity domain.

OSINT Skills is an open-source intelligence tool designed for automated investigations, enabling users to pivot between various data points such as emails, domains, and social accounts. Its main use case involves conducting comprehensive reconnaissance and attribution, with 28 integrated skills that utilize techniques like reverse image search and breach checks to generate detailed reports complete with sources and confidence levels. Notably, the tool allows interaction with AI agents to streamline the investigation process and provides extensive reference materials for each skill.

DorkAgent is a LLM-powered tool designed for automated Google Dorking to assist in bug hunting and penetration testing. It allows users to retrieve and customize search results through various LLM APIs, streamlining the process of exploiting Google search vulnerabilities. Notable features include automatic package installation, dynamic model selection at runtime, and extensive customization options for search parameters.

Secutils.dev is an open-source security toolbox designed for engineers and researchers, bridging the gap between complex enterprise solutions and scattered simple tools. It offers a guided experience for managing diverse security tasks, including webhooks for rapid API mocking, templates for cryptographic testing, and tools for Content Security Policy management. Notable features include user-friendly access to single-page tools, which do not require sign-up and provide stable URLs for easy sharing and AI-agent skills for enhanced automation.

The Camera Scanner is a Python command-line tool that facilitates the discovery and assessment of publicly accessible or vulnerable cameras via integration with Shodan and Nmap scanning. Key features include command-line options to initiate searches, check a database of cameras, and perform scans over specified IP ranges, with user-configurable settings for API keys and credential wordlists. This tool is intended for educational purposes, emphasizing responsible use in cybersecurity assessments.

CorpTrace is a framework designed for automating the collection of information about a target company during red team assessments. It integrates multiple modules from various sources, allowing users to execute diverse reconnaissance tasks while managing risk levels and API key consumption. Notable features include customizable timeout settings, thread management for concurrent execution, and visualization of collected data.

IP Radar is a self-hosted threat intelligence tool that aggregates data from 29 public threat feeds to provide comprehensive IP lookups, returning a conclusive verdict with evidence, confidence scores, geographic information, and ASN details. It features a streamlined setup process requiring minimal configuration, allows for rapid deployment via Docker, and complements its user interface with real-time data updates while ensuring all queries remain local and private. Notably, it supports STIX 2.1 export for further integration with threat analysis workflows.

Otwarte Źródła is a Polish extension of the OSINT Framework that focuses exclusively on Polish tools and data sources for open-source intelligence (OSINT) investigations. Key features include an organized catalog of local resources, the ability to contribute new entries via GitHub pull requests, and support for various tool installation and registration requirements. This tool enhances the accessibility and functionality of open-source intelligence efforts within Poland by centralizing relevant data.

Stackray is a self-hosted site intelligence application designed to scan domains and URLs to identify and record the technologies powering websites over time. It features multi-phase scanning capabilities, including HTTP probing, browser rendering, and cloud resource integration, allowing users to gather comprehensive technology stacks, monitor changes, and collaborate effectively within teams. Notable functionalities include the ability to enrich targets with public signals, run templated checks, and support for API integrations and recurring scans.

msarjun is a high-performance tool that enhances Arjun by enabling mass-scale parameter discovery through concurrent scanning of multiple URLs. Its primary use case is for efficient vulnerability assessment, significantly reducing execution time with features like automatic wordlist setup, multiple output formats, and optimized performance for extensive URL targeting. Notable features include configurable concurrency, output management for seamless tool integration, and a user-friendly command-line interface.

The RevEng.AI Ghidra Plugin integrates with Ghidra to facilitate AI-assisted binary analysis, enabling users to upload binaries for analysis and perform Binary Code Similarity operations. Its notable features include automatic function renaming based on confidence thresholds and the ability to display similar function names, which assist in reverse engineering stripped binaries. This tool is particularly useful for security researchers and software developers involved in binary analysis and reverse engineering tasks.

Wing Commander II source reconstruction and SDL2 port serves to restore and port the classic space combat game "Wing Commander II" as found in "Wing Commander: The Kilrathi Saga." This project enables cross-platform gameplay through the SDL2 framework, supporting both Kilrathi Saga and partial original DOS game data, while offering significant fidelity in function mapping with 98.06% machine-code similarity to the original executable. Notable features include enhanced graphical rendering options, full mouse and joystick support, and various fixes to improve user experience, such as window resizing and aspect ratio correction.

The "Python for Security Professionals" course equips learners with practical skills in Python programming specifically tailored to security tasks, ranging from language fundamentals to the development of security tools. It features hands-on labs that culminate in building applications like port scanners and log analyzers, all while emphasizing clean coding practices and error handling. This lab-driven, self-paced curriculum is suitable for beginners and progresses through advanced concepts, ensuring students learn to write maintainable security software effectively.

Simple Recon - Domain (SRDomain) is a comprehensive tool designed for passive and active domain enumeration, primarily aimed at OSINT workflows and reconnaissance. This Python-based application incorporates 50 data sources, offering advanced features such as DNSSEC zone walking, wildcard detection, TLS certificate SAN extraction, and HTML/JS crawling, enabling users to perform thorough domain assessments with parallel processing and no external shell dependencies.

Ahtapot is an IOC (Indicators of Compromise) analysis extension that enables users to perform rapid and secure threat assessments directly from their browser. Its primary use case is to analyze various security indicators, such as IP addresses, domains, and hashes, leveraging multiple threat intelligence sources with AI-powered analysis capabilities. Notable features include integration with three AI providers, smart caching for analysis results, customizable provider ordering, and a fully responsive user interface.

CRIMENET is an open-source knowledge graph that documents relationships among criminal organizations globally, leveraging multi-language Wikipedia data through a sophisticated LLM pipeline. It features a comprehensive dataset with over 4,500 organizations and nearly 11,000 relationships, all traceable to specific Wikipedia revisions, allowing for in-depth queries about criminal networks and history via a natural language interface called Ask CRIMENET AI. This tool offers the ability to explore organizational connections, historical contexts, and activity periods while ensuring information integrity through auditable sourcing.

lookup.tools is a versatile cybersecurity tool that facilitates the research of domains, IP addresses, email addresses, and other online assets. Notable features include its utilization of serverless architecture through Cloudflare Workers, a user-friendly interface built with React, and support for WHOIS and RDAP queries via the backend framework Robyn. This tool serves as an all-in-one resource for cybersecurity professionals seeking to perform comprehensive lookups.

XeroDay's API Sniffer is a comprehensive toolkit designed for the discovery of exposed API keys, tokens, and other sensitive information in public GitHub repositories. It features an AI-driven workflow orchestration for natural-language requests, alongside manual execution options that enable users to conduct multi-stage discoveries and scans. Key functionalities include live scanning dashboards, adaptive query strategies for new repositories, and support for detailed querying of findings through a robust AI search engine.

OXIDE is a precision-forged vulnerability scanner developed in Rust, designed primarily for authorized penetration testing and security research. It features a unique combination of traditional scanning methods and machine learning-based anomaly detection, along with integrations for tools like Burp Suite, and offers a modular architecture for extensibility. Notable features include a headless DOM, WAF evasion capabilities, and enhanced security with an embedded TLS certificate, making it suitable for use in both lab environments and real-world assessments.

KrazePlanetCTF is an open-source web security training platform that features over 260 interactive challenges within isolated per-user sandboxes, enabling hands-on learning for cybersecurity professionals. Its primary use case is to facilitate practical training in web security through real-world scenarios, while notable features include Docker-based deployment and easy management via command-line tools for viewing logs and controlling the platform's state.

The ANY.RUN SDK is a Python client library designed to interact with the ANY.RUN REST API, facilitating automated malware analysis and threat intelligence workflows. It provides features for file and URL submissions to an interactive sandbox, real-time monitoring of analysis progress, and access to comprehensive threat intelligence, including IOC searches and feeds. Notable functionalities include support for both synchronous and asynchronous operations, along with built-in exception handling and detailed reporting capabilities.

IDA Skill is an AI-powered tool that enables automated malware analysis using IDA Pro, mimicking the capabilities of human security analysts. It features automatic identification of malicious behavior, code functionality understanding, key information extraction, and threat indicator localization, enhancing malware investigation efficiency. Notable components include REAI for AI function analysis and FindCrypt for detecting encryption algorithms, facilitating comprehensive and advanced threat assessment.

NEO-Radar is a lightweight network scanner designed for Linux and Termux, aimed at simplifying network scanning for users without extensive networking or cybersecurity knowledge. Its primary use case is to provide essential scanning functionalities akin to more complex tools like Nmap, while also including a command reference for learning purposes. Notable features include ease of installation via a single command, compatibility with mobile devices, and a focus on user-friendly operations, making it accessible for a wider audience.

Surveillance-Industry is a comprehensive resource mapping the global surveillance ecosystem, detailing the companies and entities involved in the development of mass-monitoring tools across various jurisdictions. With 21 dossiers covering responses from multiple nations, including a deep-dive into companies like Palantir, it provides in-depth insights into state surveillance practices, industry vendors, and associated scandals, all presented in a Markdown format for ease of navigation. This tool serves as an essential guide for researchers and policymakers interested in the implications of surveillance technologies.

Cyberseek is a comprehensive, local threat intelligence and defensive analysis tool designed for security teams, integrating asset visibility, reconnaissance, and indicator enrichment into a unified workspace. Key features include continuous monitoring of domains and IPs, email exposure checks, and robust reporting capabilities, while it also enables the mapping of observed behaviors to the MITRE ATT&CK framework and utilizes AI for evidence-bound summaries. The tool aims to facilitate investigation workflows by preserving local task history and analyst context, enhancing operational efficiency in cybersecurity tasks.

Hostagram is an OSINT tool designed to extract and monitor extensive information from public Instagram accounts. Its primary use case is for research and analysis in the realm of social media intelligence, offering features such as user verification, email and phone number checks, and insights into follower activity. Currently in version 1.4, the tool is under active development with plans for future enhancements.

Meta Scan is an OSINT tool designed to extract comprehensive public profile data from Facebook pages, leveraging the RapidAPI Facebook Pages Scraper. Key features include the ability to retrieve detailed information such as profile and business details, transparency data, and generate JSON reports, all while ensuring secure API key handling and a user-friendly CLI interface. The tool is intended for educational purposes and supports batch processing of usernames, enhancing its usability for researchers.

`osintgpt` is a Python package that utilizes large language models (LLMs) to perform text analysis tasks relevant to open-source intelligence (OSINT), such as calculating text embeddings and searching for similar documents. Key features include an interactive mode for dynamic user interaction with the GPT model, SQLite database integration for efficient data management, and connectivity to the Qdrant vector similarity search engine for high-performance embedding storage and retrieval.

XingDumper is a Python 3 script designed to extract employee data from the XING social networking platform via its unofficial API. The tool facilitates the retrieval of essential employee information such as name, position, and location using just two API calls, and it includes a feature for auto-generating email addresses based on specified formats. Users must provide a valid XING login cookie and the company URL to initiate the data dump.

SearchToolkit is an advanced collection of resources designed for penetration testers, red teamers, blue teamers, and forensic analysts. It includes tools, hardware, cheatsheets, and references across various cybersecurity domains such as geolocation tracking, OSINT, malware analysis, and bug bounties. Notable features include a comprehensive navigation system for quick access to specific areas of cyber defense and offense, highlighting its utility in diverse cybersecurity tasks.

Cyberleek is a research tool focused on analyzing and verifying the authenticity of leaks related to the anticipated GTA VI gameplay. It consolidates evidence and critical research findings, emphasizing the distinction between genuine community research and false claims propagated by unverified sources. Notable features include detailed analysis of gameplay videos and an official Discord community for collaboration and discussion on leak verification.

Metawarc is an indexing tool that catalogs WARC collections into a versioned DuckDB database equipped with Parquet sidecars, enabling structured querying, metadata extraction, and payload export. Notable features include support for immutable source archives, atomic publication processes, typed queries accessible via CLI and REST API, and local replay capabilities similar to the Wayback Machine. The tool is designed for efficient analysis and manipulation of web archive datasets, facilitating incremental updates and recovery operations.

ReconGPT serves as a robust tool for passive reconnaissance, allowing security analysts to assess an authorized attack surface using corroborated public information while avoiding active scanning. Its interface is designed as a casefile that facilitates the entire investigative process, from target selection to evidence collection, with features like live telemetry for monitoring progress, an evidence explorer for detail inspection, and a report generation capability that preserves the context and limitations of findings. Notably, ReconGPT emphasizes evidential quality and offers insights into risk and data provenance, enabling analysts to effectively distinguish between validated evidence and inferences.

Cybermes is an advanced autonomous security research framework designed for offensive security tasks, including bug bounty hunting and red teaming. It features over 50 specialized modules for in-depth reconnaissance, attack surface analysis, and vulnerability validation, leveraging a unique integration of modern LLM reasoning and automated workflows. Notable capabilities include dynamic attack planning, multi-source knowledge retrieval, and programmatic validation of findings to ensure zero false positives.

WireTapper is a tool designed for detecting and mapping nearby wireless signals, including Wi-Fi networks, Bluetooth devices, IoT devices, and CCTV cameras. Its notable features include Wi-Fi detection with detailed information, Bluetooth scanning, and signal visualization on a user-friendly map interface, enabling users to gather intelligence from their environment effectively. The tool is intended for responsible use in compliance with local privacy laws and regulations.

WPRecon is a WordPress reconnaissance and vulnerability scanning tool that leverages a YAML-driven template architecture for efficient vulnerability detection and configuration assessment in WordPress installations. Notable features include parallel scanning with configurable worker pools, a library of over 150 templates for comprehensive coverage, and dynamic variable resolution, offering flexibility for security engineers to extend capabilities without recompilation. The tool supports both command-line and API interfaces, allowing for versatile integration into security workflows.

GRID v2 is a comprehensive local intelligence dashboard that integrates multiple capabilities for OSINT, network reconnaissance, satellite tracking, IoT, and automation, all within a single conversational interface. Its notable features include a sophisticated layered memory engine that retains knowledge across sessions, enabling efficient recall and context management, alongside over 68 built-in tools for various operational tasks, making it a versatile solution for cybersecurity professionals. Unlike competing tools, GRID uniquely combines a wide range of functionalities while operating entirely offline, ensuring user autonomy and data security.

instagrapi is an unofficial Instagram API wrapper for Python that facilitates fast and effective automation of various Instagram functionalities, including user interactions, media management, direct messaging, and insights retrieval. It supports session persistence and challenge handling while allowing extensive integration with both public web and private mobile API flows, making it suitable for testing, research, and controlled automation. Notable features include optional TLS impersonation support, built-in video upload capabilities, and comprehensive documentation for effective usage.

Phantom Tide is a geospatial OSINT tool designed for maritime and airspace intelligence that enables analysts to efficiently identify and prioritize anomalies across various signals. Its notable features include a ranking system for cross-source hotspots, an analyst notebook for personalized tracking and evidence management, and rapid load times for world-scale maps. The tool facilitates swift context identification with features like mission cues and area intelligence reports, ensuring users can move from detection to actionable insights with minimal friction.

adsbtrack is a Python tool designed to retrieve and structure historical ADS-B flight data for any aircraft using its ICAO hex code. It facilitates comprehensive analysis by extracting individual flights, correlating takeoff and landing coordinates with airports, and evaluating flight data quality over specified date ranges, making it particularly useful for OSINT and aviation enthusiasts seeking detailed insights into aircraft travel patterns. Notable features include multi-network data retrieval, flight quality classifications, and the ability to analyze signal gaps and generate routing fingerprints.

OSINT Custom Search Engines is a versatile collection of Google Custom Search Engines (CSEs) specifically designed for conducting open-source intelligence (OSINT) searches across various platforms and languages, with a focus on Central Asia and Russian-speaking communities. This tool allows users to perform targeted searches for social media profiles, public documents, and other data sources, with notable features including tailored CSEs for platforms like Facebook, Instagram, and Telegram, as well as the ability to search specific countries and demographics. Users can contribute to the repository by adding their own CSEs or reporting issues, encouraging community engagement and continuous improvement.

AWINRM is an advanced WinRM post-exploitation framework designed specifically for red teams and offensive research, implemented in Ruby. Its primary use case revolves around facilitating efficient post-exploitation activities with features like built-in tool staging, automated AMSI/ETW bypasses, stealth file transfers, and automatic loot extraction, addressing common challenges encountered in traditional WinRM tools. The framework provides a streamlined operator-centric workflow that enhances operational security and supports automated reconnaissance and credential gathering.

XRefer is a Python plugin for the IDA Pro disassembler that enhances binary analysis through a custom navigation interface. It clusters related functions, highlights execution paths, and integrates external data sources to provide context-rich path graphs, significantly speeding up manual static analysis. Notable features include LLM integration for generating natural language descriptions of code relationships and the ability to incorporate API traces and custom xrefs for improved insights.

BlastDNS is an ultra-fast DNS resolver implemented in Rust, optimized for mass DNS lookups with superior performance when multiple resolvers are provided. Its notable features include built-in caching, support for various record types, and configurable parameters for fine-tuning performance, such as timeout settings and error handling. The tool can be utilized through a command-line interface, Rust library, or Python library, making it versatile for integration into broader applications or for use as a standalone resolver.

The Counter-OSINT & Privacy Guide is a comprehensive resource designed to help individuals safeguard their personal data against online threats. It covers essential topics such as digital hygiene, data breaches, and privacy measures across various platforms, providing users with actionable strategies to enhance their online security and maintain privacy. Notable features include a detailed section on software development privacy and region-specific considerations, making it a versatile tool for a diverse audience.

IG-Detective is a Python-based Open Source Intelligence (OSINT) tool designed for in-depth analysis of Instagram accounts, enabling users to extract location history, map social interactions, and generate automated reports. Notable features include advanced evasion techniques for stealthy data collection, interactive geospatial mapping, and various forensic modules such as account recovery enumeration and engagement audits. The tool optimizes performance with asynchronous data export and intelligent caching for efficient query handling.

ExecEndpoints is a dual-component toolkit designed for authorized web security testing and bug bounty efforts, featuring a Chrome extension for real-time API request monitoring and a Python server for extracting hidden endpoints from JavaScript. The tool captures detailed HTTP requests, including methods, parameters, and per-host authentication details, while enabling deep static analysis to uncover dynamic API endpoints missed by traditional scanning methods. Notable features include a rich dashboard for endpoint management, a typed secret scanner, and a safe design that operates locally without external dependencies.

Reversense (Dexcalibur 2) is a comprehensive binary intelligence platform tailored for reverse engineering of mobile and embedded applications. It automates the analysis process through integrated static and dynamic methodologies within a unified framework, facilitating collaboration among multiple analysts. Notable features include automated scanning capabilities, device-farm compatibility, and LLM integration, enhancing user experience and operational efficiency in assessing application behavior and vulnerabilities.

MORF is a Mobile Reconnaissance Framework designed for offensive security, specifically engineered to discover hardcoded secrets within compiled mobile application artifacts (Android `.apk` and iOS `.ipa`). Unlike traditional source code scanners, MORF operates on the final shipped binaries, utilizing a robust detection engine to verify the presence and activity of secrets, while also generating Software Bills of Materials (SBOM) and Common Vulnerability and Exposure (CVE) reports. Key features include a scalable service architecture, continuous integration (CI) compatibility, and compatibility with leading security standards such as SARIF and OWASP MASVS.

ZeroDroid is a comprehensive Android hardware security toolkit designed to transform smartphones into portable RF labs, network analyzers, and security auditing tools, featuring 29 specialized utilities. Its primary use case includes analyzing various radio frequencies and sensors, as well as conducting detailed network assessments. Notable features include the ability to access WiFi, Bluetooth, NFC, GPS, and other device sensors, all presented through a terminal-hacker user interface.

Steam OSINT is an open-source intelligence tool specifically designed for analyzing public Steam profile data. It facilitates the discovery of mutual friends, identifies hidden relationships, and retrieves historical account information like previous usernames and URLs, making it a valuable resource for OSINT researchers and cybersecurity professionals. Notable features include a command-line interface, cross-platform support, and capabilities for uncovering connections beyond the Steam platform.

url.vet is an open-source phishing detection engine designed to analyze URLs and domains, providing users with a trust score, detailed verdicts, and comprehensive security reports in real time. Key features include instant live scanning using 18 concurrent analyzers and 33 individual signals, an explainable scoring system devoid of black-box machine learning, as well as integrations for a REST API, web UI, and a Chrome extension, making it a developer-friendly alternative to existing services like VirusTotal.

insta-dl is an asynchronous command-line tool designed for downloading Instagram content, such as profiles, posts, reels, stories, and comments, while preserving the original timestamps. It features two backend options, HikerAPI for safe use without a login and an optional private API, along with capabilities for incremental updates, JSON metadata storage, and versatile input formats. This tool is optimal for users seeking to archive Instagram content without the risk of account bans associated with traditional scraping methods.

OSINT-Nexus is an open-source intelligence platform designed for security researchers, penetration testers, and intelligence analysts, integrating passive reconnaissance tools with AI-driven analysis. Notable features include advanced graph analytics, interactive visualizations, and AI-powered insights using Google Gemini, along with robust reporting capabilities in multiple formats. This cross-platform tool supports Windows and Linux, making it a versatile resource for gathering actionable intelligence from publicly available data.

WHATS LOOKUP is an OSINT tool designed for gathering various types of user information from WhatsApp accounts, including profile pictures, business account verification, user status, linked device analysis, and privacy settings. It supports six API endpoints and features an interactive terminal interface, automated image saving, and international number format validation. This tool is intended for legitimate cybersecurity investigations and requires integration with the WhatsApp OSINT API on RapidAPI.

The World Intelligence MCP Server provides real-time global intelligence across over 30 domains by integrating 120 tools compatible with the Model Context Protocol. It features a live ops-center dashboard and a Qdrant vector store for efficient semantic search, allowing users to query historical data on various subjects such as military activity, cyber threats, and economic indicators using natural language. This tool is particularly beneficial for AI agents requiring comprehensive world awareness without reliance on paid data subscriptions.

HEAVEN is an autonomous penetration-testing framework designed to streamline and automate various stages of the penetration testing process, including reconnaissance, vulnerability detection, exploitation, risk scoring via machine learning, and reporting. It features a robust interface with 55 CLI commands, 77 API routes, and multiple scan modes, facilitating comprehensive assessments while allowing users to focus on critical decision-making tasks. Notably, it incorporates a CVSS machine learning predictor with a high correlation score, ensuring accurate risk evaluation.

The VSphereRansomwareRecovery tool provides a recovery solution for virtual machines affected by Babuk-family ransomware on ESXi hosts. It facilitates the restoration of virtual disks ending in `.babyk` through partition table rebuilding and file system recovery, ensuring minimal data loss in the process. Notable features include the capability to leverage AI agents for automated recovery steps and the assurance of recovering readable data from the majority of affected disk space.

OSINTInvestigation is a comprehensive tool aimed at monitoring global events through the integration of Financial Intelligence (FININT), Social Media Intelligence (SOCMINT), and Geospatial Intelligence (GEOINT). Notably, it utilizes a tri-phase feedback cycle for anomaly detection, context analysis, and localization, leveraging web-based tools like Glint for financial visualization, Monitor The Situation for news aggregation, and World Monitor for geospatial mapping. This facilitates real-time insight into geopolitical, financial, and social trends, enabling users to detect and analyze significant occurrences effectively.

SOCMIntelligence is a comprehensive Social Media Intelligence (SOCMINT) tool designed for monitoring and analyzing social networks to identify profiles, relationships, and organizations, enabling the construction of contextual diagrams relevant to various intelligence cycles. Key features include support for multiple social media platforms, advanced search capabilities, and a variety of analytics and monitoring tools. This tool facilitates the extraction of valuable information from social media exchanges, making it essential for intelligence gathering and network analysis.

SYNINT: Agentic OSINT & Intelligence Framework – Modular, Stealthy, API-Free, Multi-Agent System for Automated Intelligence Collection & Analysis.

WMN-Docker is a containerized API wrapper for the WhatsMyName (WMN) tool, designed to facilitate username discovery on websites within an OSINT framework. Notable features include JWT authentication for secure access, the ability to perform individual or batch username lookups, cached job results for performance, and built-in API documentation. This tool aims to enhance integration, modularity, and scalability for users involved in online investigative tasks.

jb_ape is an automated red-team engine designed to perform security assessments by probing target defenses, generating and mutating attack payloads through browser or API interfaces. It features a unique three-tier judgment system that ensures machine-verified outcomes for every attempt, employs a controlled submission budget to enhance efficiency, and utilizes reinforcement learning techniques to optimize the attack strategy while avoiding guessing. This tool is intended strictly for authorized use in sanctioned environments such as penetration testing or capture-the-flag competitions.

Awesome Recon Tools is a curated list of reconnaissance and footprinting tools designed to assist cybersecurity professionals in gathering domain and network information. It features a diverse array of tools for personal information footprinting, as well as specialized resources for analyzing web technologies, OSINT data collection, and visual network mapping. Notable features include integrations with services like Shodan, Censys, and Maltego, alongside functionalities for automated OSINT and detailed scanning of attack surfaces.

KageTarget is a Chrome extension designed for local web reconnaissance, enabling users to analyze the currently active tab or manually entered HTTP(S) addresses. Notable features include technology detection with evidence, detailed inspections of HTTP and security headers, and historical URL discovery through the Internet Archive, along with options for focused analysis and customizable user interface in multiple languages.

NEXUS REDFOX is a local-first codebase intelligence and security analysis tool designed to assist developers and security teams in understanding software projects by inspecting source code and dependencies without cloud reliance. It features comprehensive deterministic security scanning, architecture graph generation, and detailed reporting capabilities, enabling users to identify vulnerabilities, map project structures, and generate software bills of materials effectively. Notable functionalities include a local web dashboard, deterministic analysis, and integration with an optional AI analysis component, all aimed at enhancing developer security and project integrity.

The CTFd Geo Challenges Plugin enhances Capture The Flag competitions by enabling the creation of location-based puzzles that require players to identify specific geographic coordinates. Notable features include two answer types (point with a tolerance radius and polygon zones), an interactive map interface powered by Leaflet and OpenStreetMap, geocoding support, and a multilingual interface, making it a versatile tool for challenge creators in the CTF community.

Naminter is a Python-based tool designed for asynchronous OSINT username enumeration utilizing the extensive WhatsMyName dataset. Its primary use case is to efficiently enumerate usernames across a multitude of websites with features such as browser impersonation and customizable filtering options, functioning seamlessly as both a command-line interface and a library for integration in Python applications.

Provenance is a live mapping tool that visualizes a variety of open data feeds, including government road cameras, aircraft, satellites, and other dynamic datasets, on a single globe interface. It enables users to easily access and assess the source and reliability of each data layer, with no authentication or API keys required. Notable features include coverage of 41 data feeds, continuous updates from multiple public sources, and a robust architectural foundation built using Next.js and TypeScript.

QueryTool is a lightweight, standalone HTML application designed for constructing OSINT queries and accessing a curated selection of 178 relevant sources. Its notable features include the ability to build complex Google-style queries, filter sources by various criteria, and simultaneously open selected links in new tabs, all without requiring any installation or configuration. The tool serves as an effective resource for users seeking to streamline their open-source intelligence tasks.

Riksdagsmonitor is a Swedish political intelligence platform that enhances democratic transparency through evidence-based analysis and AI-generated political news, utilizing official open data. It leverages structured intelligence techniques and monitors extensive data from the Swedish Parliament, Government, and public agencies, producing publication-ready intelligence articles autonomously in multiple languages. Notably, it operates a fully automated newsroom with 14 agentic workflows, generating daily content without human editors.

Stellar ThreatNet is an open-source, decentralized threat intelligence platform designed for the Stellar blockchain ecosystem, focusing on enhancing Web3 security. It addresses threats such as phishing domains and malicious tokens by providing a robust reputation scoring system, community-driven moderation, and real-time validation of threat indicators, all anchored on the Stellar ledger for zero-trust validation. Notable features include a high-performance automated threat ingestion system, comprehensive developer SDK integrations, and community engagement functionalities.

Cyber Intelligence GPT is a custom AI tool designed to enhance open-source intelligence (OSINT) and cyber investigations by supporting the analysis, correlation, and reporting of data related to threat intelligence, digital forensics, and compliance. It features a comprehensive investigation workflow that enables users to create collection plans, pivot on identifiers, correlate evidence, and identify intelligence gaps, while adhering to lawful sources and practices. Notably, it encompasses various aspects of cybersecurity, including threat hunting, security operations, and OPSEC, making it a multifaceted resource for security professionals.

The TH105 project is a reverse engineering initiative aimed at reconstructing the source code of the Japanese game "東方緋想天 ～ Scarlet Weather Rhapsody" version 1.06a, with a focus on achieving reproducible binary comparisons. The tool utilizes Ghidra and IDA Pro for semantic analysis, and incorporates a structured workflow that emphasizes exact matching and function byte comparisons, ensuring the integrity of the reconstructed code. Notable features include the generation of a machine-readable function ledger and project-scoped tools for streamlined analysis and verification.

The th07 project focuses on the reverse engineering and reconstruction of the original Japanese executable for `東方妖々夢 ～ Perfect Cherry Blossom` version 1.00b. Its primary use case is to achieve reproducible binary comparisons through an extensive function-by-function analysis, employing tools like IDA Pro for semantic analysis. Notable features include a structured workflow integrating knowledge from related projects, strict validation gates for function verification, and a comprehensive inventory and progress tracking system.

The th08 project is focused on reverse-engineering and reconstructing the source code of the original Japanese game "東方永夜抄 ～ Imperishable Night" (version 1.00d). Its primary use case allows for reproducible binary comparisons against the original executable, while facilitating the build process in multi-platform environments. Notable features include a detailed analysis workflow, dependency management, and documentation of progress and architecture, with components built upon contributions from previous related projects.

The URL Shorteners tool provides a curated collection of over one thousand URL shortener domains intended for use in whitelisting, blacklisting, and assessing domain trustworthiness. Notable features include separate lists for active and inactive domains, aiding in network security and minimizing false positives in risk assessments. This resource is valuable for enhancing privacy protection across various network environments.

Awesome AI in Cybersecurity is a curated repository that provides an extensive collection of resources focused on the application of artificial intelligence in various cybersecurity domains. It categorizes AI uses within cybersecurity into prediction, prevention, detection, response, and monitoring, while also detailing tools for penetration testing, malware analysis, and security for AI SaaS environments. Notable features include automated penetration testing frameworks, and support for network protocol verification, enhancing traditional security measures with AI-driven insights and efficiencies.

GlobalCVE is an open-source vulnerability intelligence platform that aggregates Common Vulnerabilities and Exposures (CVEs) from various national and vendor sources, aiming for a clean and developer-friendly interface. Key features include multi-source aggregation with a unified view to avoid duplicates, a minimalist design with dark mode, and a serverless architecture for scalability. The platform emphasizes transparency and community-driven development, providing a free API and fostering collaboration among developers for continual improvement.

AI for the Win is a hands-on training platform designed for security practitioners to develop AI-powered tools specifically for threat detection, incident response, and security automation. It features over 50 labs, including capstone projects and CTF challenges, focusing on practical applications such as phishing detection and security log analysis using advanced algorithms like Random Forest and LLMs. The platform also offers a Docker lab environment, sample datasets, and solution walkthroughs to facilitate immersive learning experiences.

AIDebug is a command-line interface and terminal UI tool designed for malware reverse engineering, emphasizing evidence collection and analysis. Its primary use case involves deterministic offline triage of PE and ELF files, whole-file hex inspection, and in-depth structure analysis with features such as Ghidra-backed reconstruction and local ELF debugging, while also offering optional integration with large language models for enhanced review capabilities. Notable functionalities include paged hex viewing, customizable output formats for analyst reviews, and a robust history tracking system for SHA-256 indexed analyses.

CanLab is a comprehensive reverse-engineering workstation for CAN bus data, designed to facilitate the analysis, diagnostics, and modification of automotive communication protocols. It features a user-friendly PyQt6 interface that supports loading and inspecting CAN frames, running offline analyses, and utilizing AI assistance for interpreting IDs. Notable capabilities include DBC building and export, diagnostic protocol support, signal injection and fuzzing, as well as built-in safety mechanisms to prevent accidental misuse in live vehicle environments.

CoBRA is a Mixed Boolean-Arithmetic expression simplifier designed to deobfuscate complex arithmetic expressions that interleave arithmetic, bitwise, and shift operators, often used in software obfuscation. It employs a worklist-based orchestrator and features various techniques such as signature-based analysis, semilinear processing, and decomposition to simplify expressions efficiently. Notable functionalities include verification via spot-checking or Z3 proofs and the ability to handle weighted sums of bitwise atoms, making it a robust tool for analyzing obfuscated code.

deps.cloud is a dependency management tool designed to analyze and provide insights into the libraries and projects utilized within a software system by extracting data from common manifest files such as `pom.xml`, `package.json`, and `go.mod`. Its primary use case includes answering specific dependency-related queries, such as identifying library versions and tracking open-source library usage across projects. Notable features include comprehensive dependency detection, a supportive community for development, and various workflows for project maintenance, although the project is currently in maintenance mode due to low community engagement.

The FLOSS Toolbox is a multi-language utility designed to assist developers in maintaining clean projects within GitHub organizations. It features a variety of scripts for automating tasks such as data scraping from Git logs, interfacing with GitHub and GitLab APIs, managing license inventories, and generating documentation. The primary use case is to enhance code quality and streamline project management through efficient file processing and automation using Shell, Ruby, Python, and PHP.

GHOST is an AI-powered OSINT investigation platform designed for automated intelligence gathering using various data vectors such as names, emails, and images. It offers notable features like AI-driven correlation, extensive reporting capabilities in HTML/PDF formats, and a web dashboard with graphical representations of data, enabling users to conduct thorough investigations efficiently. GHOST supports multiple platforms and provides tools for dark web monitoring, social media analysis, and entity resolution, all while being open source and cost-free.

The Spiderfoot-local-data-module enhances the Spiderfoot reconnaissance tool by enabling it to search through locally stored databases for leaked and breached data. It allows users to specify the full paths of datasets and automatically scans for relevant information during Spiderfoot operations, reporting any findings with file names and content. Notable features include support for multiple data files and the ability to configure what types of data to search for, with potential performance improvements suggested through integration with tools like ripgrep.

Omnichron is a TypeScript library that provides a unified interface for querying multiple web archive providers, including the Wayback Machine, Archive.today, and Common Crawl. Its key features include lazy loading of providers, built-in caching, support for parallel queries, and comprehensive TypeScript type definitions. This tool is particularly useful for developers needing consistent access to various web archive data with enhanced performance and configurability.

findcdn is a Python-based tool designed to scan domains to identify the Content Distribution Network (CDN) they utilize. Its primary use case includes providing actionable insights regarding CDN usage for security assessments or operational purposes, with features that allow output to files, invocation as a module, and customizable processing options such as threading and user-agent specification. The tool supports multiple domains and offers verbose output for enhanced monitoring and analysis.

Arina-OSINT is a console-based OSINT tool designed for checking the availability of usernames across 56 popular online platforms and services. It enables users to uncover forgotten or old profiles, as well as trace the digital footprint of a nickname by sending direct requests to various services to ascertain account existence based on HTTP response statuses and content markers. Notably, it maintains a 1:1 behavior porting from its original C# (.NET Core) implementation to TypeScript/Node.js, ensuring consistent functionality.

Pulse Intelligence is an open-source, self-hosted threat intelligence platform that facilitates analyst workflows by enabling the tracking of threat actors, indicators, vulnerabilities, and campaigns from a unified interface. Its notable features include integration with various public threat feeds, automated enrichment of indicators, and the ability to conduct and export threat hunts, along with the generation of scheduled reports and a scoped API for programmatic access. The platform is designed to support the operational needs of junior Cyber Threat Intelligence teams through a comprehensive workspace solution.

Attack Surface Toolkit is a passive reconnaissance tool designed for authorized web security assessments that maps external exposures of web targets through OSINT and non-destructive metadata collection. Its primary use case is to provide clear and actionable insights into an organization’s attack surface without engaging in invasive testing, presenting findings in a structured format suitable for both technical and non-technical stakeholders. Notable features include comprehensive subdomain enumeration, DNS analysis, SSL/TLS inspection, security header audits, technology detection, and a weighted scoring system, all culminating in professional-grade reports formatted for client deliverables.

Hellhound Spider is a fully autonomous web crawler designed for security testing that efficiently maps endpoints, parameters, and potential security issues in traditional and single-page applications (SPAs). It features concurrent crawl engines using async HTTP workers and headless Chromium for JavaScript interrogation, outputting a structured JSON report that categorizes endpoints by confidence level and is ready for integration with security assessment tools like Burp Suite. The tool also includes capabilities for automated CORS audits, sensitive file detection in Capture the Flag (CTF) environments, and dynamic parameter extraction, enhancing its utility in penetration testing and vulnerability assessments.

SagarBiswas-MultiHAT is a GitHub repository showcasing a range of cybersecurity and web development projects by Sagar Biswas, a Computer Science and Engineering student. The repository includes open-source tools focused on web application security and ethical hacking, featuring a system called "PromptVault" that enables users to securely manage AI prompts with features like PIN protection, organizational categories, and optional cloud synchronization.

CScorza is a personal GitHub profile showcasing various projects and stats related to the user's activity. It utilizes automated badges and visual elements to present information about the developer’s work and social connections, facilitating networking and project visibility. Notably, it emphasizes the integration of dynamic content to enhance presentation and engagement.

Detection Labs for Palantir-Style Activity is an educational resource designed for blue team practitioners focusing on detection engineering and threat hunting. It leverages open-source tools and Sigma rules within SIEM environments to enhance competencies in cybersecurity operations, incident response, and threat intelligence analysis. Notable features include a flexible simulation environment, advanced jitter analysis for continuous monitoring, and comprehensive learning resources for SOC management.

Reconner is a self-hosted reconnaissance tool designed for bug bounty hunters and security researchers, facilitating comprehensive web and network scanning from a single dashboard. It offers a full pipeline of discovery, vulnerability assessment, and continuous monitoring without relying on third-party services, ensuring that all data remains on the user's system. Notable features include real-time logging, native context-aware DAST for multiple vulnerabilities, and seamless integration with Nuclei for enhanced scanning capabilities.

SimpleReconURL is an OSINT tool designed for the extraction and discovery of URLs from a given seed URL, enabling reconnaissance workflows. It fetches HTML content to identify all reachable URLs, with options for deeper crawling of the same origin and enrichment through various external sources like the Wayback Machine and VirusTotal. The tool is built in asynchronous Python, ensuring efficiency and ease of use without external shell dependencies.

XSScan is a Playwright-based automated tool designed for bug bounty hunters and security researchers to detect executed cross-site scripting (XSS) vulnerabilities. Key features include real browser execution using Chromium, intelligent form submission, recursive crawling, and auto-generated reports of confirmed XSS findings, ensuring focus on vulnerabilities that are genuinely executed rather than merely reflected.

CeWL AI is an advanced reconnaissance tool designed to crawl various protocols including HTTP, FTP, SFTP, SMB, and S3, extracting valuable information such as emails, metadata, credentials, and secrets. It combines functionalities of traditional tools like CeWL and CUPP, offering features such as AI-powered wordlist generation, password mutation, multi-protocol support, and secret scanning, all implemented in a single Go binary. This tool enhances security assessments by facilitating in-depth data extraction and analysis in one command.

Slave I is an offensive-security firmware specifically designed for the M5Stack Tab5, facilitating wireless research through an integrated toolkit for Wi-Fi, BLE, and 802.15.4 recon and attack capabilities. Notable features include a touch UI, a physical-keyboard workflow, extensive scanning and capturing functions, and a desktop emulator for development. It allows users to implement advanced wireless attacks while emphasizing ethical usage and compliance with legal standards.

CamSniff is an automated reconnaissance toolkit designed for discovering and profiling IP cameras and network video streams within local networks. It employs both active and passive scanning methods to generate structured and auditable datasets, while enabling users to acquire snapshots and streams from various protocols, including RTSP and ONVIF. Notable features include its mode-aware scanning capabilities, multi-protocol support, and the ability to produce comprehensive output formats such as structured JSON files and logs.

OSINT Skills is an open-source intelligence tool designed to facilitate automated investigations by agents like Cursor and Claude. It provides 28 customizable skills for various reconnaissance tasks, enabling users to pivot across data points such as emails, domains, and social accounts, all while generating reports with source citations and confidence levels. Key features include pre-defined workflows, individual techniques for advanced inquiries, and comprehensive reference materials for effective tradecraft in OSINT.

Malware-Sandbox-mcp is a cloud-based tool designed to detonate suspicious files and URLs within multiple third-party malware sandboxes, providing normalized reports with threat intelligence data such as verdicts, indicators of compromise (IOCs), and MITRE ATT&CK techniques. It offers a streamlined asynchronous submission and polling mechanism, allowing users to efficiently manage and analyze malware reports while integrating with nine backend services and twenty analytical tools. Key features include a uniform report schema, customizable API key management for backends, and safety mechanisms to prevent exposure of sensitive data.

Anya is a fast, offline static malware analysis platform that processes a wide variety of file formats, including PE, ELF, PDF, and Office documents, without executing them. Key features include high-speed analysis of over 250 files per minute, detailed output such as hashes, entropy, and risk scores, while offering integration with MITRE ATT&CK mappings and support for both GUI and CLI interfaces across multiple operating systems. It should be noted that Anya is transitioning its development to the MalChela project for future enhancements.

SeeYou is a comprehensive real-time global intelligence platform that visualizes live data from over 25 public APIs on a dynamic 3D globe built with CesiumJS. Its primary use case includes tracking and analyzing diverse phenomena such as aircraft, satellites, earthquakes, wildfires, and cyber threats, with advanced features like military-grade shaders, predictive modeling for aircraft trajectories, and a wide array of intelligence layers. The platform operates entirely locally, requires no paid services, and offers multiple live data overlays to provide an integrated view of various global events and activities.

The Surveillance Capabilities Map is an interactive visualization tool that maps police surveillance capabilities across the United States, aggregating data from various authoritative sources, including the EFF Atlas of Surveillance and federal contracts. Key features include technology filtering across 19 surveillance categories, a search function by location or agency, and the ability to export raw data in CSV format. Additionally, users can visualize FBI and DHS aircraft flight paths, enhancing the understanding of surveillance operations at specific locales.

Sherlock-rs is a Rust-based tool designed to hunt down social media accounts by a specified username across over 400 social networks. It provides features such as outputting results to text, CSV, or Excel files, supports proxy usage, customizable site analysis, and extensive debugging options, making it ideal for users needing comprehensive username availability checks across multiple platforms.

OpenFire AdminFinder is a legacy Perl utility for discovering common administrative login paths on web applications developed in ASP, CFM, PHP, or Java. It analyzes responses for login-form indicators but does not bypass authentication or confirm vulnerabilities, necessitating manual verification of results. Designed for ethical penetration testing, it requires explicit permissions to run and should be used with caution due to potential false positives.

AgileDevirtualizer is a specialized tool designed to reverse the method virtualization applied by Agile.NET, converting virtualized bytecode back into standard CIL format without relying on hardcoded opcode tables. Its primary use case is for security research, allowing analysts to recover the original method bodies from protected assemblies by interpreting the unique opcode mappings generated per build. Notable features include runtime analysis of the method's virtualized logic, structural identification of handler types, and a comprehensive process of control-flow graph generation and dead-code elimination, making it robust against variations in Agile.NET's protection mechanisms.

The OSINT Roadmap is a structured educational resource designed to guide users through the principles and practices of Open Source Intelligence (OSINT) in an ethical and professional manner. It provides a comprehensive learning path that covers core skills such as source verification, documentation, and reporting, while also offering practical case studies for learners ranging from beginners to advanced practitioners. Notable features include detailed workflows, an emphasis on legal boundaries, and a focus on real-world application in fields like cybersecurity and digital forensics.

Overcast is a Video OSINT agent designed to enhance investigative capabilities by organizing data from video sources into a case-specific directory, allowing users to analyze footage for citing evidence. It features modular CLI commands that facilitate various types of analysis, including audio transcription, video content understanding, object recognition, and person identification, while ensuring that results persist across sessions for cumulative intelligence. The tool is notable for its flexibility, allowing integration with different backend services and customizable workflows, while emphasizing responsible use in compliance with legal constraints.

DEEP STATE is an open-source submarine intelligence map that leverages public OSINT data to visually represent the positions and statuses of 292 submarines from over 30 navies. Key features include an interactive flat map and a 3D globe showing real-time positions, automated OSINT feeds for updates, and detailed submarine specifications sortable by type and nation. The tool is bilingual (French/English) and enables users to track nuclear deployment levels while providing a comprehensive comparison of global submarine fleets.

x-tweet-fetcher is a tool designed for retrieving tweets, replies, timelines, and articles from X/Twitter without requiring login or API keys. Its primary use case involves fetching data efficiently through three backend options—FxTwitter for single tweets, Nitter for timelines, and a browser driver for comprehensive user interaction—automatically switching between them as needed. Notable features include monitoring for mentions, archiving query results in a SQLite database, and flexible output formats, allowing users to adapt data retrieval for various AI applications.

IDOR-Auto is an advanced testing tool designed specifically to identify Broken Object-Level Authorization (BOLA) or Insecure Direct Object Reference (IDOR) vulnerabilities by employing differential access testing rather than relying on simple HTTP status codes. It distinguishes itself by utilizing multiple identity responses to determine if one user can access another user's data, while effectively minimizing false positives through robust response comparison, identifier analysis, and support for various input formats. Key features include canary detection, injection point flexibility, identification of encoded IDs, method tampering, and direct raw request importation, making it suitable for authorized security testing in penetration tests and bug bounties.

The Analyst-Tool is a Python-based scripting tool designed to automate digital investigation and intelligence gathering across various indicators such as domains, URLs, IP addresses, and hashes. Notable features include concurrent lookups from multiple security services, result caching for efficient API usage, multi-user tracking, and the ability to annotate and tag indicators for collaborative work. The tool emphasizes passive data retrieval, ensuring that no new data is added to the monitored services during investigations.

malsnitch is a command-line tool designed to assist malware reverse engineering by scanning various artifact formats for embedded secrets within binaries. Its notable features include the ability to detect hardcoded credentials, C2 infrastructure, and crypto keys in binary files, with support for multiple input formats such as raw strings dumps, FLOSS JSON output, and Binary Ninja exports. The tool also offers structured JSON output, automatic deduplication, and the capability to scan memory dumps, making it an efficient resource in identifying obscured sensitive information utilized by malware authors.

phishtank-lookup is a web API that leverages the hourly public dump from Phishtank, facilitating queries against a Redis database of valid phishing URLs. Key features include automatic updates every hour, a straightforward installation process, and access to a web interface for API interaction, which enhances phishing detection capabilities by providing quick access to real-time data on known malicious sites.

Kryon is an autonomous, local-first cybersecurity agent designed for comprehensive offensive security tasks including compliance audits, penetration testing, vulnerability hunting, digital forensics, and incident response from a single command. It features a skill-based architecture that dynamically loads over 110 playbooks and employs deterministic pre-hooks for critical detections, ensuring that it provides both a thorough assessment and actionable outputs without reliance on external APIs. Additionally, it supports a wide range of compliance frameworks across multiple sectors, making it adaptable for various organizational needs.

AttackGen is an advanced incident response testing tool designed for cybersecurity professionals, utilizing large language models and the MITRE ATT&CK and ATLAS frameworks to generate customized incident response scenarios. Key features include tailored scenarios based on threat actor groups, organization-specific parameters, a chat-based assistant for scenario updates, and integration with multiple AI APIs for enhanced scenario generation. It also provides user feedback mechanisms and downloadable scenarios in Markdown format, facilitating effective training and assessment of incident response capabilities.

Exploratores is a modular OSINT toolkit designed for investigative workflows, providing curated search tools for people, domains, images, and social platforms, as well as utilities like a browser-side PII Redactor and an embedded CyberChef for data analysis. Its notable features include a fully responsive layout, privacy-conscious mechanisms that ensure no data leaves the user's machine, and support for multi-country IBAN verification. The toolkit operates entirely in modern web browsers without backend dependencies, allowing for versatile, secure, and efficient open-source intelligence gathering.

Malware Research Hub is a comprehensive local platform designed for malware intelligence, featuring a curated forensic catalog with 2,699 live specimens and a proprietary search engine. Its primary use case is to provide researchers and cybersecurity professionals with an extensive, accessible repository of real malware samples indexed by family and type, while ensuring safety through encrypted storage and a containment-focused design. Notable features include a detailed forensic catalog, an automatic specimen downloader, and a bilingual interface for enhanced usability.

Omnichron is a TypeScript-based tool that provides a unified interface for querying various web archive services, including the Wayback Machine and Common Crawl, through a consistent API. Its notable features include support for multiple providers, built-in caching, dynamic imports for tree-shaking, parallel query execution with retry and timeout settings, and comprehensive TypeScript definitions for type safety. Users can easily configure provider settings and handle errors effectively when retrieving archived snapshots.

OwlTrack is a multifaceted tracking tool designed for investigation purposes, capable of gathering detailed information about phone numbers, email addresses, and IP addresses using various scanning methods. Key features include phone number identification with location data, email validation and finding capabilities, and a DDoS attack option for stress testing websites. Built with Python, Bash, and JavaScript, it operates on platforms including Android and Linux, catering to diverse cybersecurity needs.

Vesper is a high-performance OSINT username scanner designed to investigate user profiles across over 2000 social networks and websites. Built in Rust, it offers features such as asynchronous scanning, Tor proxy support for privacy, automated screenshots of found profiles, and comprehensive reporting options including JSON and CSV formats. Its professional CLI provides real-time progress tracking, allowing users to efficiently gather and analyze online presence information.

url.vet is an open-source phishing detection engine that evaluates URLs and domains in real-time, providing a trust score, verdict, and comprehensive security report with live page previews. Notable features include 18 concurrent analyzers, 33 signals analyzed for trustworthiness, detailed explanations for each verdict, and integration capabilities with a REST API and Chrome extension. This tool serves as a self-hostable alternative to established platforms like VirusTotal, offering detailed insights without relying on opaque machine learning processes.

SentinelDeck is a passive attack-surface assessment tool designed for small businesses, agencies, and security consultants, which evaluates the public-facing posture of a specified domain or IP without intrusive scanning. It generates a risk score, provides an A to F grade, and offers prioritized findings along with actionable remediation steps. Key features include easy installation via pip, command-line scanning, and an interactive web dashboard for visualizing results.

BlueMagic-Multitool is a comprehensive suite designed for malicious activities on platforms by providing functionalities such as token nuking, webhook management, and server manipulation. It includes features like automated account spamming, server deletion, and token brute-forcing, as well as tools for generating various credentials and identity manipulation. This tool is strictly outlined for educational use but possesses significant capabilities for exploitation if employed with malicious intent.

D0x-K1t-v2 is a portable web application designed for active reconnaissance, information gathering, and Open Source Intelligence (OSINT) tasks. Its notable features include a user-friendly Bootstrap-based admin dashboard, capabilities for saving data in a database, and tools for conducting WhoIs lookups, phone scans, port checks, and GeoIP lookups. The tool is designed for ease of installation and deployment on various platforms, including serverless environments.

ATLAS is a comprehensive open dataset that maps all known data center locations globally, encompassing 18,110 facilities across 116 countries and 4,181 operators. Primarily designed for research and publication purposes, the tool allows users to explore data centers with GPS coordinates and provides access to a live map interface. Notable features include extensive categorization of data centers by country and operator, making it a valuable resource for understanding the infrastructure of the internet.

ODINT (Observatory for Digital Infrastructure & Network Transparency) is an independent, decentralized platform focused on auditing publicly accessible government digital infrastructure through open-source intelligence (OSINT) methodologies. It facilitates collaborative research, encouraging contributions of domain data, investigative leads, and methodologies to enhance accountability and expose vulnerabilities in governmental digital systems. Notable features include an organized repository structure for cyber reconnaissance and a dedicated Recon Suite powering its operations with various OSINT tools.

SentryPeer is a fraud detection tool designed to protect SIP servers from malicious activity by tracking and logging attempts to make phone calls from bad actors. Its primary use case involves monitoring outbound calls from VoIP PBXs to notify users of potentially harmful interactions based on an extensive database of probing phone numbers. Notable features include a RESTful API for easy integration, real-time notifications to service providers, and support for Syslog and Fail2ban for enhanced security logging and management.

PWN is an open-source Ruby toolkit designed for offensive security automation, integrating various tools used in OSINT, network scanning, and vulnerability testing within a single workspace. Its primary use case is to streamline red teaming and pentesting efforts by providing a unified framework that supports automation through a tool-calling AI agent and a flexible plugin architecture. Notable features include 66 plugins, support for multiple LLM engines, and a feedback loop system that learns from previous mistakes, enhancing the efficiency of security assessments.

x-cli is a command-line tool designed for retrieving and reading data from X (Twitter) without requiring any authentication or a paid API. It enables users to access tweets, user profiles, timelines, and media through a local SQLite store, strictly in a read-only manner. Key features include a pure Go implementation, built-in shell completion, and the ability to execute multiple commands efficiently, leveraging different tiers of X's public data surfaces for seamless interaction.

The Noimosiny Python SDK is a client library designed to interact with the Noimosiny API, which specializes in OSINT and reverse-lookups. Its primary use case includes performing reverse email lookups to retrieve associated social media profiles and online records while managing account credit balances for API usage. Notable features include session management via a context manager, simplified method calls for API interactions, and built-in rate limiting for request handling.

The Black Tiger is an advanced OSINT (Open Source Intelligence) tool designed to automate the collection and organization of information across various domains, including people, social networks, emails, phone numbers, web pages, public IPs, and images. Its key features include a comprehensive suite for web page and domain analysis, social media profile exploration, and detailed metadata extraction for images and videos, all accessible with minimal user interaction. The tool also offers specialized search capabilities for verifying email existence and identifying information from public records.

Assayo is a tool designed for generating detailed HTML reports that analyze git commit statistics, providing insights into work pace, overtime, team dynamics, and project costs. Notable features include the ability to evaluate developer location, release schedules, employee turnover rates, and areas in need of refactoring. The tool can be utilized through various programming libraries, allowing for flexibility in implementation within different environments.

Tautulli Optimizer Studio is a comprehensive management toolkit designed to enhance productivity through features such as Gantt charts, resource allocation, and progress reporting. Its primary use case is in team collaboration, offering real-time editing, comments, and role-based sharing to facilitate project management. Notable features include smart organization with templates and tags, as well as workflow automation for repetitive tasks, making it an efficient tool for optimizing project workflows.

IOCX is a deterministic static IOC extraction engine designed for modern security pipelines, specifically focusing on malware analysis and incident response. It ensures zero execution risk by performing pure static analysis on Portable Executable (PE) files, delivering stable and reproducible outputs while effectively handling adversarial input. Key features include a binary-aware parser, high-performance extraction, and compatibility with CI/CD environments, positioning IOCX as a reliable tool for automated threat detection and defense.

Elementor Extractor is a Chrome extension that facilitates the extraction and reconstruction of Elementor page structures from live WordPress sites by analyzing the DOM. It generates two types of JSON outputs: one suitable for direct import as an Elementor template and another providing a detailed technical report of all extracted elements, assets, and configurations. Notable features include comprehensive asset detection, extraction of over 30 widget types, and the ability to map Elementor-specific settings and structures for developers and content migrators.

Awesome Reverse Engineering & Malware Analysis is a comprehensive resource that serves as a curated guide for reverse engineering and malware analysis tools, methodologies, and educational content. It categorizes entries across various disciplines such as static and dynamic analysis, exploit development, and digital forensics while providing quality assurance by checking all links and content for relevance. Notable features include structured learning tracks for different areas of focus, detailed tagging for easy navigation, and inclusion of community resources to enhance collaboration and knowledge sharing.

Awesome Crypto Tools Directory is a comprehensive, curated resource designed for traders, DeFi users, and compliance professionals to efficiently compare and utilize various cryptocurrency and blockchain tools. It categorizes tools across multiple domains such as exchanges, wallets, DeFi protocols, and compliance solutions, allowing users to make informed decisions with detailed feature scores and rankings. Notable features include a broad index for trading, investing, security, research, and building resources, tailored to enhance user accessibility and decision-making in the crypto space.

git2mail is an OSINT tool designed to efficiently find developers' email addresses from GitHub repositories and profiles by scraping commit metadata via the GitHub API. It supports both single and multi-token authentication for rapid bulk reconnaissance, allowing for the analysis of large repositories in under a minute. Notable features include support for a variety of repository and profile URL formats, high-performance data retrieval, and customizable token management for extensive scraping capabilities.

lol_monitor is a sophisticated tool designed for real-time tracking of League of Legends (LoL) players' activities, offering detailed statistics such as match outcomes, champion performance, and team dynamics. Key features include customizable HTML-formatted email notifications for various gaming events, CSV export of gaming activities, and extensive configuration options supporting multiple methods for customization. This tool is particularly suited for users seeking to analyze and monitor gaming performance actively while maintaining flexibility through various integration options.

xbox_monitor is a real-time monitoring tool for Xbox Live player activities, enabling users to track online status, game play history, and comprehensive player statistics. Key features include detection of gaming activity even for users with an "Appear Offline" status, email notifications for status changes, and the ability to log user activity into CSV files. The tool offers extensive user information displays and supports various configuration methods, allowing for customizable monitoring experiences.

urlX is a high-performance reconnaissance tool designed for bug bounty hunters, penetration testers, and security researchers. It facilitates passive URL discovery from over 11 intelligence sources, live host probing, and active web crawling, while utilizing Go routines for fast and concurrent processing. Notable features include smart file and extension filtering, minimal setup requirements, and support for enhancing results with optional API keys from various providers.

GooFuzz is a Bash script that leverages Google Dorking techniques to extract sensitive information from files or directories without directly querying web servers. Its primary use case is to assist cybersecurity professionals in discovering vulnerabilities and exposed data by utilizing search engine capabilities. Notable features include support for custom search parameters, integration with Google APIs for enhanced searching, and the ability to output results in various formats.

MagicRecon is a comprehensive reconnaissance tool designed to enhance the data collection process for cybersecurity assessments. It facilitates both passive and active reconnaissance, enabling users to enumerate subdomains, analyze vulnerabilities, gather DNS and WHOIS information, and perform scans for common security flaws. Notable features include organized result storage, integration with tools for extensive vulnerability analysis, and robust scanning capabilities for various entry points and technologies used in target domains.

OpenCog is an experimental framework designed for researching and integrating various AI algorithms, primarily within humanoid robotic systems. It includes components for natural language processing, common-sense reasoning, and control mechanisms for embodied chatbots, offering tools such as Ghost—an advanced conversational agent—and OpenPsi, which models psychological states for action planning. Although the repository is no longer maintained, it serves as a historical collection of AI components and strategies aimed at developing artificial general intelligence (AGI).

Pip-Intel is an OSINT and cyber intelligence gathering tool that integrates multiple open-source resources into an intuitive interface, enhancing the data collection and analysis workflow for cybersecurity professionals. It enables the collection of detailed information from a variety of input sources such as email addresses, phone numbers, IP addresses, and social media, while offering functionalities like geolocation, user analysis, and dark web searches. Its reliance on Python-written pip packages allows for streamlined gathering of intelligence across diverse data points.

XRCross is a reconnaissance and penetration testing tool designed for identifying various web vulnerabilities including XSS, SSRF, CORS, SSTI, IDOR, RCE, LFI, and SQLI. Notable features include URL and subdomain enumeration, AWS bucket enumeration, and support for various test parameters, such as command injection and redirection checks. The tool is implemented in Bash and offers a flexible command-line interface with numerous options for detailed vulnerability assessment.

Datasploit is an open-source OSINT (Open Source Intelligence) tool designed to gather and consolidate information on targets such as domains, emails, usernames, and phone numbers from various sources. It features automated enumeration of credentials, API keys, subdomains, and more, while providing options to generate structured reports in HTML, JSON, and text formats, making it a valuable resource for security professionals and researchers.

DroidBot is a lightweight input generation tool for Android applications that enables automated testing by sending random or scripted input events, thus enhancing test coverage. It uniquely supports UI-driven event modeling without the need for system modifications or app instrumentation, producing a UI transition graph for detailed analysis. Notable features include programmability for custom inputs, compatibility with multiple devices, and support for generating human-like interactions through integration with Humanoid.

email2phonenumber is an OSINT tool designed to extract a target's phone number using just their email address, leveraging weaknesses in password reset functionalities across various websites. It offers three key capabilities: scraping for phone number digits, generating valid phone numbers based on known formats, and brute-forcing password resets to associate phone numbers with an email. This tool serves as a proof-of-concept for new OSINT methodologies but requires caution due to ethical considerations and evolving website protections.

The Moriarty Project is a web-based phone number investigation tool that facilitates the identification of phone number owners, assesses spam risk, and gathers associated information from social media platforms. With features that allow users to search for comments and links related to the given number, it aims to assist in digital investigations without supporting any intrusive actions such as tracking or hacking. Notably, it offers a customizable feature set and focuses solely on investigative purposes rather than mobile compatibility.

NExfil is a Python-based OSINT tool designed for rapid retrieval of social media profiles associated with specific usernames across over 350 platforms in under 20 seconds. Notable features include batch processing for multiple usernames, results saving in text files, and planned support for JSON and CSV formats, as well as proxy and Tor integration.

The OSINT tool is a Python package designed for building custom Open Source Intelligence applications and APIs. It features various reconnaissance modules, including DNS lookups, web scraping, and port scanning, and is capable of storing and visualizing results in a built-in database. Users can generate JSON outputs for seamless integration with other projects, facilitating efficient data analysis and insights.

Photon is a high-performance web crawler designed specifically for Open Source Intelligence (OSINT) purposes. It excels at extracting a variety of data types—including URLs, emails, social media accounts, files, and secret keys—while offering extensive customization options for crawls, such as timeout control and regex URL exclusions. Notable features include smart thread management, support for plugins, and a simple deployment via a lightweight Docker image.

POCKINT is a portable OSINT tool designed for digital forensics and incident response professionals, facilitating efficient data mining of indicators such as URLs, IPs, and MD5s through an intuitive GUI. Its notable features include simplicity, portability, and powerful integration with various OSINT sources and APIs for enhanced data analysis capabilities. With a focus on providing essential functionalities without the complexity of traditional command line tools, POCKINT allows users to quickly perform iterative searches and gather intelligence.

ReconSpider is an advanced Open Source Intelligence (OSINT) framework designed for comprehensive scanning of IP addresses, emails, websites, and organizations to gather detailed information from diverse sources. Primarily utilized by infosec researchers, penetration testers, and cyber crime investigators, it consolidates and visualizes raw data on a dashboard while enabling automated OSINT operations through a command-line interface. Notably, ReconSpider integrates functionalities from popular tools like Wave, Photon, and Recon Dog to enhance its attack surface enumeration capabilities.

SARENKA is an Open Source Intelligence (OSINT) tool designed for gathering and analyzing data related to the attack surface of Internet-connected devices. It aggregates information from various search engines like Censys, Shodan, and Criminal IP, providing insights on Common Vulnerabilities and Exposures (CVEs) and Common Weakness Enumeration (CWE). Notable features include local software inventory from Windows Registry, network information retrieval, a hash and Shannon entropy calculator, and a basic port scanner, with additional reconnaissance tools planned for future releases.

SpiderFoot is an open-source intelligence (OSINT) automation tool designed for comprehensive reconnaissance and data analysis across a wide array of entities such as domains, IP addresses, and personal information. Notable features include over 200 modules for extensive data extraction, both a web-based interface and command-line usage, integration with other cybersecurity tools, and advanced configurations via a YAML-based correlation engine. It supports data exports in multiple formats and offers visualization tools, making it suitable for both offensive and defensive security operations.

ThreatIngestor is an extendable tool designed to extract and aggregate Indicators of Compromise (IOCs) from various threat feeds, including Twitter, RSS, and custom web sources. It features seamless integrations with ThreatKB and MISP, a plugin architecture for customizable input and output modules, and the ability to operate continuously, pulling data every 15 minutes. This makes it ideal for real-time threat intelligence analysis and automation within existing workflows.

Zeus-Scanner is an advanced reconnaissance tool designed for simplifying web application reconnaissance, featuring a robust URL parsing engine, compatibility with multiple search engines, and the ability to bypass IP blocks. It supports various vulnerability assessments, including XSS and SQL injection, while offering proxy and Tor compatibility, making it versatile for stealthy web scraping and security testing. Notable features include the ability to extract URLs from cached pages, parse robots.txt files, and utilize tamper scripts for payload obfuscation.

LHF (Low Hanging Fruit) is a modular reconnaissance tool designed for penetration testing, specifically tested on Kali Linux. It enables users to scan a single IP or domain at a time, generating comprehensive output in a designated results folder, including nmap and Arachni files. Notable features include the ability to extend functionality by adding new tools in the Modules folder, domain scanning capabilities, and plans for future enhancements such as IP range scanning and progress indicators.

Poastal is an email OSINT tool designed to extract critical information from any given email address. It offers features such as verifying the deliverability of the email, detecting disposable and spam accounts, and checking the registration status across numerous popular platforms. This tool is particularly useful for cybersecurity professionals conducting email investigations and reconnaissance.

Porch Pirate is an OSINT framework designed to conduct reconnaissance on publicly accessible Postman entities, enabling the extraction of sensitive information such as global secrets, unique headers, and endpoints. Its notable features include support for searching, dumping data from workspaces, and extracting URLs for further analysis, all while maintaining flexibility to adapt to varied search needs without being confined to predefined keywords. This tool enhances the efficacy of reviewing Postman assets by providing a simple command-line interface for extensive data enumeration.

socialscan is a high-performance tool designed for accurate checks of email address and username availability across various online platforms. Utilizing asynchronous querying methods via asyncio and aiohttp, it ensures 100% accuracy while executing bulk queries rapidly, making it suitable for both individual and large-scale checks. The tool supports both email and username queries, can be utilized through a command-line interface or as a Python library, and includes a wide range of platforms for comprehensive user availability assessments.

X-Recon is a reconnaissance tool designed to identify web page inputs and perform XSS vulnerability scanning by extracting forms and links from websites. Key features include subdomain discovery, comprehensive link extraction, and the generation of JSON outputs to facilitate XSS testing, though it is currently optimized for PHP-based applications rather than Single Page Applications. The tool also allows users to customize which file types to skip during exploration, enhancing its adaptability for various scanning needs.

The `osint-geo-extractor` library facilitates the extraction of geo-related information from various databases, making it particularly useful for OSINT (Open Source Intelligence) applications. It provides functions to retrieve data from sources like Bellingcat, GeoConfirmed, and Texty.org.ua, returning event information as structured `Event` objects, which can be exported to GeoJSON format for further analysis. Notable features include convenient access to multiple data sources and sample usage examples to streamline implementation.

HawkScan is a Python-based security tool designed for reconnaissance and information gathering on websites. Its primary use case includes gathering header information, DNS data, CMS detection, and identifying potential vulnerabilities during both pre-scan and scan phases. Notable features include capabilities for multi-site scanning, WAF detection, S3 bucket identification, and various output formats, along with support for proxies and automatic resuming of interrupted scans.

OWASP Maryam is a modular open-source framework designed for open-source intelligence (OSINT) and data gathering, enabling users to efficiently harvest data from various online sources and search engines. Key features include support for multi-threading, a wide array of search modules (like DNS search, YouTube, and Google), and customizable options for timeout and proxy settings. This framework allows for extensibility, facilitating the addition of new search engines and modules by developers.

SyntheticSun is a comprehensive security automation and monitoring framework designed to provide defense-in-depth by leveraging threat intelligence, machine learning, and serverless AWS technologies. Its primary use case involves continuous threat prevention, detection, and response through real-time analysis and correlation of security telemetry, facilitated by advanced algorithms such as Random Cut Forests for anomaly detection. Notable features include dynamic updates to AWS WAFv2 and GuardDuty, extensive ETL capabilities, and the integration of community-driven threat intelligence platforms for enhanced situational awareness.

**waymore** is a Python-based tool designed to extract and download archived URLs from the Wayback Machine and multiple other sources, including Common Crawl, URLScan, and Virus Total. Its primary use case is to aid bug bounty hunters and security researchers in gathering extensive link information, while its notable feature is the ability to download and analyze archived responses for further insights, all while managing rate limiting to provide comprehensive results.

Awesome Artificial Intelligence is a curated collection of high-quality resources aimed at software developers who seek to learn, build, and deploy generative AI and agentic systems. The repository emphasizes technical depth and practical application, offering valuable materials such as books and courses that cover foundational AI concepts, coding agents, and production workflows. Notably, it features an active curation process that ensures the relevance and quality of included resources.

Cloudgazer is an OSINT tool designed to uncover real IP addresses that are concealed behind Cloudflare using the Criminal IP API. Its primary use case is for cybersecurity professionals seeking to identify the real server behind a Cloudflare-protected domain, enhancing threat investigation capabilities. Notable features include integration with the Criminal IP API and the ability to perform DNS lookups to resolve obfuscated IP addresses.

PANO is an OSINT investigation platform designed for uncovering hidden connections and patterns through advanced data analysis. Its primary use case involves interactive graph visualization, timeline analysis, and an AI-powered assistant for efficient entity extraction and relationship mapping. Notable features include support for multiple entity types, dynamic relationship mapping, and integrated map visualization for geographic data analysis.

PEGASUS-NEO is an advanced penetration testing framework that integrates a variety of security tools and custom modules aimed at aiding security professionals and ethical hackers in their assessments. Its primary use case includes reconnaissance, exploitation, and web hacking, supported by notable features such as automated exploitation, vulnerability scanning, and social engineering tools. The framework also provides functionalities for wireless attacks, code scanning, and forensic analysis, making it a comprehensive solution for penetration testing.

SwaggerSpy is a tool that automates Open Source Intelligence (OSINT) gathering from APIs documented on SwaggerHub, aimed at enhancing security for developers and organizations. It specifically scans API documentation for sensitive information such as credentials and secrets using regular expressions, helping to identify potential security vulnerabilities and enforce best practices. Notable features include its ability to proactively prevent data leaks and support compliance measures within the API development lifecycle.

Vuln-Bot is a high-risk CVE intelligence platform designed to track and analyze critical and high-severity vulnerabilities with a probability of exploitation (EPSS) of 60% or higher. It automatically harvests and publishes vulnerability briefings every four hours, leveraging multiple authoritative data sources, including the CVEProject repository, and features advanced filtering, risk scoring, and interactive visualizations on an Alpine.js dashboard. Notable capabilities include mobile-first design, incremental harvesting for faster updates, and a robust CI/CD pipeline for security assurance.

Hunch is a modular predictive policing and threat aggregation tool that leverages Natural Language Processing and Open Source Intelligence to generate actionable insights, such as signals and risk levels, based on social media data. It supports multiple source collectors, including Twitter, Instagram, Tumblr, and Reddit, and employs advanced NLP techniques for text analysis, enabling users to assess criminal indicators related to specific individuals or entities. Key features include customizable data collection, sentiment analysis, and risk assessment methodologies that can be applied to gathered content.

CrewAI is an open-source Python framework designed for building production-ready multi-agent workflows, offering high-level abstractions and low-level APIs to facilitate autonomous agent collaboration through its Crews and event-driven automation via Flows. Notable features include role-based AI agent optimization, precise workflow control, real-time observability, seamless integrations with enterprise systems, and robust security measures. It also provides a managed control plane for organizations requiring comprehensive deployment governance and support.

Gitem is a reconnaissance tool designed for gathering comprehensive information about GitHub organizations, repositories, and users, facilitating various use cases such as OSINT and competitive analysis. Notable features include detailed output on organizational and repository metrics, user contributions, and the ability to perform queries at varying levels of granularity, with options for verbosity and parallel processing capabilities. The tool can be easily installed via pip and offers command-line interface functionality for straightforward usage.

gitrecon is an OSINT tool designed to extract information from GitHub and GitLab profiles, specifically targeting leaked email addresses in commits. Its notable features include the ability to retrieve GitHub and GitLab profile details, SSH keys, and visually download user avatars while facilitating the saving of results in organized directories. The tool emphasizes user privacy by providing configuration instructions to help mitigate email exposure during repository activities.

iNTERCEPT is a versatile Signal Intelligence Platform designed for software-defined radio tools, facilitating real-time signal monitoring and decoding across various frequencies. It supports features such as aircraft and vessel tracking, weather satellite image decoding, and Bluetooth scanning, making it valuable for both hobbyist and professional applications in the fields of surveillance and data collection. The platform includes a user-friendly web interface, remote sensor node integration for distributed SIGINT, and offline capabilities for field use, enhancing its utility in diverse signal intelligence scenarios.

MiroFish is an advanced AI prediction engine that utilizes multi-agent technology to simulate a high-fidelity digital environment, allowing users to predict future scenarios by uploading seed data and specifying prediction requirements in natural language. It features a dynamic interaction of intelligent agents that evolve within this digital sandbox, enabling both serious decision-making and creative exploration without risk. The tool provides detailed prediction reports and serves as a rehearsal platform for policy testing and imaginative scenario development.

MULTIVAC is a system developed under DARPA's ASKE program aimed at automating the extraction and integration of scientific knowledge into a semantic knowledge graph for enhanced modeling applications. It specifically focuses on the domain of epidemiological research, utilizing a Generative Adversarial Network (GAN) to train an expert query generator that facilitates accelerated scientific exploration through the interpretation of existing models and data. Notably, the system incorporates a "human-in-the-loop" approach to ensure responsiveness to researchers' needs during its operation and training.

Amateur-SIGINT is a tool designed for blind reverse engineering of digital wireless protocols, enabling users to analyze and reconstruct signals without prior knowledge of the transmitter. Its primary use case is for enthusiasts engaged in signals intelligence, and it includes detailed documentation of both successful methods and challenges encountered during the process. Notable features include a comprehensive tutorial format and a focus on transparent experimentation, capturing errors alongside successes.

The "APIs For OSINT" repository provides a comprehensive collection of APIs designed to facilitate the automation of various tasks associated with Open Source Intelligence (OSINT). Its primary use case involves enabling users to perform tasks such as data lookup, verification, and analysis across multiple domains, including phone numbers, addresses, businesses, and social media. Notable features include a wide array of categorized APIs for IOT/IP search engines, domain lookups, reverse image searches, and various automation tools compatible with platforms like Google Sheets.

The repository "Open-source tools for CTI" serves as a comprehensive catalog of open-source resources tailored for Cyber Threat Intelligence (CTI) across strategic, operational, and tactical intelligence requirements. It organizes tools and information related to various aspects of CTI, including adversary intelligence, ransomware, data breaches, and threat hunting, facilitating effective decision-making at different organizational levels. Notable features include categorized resources and links to practical tools for immediate and long-term cybersecurity needs.

The "awesome-chatgpt" repository serves as a comprehensive directory of applications and tools leveraging OpenAI's ChatGPT, facilitating enhanced interactions through various platforms such as macOS, iOS, Android, and web applications. Notable features include a wide array of native apps, browser extensions, and CLI tools, along with seamless integration capabilities designed to enhance user experience across different environments. This catalog aims to streamline access to ChatGPT's functionalities while promoting innovative use cases within the community.

Awesome Recon Tools is a comprehensive catalog of resources for reconnaissance and footprinting, focusing specifically on domain and network information, personal data extraction, and leveraging search engines for reconnaissance. Notable features include a wide array of tools for domain ownership queries, network scanning, and OSINT (Open Source Intelligence) techniques, allowing users to effectively map and understand potential attack surfaces. The repository serves as a valuable reference for cybersecurity professionals and researchers conducting exploratory assessments.

Adana is an analytical dashboard designed for OSINT researchers to extract insights from social media posts, focusing on narratives, sentiments, influencers, and account clusters. It aids in the analysis of disinformation campaigns, public opinion, and related risks, featuring a user-friendly interface for data visualization and integration with advanced machine learning models for sentiment analysis and topic detection. The tool is accessible online and can be deployed privately, requiring minimal setup.

AnythingLLM is a versatile AI application designed for interactive document management and automation of complex workflows using AI Agents. Notable features include hyper-configurability, multi-user support, and a seamless local installation process with no setup requirements, making it ideal for businesses and teams looking to enhance productivity through AI-driven solutions.

GitRecon is an OSINT tool designed for comprehensive reconnaissance on GitHub and GitLab profiles, extracting sensitive information such as exposed email addresses, SSH keys, and organizational data. It features smart scanning to optimize API usage and prioritize active repositories, deep analysis capabilities for thorough investigation, and network mapping to visualize connections between users. The tool supports multiple output formats and is rate limit aware, ensuring effective performance during scans.

The OSINT Stuff Tool Collection is a comprehensive repository of over 1000 online tools and resources curated for various open-source intelligence (OSINT) purposes. It encompasses categories such as geolocation, social media analysis, domain/IP research, image identification, and more, serving as a valuable resource for automating and enhancing OSINT workflows. The collection is continuously updated to reflect the current state of available tools, while also highlighting obsolete options for reference.

CF-Hero is an advanced reconnaissance tool designed to uncover the true IP addresses of web applications shielded by Cloudflare. It integrates multiple intelligence-gathering techniques, utilizing data from sources such as ZoomEye, Censys, and Shodan, while performing DNS reconnaissance to identify and validate the origin IP addresses, thereby reducing false positives. Notable features include comprehensive DNS analysis, associated domain discovery, and ability to analyze both current and historical data.

dnxty is a command-line DNS TXT Record Extraction Utility that performs DNS lookups on domains to extract key/value pairs from TXT records, primarily utilized by OSINT analysts and security researchers. Notable features include automated extraction of common verification strings, multiple output formats (including JSON, YAML, and CSV), simplified output options, and advanced filtering capabilities, making it suitable for integration with other Linux command-line utilities.

Hakrawler is a fast web crawler written in Go, designed to gather URLs and JavaScript file locations efficiently. It allows users to crawl single or multiple URLs with options for including subdomains, setting connection timeouts, and sending requests through proxies, making it versatile for reconnaissance tasks in cybersecurity. Notable features include support for custom headers, output in JSON format, and a configurable crawling depth.

BigBountyRecon is a reconnaissance tool designed to facilitate the initial information gathering phase in penetration testing and bug hunting through the utilization of 58 techniques, including various Google dorks and open-source tools. Its primary use case is to quickly and efficiently discover sensitive information about a target organization, such as configurations, log files, and database structures, thereby aiding in assessing security maturity and identifying potential vulnerabilities. Notable features include the ability to automate the search for open directories, configuration files, and other sensitive assets, streamlining the reconnaissance process for security professionals.

Awesome Infosec is a curated collection of Information Security resources and tools designed to aid individuals in their studies and practices of cybersecurity. It encompasses various topics, including recon, web security, penetration testing, and exploit development, while also providing links to educational courses and labs. The continuously updated repository serves as a valuable resource for both beginners and experts in the field.

Mobile Heavy Artillery is a comprehensive toolkit designed for red teaming operations, facilitating reconnaissance, exploitation, and privilege escalation tasks. It includes a curated collection of open-source tools for network enumeration, web vulnerability assessment, secrets discovery, and OSINT activities, all easy to install and manage through a makefile. Notable features include a wide range of utilities for various cybersecurity processes, making it a versatile choice for penetration testers and security researchers.

AIO-Pentesting is a comprehensive resource for penetration testers, encapsulating various methodologies, tools, and commands necessary for conducting thorough security assessments. It categorizes content into phases, covering pre-intrusion and intrusion techniques for both Linux and Windows environments, along with additional materials such as notes for certifications like OSCP and OSWE. Notable features include organized documentation on common pentesting stages, forensics, and various exploitation techniques, as well as links to essential vulnerability databases and binary libraries.

The Archive is a continually evolving repository that curates hacking methodologies, cheatsheets, and conceptual breakdowns, specifically designed to be a human-curated alternative to the increasing reliance on LLMs. Its primary use case is to provide easily accessible, spell-checked information along with referenced content derived solely from clear-net sources. Notable features include the inclusion of alternative resources with descriptions, page differentiation for talk notes, and plans for future enhancements such as a public REST API for querying the data.

PentaDrone is an asynchronous PowerShell post-exploitation agent designed for red teaming and penetration testing, utilizing the Mitre Att&ck framework for automation through an autopilot mode. It allows security researchers to simulate HTTP loader-style botnets, facilitating malware research while providing extensive configurability for command-and-control server connections and agent behavior. Notable features include various persistence methods, USB spreading options, and customizable operational parameters.

awesome-cyber is a curated repository that aggregates a diverse range of cybersecurity tools catering to red, blue, and purple team operations. This resource aims to provide an up-to-date collection of tools across various cybersecurity domains, including offensive and defensive techniques, forensics, and incident response. Notable features include organized categories for easy navigation and an open invitation for community contributions to keep the toolset relevant.

PyADRecon is a Python-based tool designed for gathering comprehensive information from Microsoft Active Directory environments, catering to the needs of penetration testers and blue teams. It supports NTLM and Kerberos authentication methods, can generate XLSX reports, and offers an HTML dashboard for visualizing collected data, making it a versatile resource for Active Directory reconnaissance. Additionally, it provides options for standalone report generation from CSV files, enhancing its usability in various assessment scenarios.

The Agentic Threat Hunting Framework (ATHF) is a markdown-based tool that structures and preserves threat hunting investigations, enhancing their accessibility and utility through automation. It utilizes the LOCK pattern for documentation, providing a framework that integrates with any SIEM/EDR platform while incorporating AI-driven research and hypothesis generation capabilities. By retaining context and enabling AI assistants to leverage past hunts, ATHF aims to enrich and streamline the threat hunting process.

OpenRisk is an enterprise-grade risk management platform designed to streamline the identification, assessment, mitigation, and monitoring of IT and security risks through a scalable microservices architecture. Its key features include automated risk assessment, interactive real-time dashboards, and native integration with tools like Elastic and Splunk, making it suitable for CTOs, CISOs, and DevSecOps teams. With capabilities such as mitigation tracking and advanced analytics, OpenRisk enhances organizational risk oversight and compliance while enabling easy deployment via Docker and Kubernetes.

Darkelf is a comprehensive ecosystem that offers a suite of privacy-focused browsers and security tools for cybersecurity professionals, researchers, and privacy-conscious users. It features enterprise-grade browsing capabilities, AI-assisted analysis tools, OSINT utilities, and extensive documentation to support both users and developers in utilizing and contributing to its projects. Notable technologies include post-quantum cryptography readiness, anti-fingerprinting research, and local AI security analysis.

FinalThreatFeed is a high-performance automated threat intelligence aggregation engine designed for continuous collection and fusion of global open-source intelligence. Its architecture supports asynchronous operations to enhance data throughput, while features such as intelligent cleaning, deduplication, and full lifecycle management ensure high-quality, relevant threat data. The tool also offers flexible extension configurations and advanced IOC identification, making it suitable for enterprise security defense systems.

UTMStack is an open-source unified threat management platform that combines SIEM (Security Information and Event Management) and XDR (Extended Detection and Response) functionalities for real-time correlation of log data, threat intelligence, and malware activity patterns. Its notable features include advanced threat detection and response, log management, AI-powered analysis, and security compliance support, allowing organizations to effectively identify and mitigate complex threats efficiently. By enabling correlation prior to data ingestion, UTMStack enhances the overall threat prevention capabilities and response times within cybersecurity infrastructures.

Clawdstrike is a robust policy engine and endpoint detection and response (EDR) tool designed for advanced security management, featuring a signed audit chain that records a wide array of system events. It integrates seamlessly with diverse environments, offering a Rust crate, TypeScript SDK, Python package, and CLI functionality, while ensuring policy evaluations are both comprehensive and consistently audited. Notable features include support for varying platforms (macOS, Linux), a formal verification mechanism for policy consistency, and a fail-closed design principle that enhances security posture.

PCAP Hunter is an AI-enhanced threat hunting workbench designed for SOC analysts, enabling seamless integration of manual packet analysis with automated security monitoring. It features a user-centric interface for geographic flow aggregation, linked visual analysis, and a durable analysis workflow, while also providing optional Large Language Model assistance for enriched analysis. The tool supports visualization and investigation of packet captures through advanced filtering and responsive dashboard capabilities, ensuring comprehensive threat detection and evidence management.

Wildbox is a self-hosted, open-source security operations platform designed for comprehensive threat monitoring, analysis, and automated responses, allowing users to maintain full control over their data. It features aggregated threat intelligence from over 50 sources, cloud security posture management for major providers, and utilizes YAML-based playbooks for incident automation, alongside advanced LLM capabilities for enhanced threat analysis and reporting. The architecture is built on microservices, providing flexibility and scalability through a robust API gateway, identity management, and integrated data management tools.

Capa is an advanced tool designed to analyze executable files, specifically PE, ELF, .NET modules, and shellcode, by detecting their operational capabilities. It provides detailed insights into potential functionalities, such as backdoor activities and methods of communication, while allowing interactive exploration of results via a web interface. Notable features include the ability to respond to custom rules, integration with the MITRE ATT&CK framework, and multiple output options for comprehensive analysis.

Defensive Security Hub is a comprehensive repository designed to support Security Operations Center (SOC) analysts by providing a curated collection of resources, tools, and references across various cybersecurity domains. Its primary use case involves enhancing the capabilities of SOC teams through structured access to training materials, threat hunting tools, DFIR methodologies, and intelligence frameworks. Notable features include a well-organized repository structure with sections on training courses, articles, blogs, and various security tools, facilitating quick navigation and resource discovery.

The "Awesome Malware Analysis" repository is a curated collection of malware analysis tools and resources, aimed at facilitating comprehensive malware research and detection. It features a wide array of categories, including malware collections, detection tools, honeypots, and online scanners, providing users with diverse methodologies for malware investigation and analysis. Notable features include organization by specific use cases, such as memory forensics and deobfuscation, which enhance the accessibility of relevant resources for researchers and analysts in the cybersecurity domain.

IOC Finder is a tool designed to extract indicators of compromise (IOCs) such as URLs and email addresses from textual data. Its primary use case is enhancing threat detection and analysis by parsing relevant observables from various text sources. Notable features include interactive documentation and a focus on community support for ongoing improvements.

Lancelot is an Intel x86(-64) code analysis library designed to reconstruct control flow, facilitating detailed program analysis. It supports WebAssembly, enabling execution in browser environments, and includes a Zydis-based disassembler for enhanced disassembly capabilities. Notable features include integration with Cranelift for advanced code generation and the ability to create JavaScript bindings for easy deployment in Node.js and browser contexts.

Lenspect is a lightweight security threat scanner that utilizes VirusTotal to analyze potential threats. Its primary use case is to provide users with quick and efficient scans for security vulnerabilities within their systems. Notable features include support for installation via Flatpak and AppImage, providing accessibility across various Linux distributions, as well as a user-friendly interface for enhanced usability.

PacketSnitch is a network analysis tool that processes packet capture (.pcap) files, providing searchable, protocol-aware insights for security professionals and researchers. Its key features include an Electron-based frontend for interactive browsing and filtering of network traffic, GeoIP integration for location visualization, payload analysis, and support for various protocols. Additionally, it offers AI-generated summaries and a plugin engine for extended functionalities.

The Rust Malware Sample Gallery is a curated collection designed to assist malware reverse engineers by providing samples of malware written in the Rust programming language. Its primary use case is to enhance the understanding and skills necessary for reversing Rust binaries, particularly as malicious software in Rust becomes increasingly prevalent. Notable features include links to downloadable samples from reputable sources and technical writeups that explore various malware families, offering insights into their characteristics and behaviors.

ThreatIntel-Reports is a comprehensive repository designed for the extraction and search of content from numerous threat intelligence reports, enabling users to automatically gather data from various feeds. Its primary use case is to facilitate the exploration of threat intelligence through keyword-based searches in both a web interface and command-line interface, with capabilities to store results in JSON format for integration. Notable features include a custom search bar for predefined results and Python scripts that allow users to perform keyword searches and manage output flexibly.

Chase H.Q. is a reverse-engineered project for the ZX Spectrum, featuring a comprehensive disassembly and a C implementation of the original game. It utilizes SkoolKit to generate detailed assembly listings and includes a human-readable C reimplementation with SDL3 integration, allowing users to explore the game's mechanics through both disassembly and functional re-creation. Notable features include support for the 128K version, a well-structured Makefile, and the ability to create custom cheat codes via POKEs.

The Ioniq 5 CAN repository provides an open-source hardware retrofit kit designed to add preconditioning functionality to Hyundai Ioniq 5, 6, and EV6 vehicles by utilizing existing buttons in the car. Key features include the reverse-engineering of CAN messages for preconditioning, a microcontroller that sends these messages, and a user interface to activate or cancel preconditioning. The software and firmware are continuously developed to enhance the functionality and user experience while detailed documentation supports installation and operation.

ttd-capa is a capability extractor that works with Time Travel Debugging (TTD) traces to identify the capabilities exercised by a binary during its runtime execution. Designed to enhance the analysis of packed or obfuscated malware, it generates CAPA-compatible reports that allow for the extraction of runtime capabilities, leveraging full execution context and timestamp data for detailed analysis. Notable features include automatic resolution of string arguments, reconstruction of execution order, and integration with existing CAPA rule sets for comprehensive malware triage.

EtherBlob Explorer is a tool designed for the extraction and analysis of blob files from the Ethereum blockchain, leveraging the Etherscan API. It allows users to search for various human-generated data types across multiple Ethereum networks, using diverse methods such as embedded file detection, ASCII string extraction, and entropy-based searches. Notable features include support for five Ethereum test networks, user-defined search parameters, and the ability to log search results for further analysis.

The bug-bounty-tips repository provides a comprehensive collection of resources and tools tailored for bug bounty hunters. It includes a curated list of required scripts and tools like Amass, SQLMap, and Fuff, facilitating efficient reconnaissance and vulnerability assessment. The repository emphasizes community engagement through platforms like Telegram and Twitter, aiming to enhance knowledge sharing among cybersecurity professionals.

GrepAddr is a versatile command-line tool designed to extract a wide variety of address types from standard input, including URLs, IP addresses, e-mail addresses, and MAC addresses, utilizing regular expressions for processing. Its primary use case is for penetration testing and bug bounty hunting, where users need to quickly identify multiple address formats in data streams. Key features include support for filtering by address type, options to reduce false positives, and the ability to save results in CSV format, making it a comprehensive solution compared to similar tools that focus on single address types.

The TryHackMe_Writeups repository contains comprehensive writeups for various PwnBoxes and Rooms hosted on TryHackMe, aimed at assisting users in understanding the solutions to the challenges. Its primary use case is to provide guidance for users who may be struggling with specific tasks, while encouraging independent problem-solving. Notable features include a collection of detailed solutions that include flags and answers, structured to facilitate learning in cybersecurity challenges.

The TryHackMe - Hackers Learning Path repository provides a structured framework for beginners in cybersecurity to learn and practice through a series of rooms and hands-on exercises. Key features include an automated environment setup script, instructional content covering foundational topics like Linux, networking, and various security tools (e.g., Nmap, Burp Suite, Metasploit), and practical penetration testing exercises to simulate real-world attacks. This resource is designed to guide users incrementally from introductory levels to more advanced cybersecurity skills.

Zero-Setup is a Bash script designed to automate the installation of essential tools and software for cybersecurity professionals, facilitating the rapid configuration of a hacking environment with a single command. It categorizes various utilities, including cryptography, OSINT, steganography, and digital forensics tools, streamlining the setup process while ensuring comprehensive coverage of necessary resources for penetration testing and security analysis. Notable features include easy installation steps and a structured approach to organizing tools based on their respective domains.

The CTF Resources repository is a comprehensive collection of cybersecurity tools and practice platforms specifically designed for Capture the Flag (CTF) competitions. It includes an extensive array of tools categorized into areas such as Open Source Intelligence (OSINT), steganography, and anonymous communication, offering functionalities from data gathering and analysis to secure and anonymous internet browsing. Notable features include links to various open-source tools, detailed descriptions, and categorization for ease of use, supporting users in enhancing their digital security skills.

HackGurat is a cybersecurity resource platform that offers a wide array of expertise in fields such as web security, cryptography, reverse engineering, and more. It features educational platforms and useful links for further learning, alongside a section for write-ups and PDF resources, facilitating both skill development and practical understanding in cybersecurity. The tool aims to be a comprehensive hub for cybersecurity professionals and enthusiasts to enhance their knowledge and skills through curated content and resources.

TryHackMe is a free cybersecurity learning path designed to advance users from novice to expert through a range of practical exercises, introductory Capture The Flag (CTF) challenges, and educational modules covering topics like OpenVPN, Linux fundamentals, web scanning, and Metasploit. This resource is suitable for both newcomers to the field and those looking to enhance their skills, and it culminates in a comprehensive foundation in cybersecurity, preparing users to address more complex challenges. Notable features include diverse content formats, hands-on labs, and accessible learning materials to foster practical experience in cybersecurity practices.

CTF Tools is a curated repository that aggregates a variety of resources, websites, and tools specifically designed to assist in solving Capture The Flag (CTF) challenges. It organizes tools by category, providing practical links ranging from ASCII tables to cryptographic calculators, thus serving as a quick reference resource for CTF participants and teams during competitions. Notable features include a wide assortment of utility tools for cryptography, data conversion, and training resources, as well as guidelines for collaborative contributions to the repository.

CTF Helper is a multifunctional tool designed for Capture The Flag (CTF) competitions and various cybersecurity tasks. It features capabilities for decoding data formats such as Base64 and hex, JWT decoding and brute-forcing, web exploit utilities, and OSINT tools for geolocation and Shodan lookups, all built with modularity and extensibility in mind. This tool serves as a comprehensive resource for security professionals engaging in threat analysis and live security challenges.

MrEchoFi is a cybersecurity toolset designed for DevSecOps, penetration testing, and hardware security assessments. It features a variety of tools aimed at enhancing digital security, including devices for forensic analysis, DDoS simulations, and phishing detection. Notably, it emphasizes a multifaceted approach to cybersecurity, incorporating modern scripting languages and methodology for innovative solutions.

The Ai-Prompts tool serves as a comprehensive cheat sheet for crafting effective search queries aimed at enhancing information retrieval from AI models like GPT. Its primary use case lies in optimizing search accuracy and refining results based on specific parameters, such as keywords, sources, and recency. Notable features include customizable options for output formats, technical depth, and automated summarization, enabling users to tailor searches for precise and actionable information in various contexts.

The Bug Bounty repository serves as a comprehensive resource for security researchers engaged in vulnerability discovery and reporting, aggregating tools, checklists, and cheat sheets to streamline the bug hunting process. Key features include curated lists of bug bounty programs, essential tools, and educational resources, enhancing the usability and effectiveness of cybersecurity efforts. This tool is designed to aid both novice and experienced bug bounty hunters in their pursuits.

The Bug Bounty Beginner Roadmap serves as a comprehensive guide for newcomers interested in bug bounty hunting, providing essential knowledge on security vulnerabilities and effective learning paths. It emphasizes the importance of foundational skills in computer systems, networking, and operating systems, while also highlighting the potential rewards of participating in bug bounty programs. Notable features include curated resources and links to courses tailored for building the necessary expertise in this evolving field.

COLI (Command Orchestration & Logic Interface) is a command line tool designed to streamline workflow management by enabling users to visually create and connect tasks through a drag-and-drop interface. It offers features such as real-time scan monitoring, an interactive web terminal, and a built-in file explorer, making it ideal for those seeking a more efficient way to manage command line operations and enhance visualization. Additionally, COLI supports mobile access, allowing users to operate workflows from anywhere.

Elite Google Dorks Search by Biscuit is a curated set of advanced Google search queries designed to uncover hidden information and vulnerabilities on the web, primarily targeting cybersecurity professionals and ethical hackers. Notable features include a selection of smart and improved dorks that enhance search effectiveness and a user-friendly interface for easy application. The tool enables users to efficiently identify security weaknesses by utilizing specific search patterns directly in Google.

EWE (Execution Workflow Engine) is a robust automation tool designed for executing tasks in structured workflows using JSON or YAML files, ideal for automated reconnaissance and tool orchestration. Key features include parallel task execution, conditional task execution, real-time logging, and an interactive CLI mode for live task management. It facilitates efficient automation by supporting dynamic placeholders and providing both silent and interactive modes for flexibility in various operational environments.

Exif Looter is a command-line utility designed to analyze and manipulate image metadata, specifically EXIF data. Its primary use case includes analyzing individual images or entire directories for metadata extraction, as well as removing metadata to enhance privacy. Notable features include piping functionality for integration with other tools, the ability to extract GPS coordinates for mapping, and comprehensive support for various image formats.

InstaRecon is an open-source intelligence (OSINT) tool specifically designed for gathering publicly available information from Instagram profiles, aimed at cybersecurity professionals and ethical hackers. It features user intelligence gathering, engagement analysis, and the ability to extract detailed account metrics, business intelligence, and public contact information. The tool operates across multiple platforms, supports automatic dependency installation, and requires users to provide a valid Instagram session ID for functionality.

Meta-Owned-IT-Assets is a reconnaissance tool designed to assist security researchers in identifying and cataloging interesting IT assets owned by Meta Platforms, Inc. The repository aggregates data on various subdomains and applications used by Meta, highlighting potential vulnerabilities primarily in client-side and business logic contexts. Key features include detailed asset information, methodologies for asset discovery, and the utilization of multiple online reconnaissance tools like Shodan and DNSDumpster for thorough examination.

nucleihubquery is a bash utility designed to extract and organize search dorks from the nucleihub-templates YAML collection. Its primary use case is to facilitate reconnaissance by generating targeted search queries for multiple asset discovery platforms, enabling users to run structured scans based on vulnerability templates. Notable features include deduplication of queries, generation of severity-based outputs per provider, and a straightforward integration with standard Unix utilities.

One-Liner OSINT is a command-line tool that provides a comprehensive collection of one-liner commands specifically designed for efficient Open-Source Intelligence gathering. Its primary use case is to automate the extraction of valuable information from public sources, including email addresses, social media profiles, and personal data, catering to security researchers, bug bounty hunters, and ethical hackers. Notable features include the ability to find personal information across various platforms and the use of specialized search queries for targeted data retrieval.

Pinakastra is an AI-powered penetration testing framework designed for automated reconnaissance and exploitation, specifically tailored for penetration testers and bug bounty hunters. It features extensive capabilities for subdomain discovery, live host probing, URL analysis, and active exploitation of vulnerabilities like XSS and SQL injection, enhanced by AI-driven vulnerability detection and smart payload generation to minimize false positives. The tool also generates customizable reports in various formats, thereby streamlining the assessment process and improving efficiency in security testing.

Reconal is an advanced OSINT reconnaissance framework designed to streamline and automate over 70 Google dorks and detailed infrastructure analysis via a native desktop application. Key features include a zero-config experience for end users, a diverse range of recon modules covering cloud services, infrastructure configurations, and API discovery, as well as a robust command-line interface for terminal usage, ensuring no external exposure during operations.

ronin-recon is a micro-framework designed for efficient reconnaissance operations, utilizing multiple asynchronous workers to process various value types like IPs, hosts, and URLs. It features built-in recon capabilities such as DNS lookup, web spidering, and service scanning, and allows for the integration of additional third-party modules. Its unique queue architecture enhances performance, while support for multiple output formats and automatic result saving to a database makes it a versatile tool for cybersecurity practitioners.

SaaS Enum is a command line tool designed for identifying the Software as a Service (SaaS) platforms utilized by a company by analyzing DNS entries against known provider patterns and performing lightweight web checks for validation. It supports single and batch processing of company names, allows output in various formats (CSV, JSON, etc.), and provides features for listing providers and validating DNS patterns. Notably, it facilitates concurrent processing through configurable worker threads, enhancing efficiency in scanning multiple domains.

SecTracker is a comprehensive management platform tailored for bug bounty hunting and security research, enabling users to efficiently track findings, manage reports, and organize their workflow. Key features include detailed bug report management with status tracking, customizable dashboards for activity overview, and integrated research tools such as an RSS feed reader and security checklists. Built with modern technologies like React and TypeScript, it enhances the user experience through real-time updates and a robust backend powered by Supabase and PostgreSQL.

Sub-Drill is a straightforward script designed for penetration testers and bug bounty hunters to discover subdomains for a given domain using free online services, eliminating the need for API keys. It provides a pipe-able solution that aggregates subdomain data from multiple sources such as ThreatCrowd, CRT.sh, and URLscan.io, and enables optional output to a specified file. This tool is particularly useful for enhancing reconnaissance efforts in security assessments.

Subscan is a high-performance CLI tool designed for subdomain enumeration tailored for bug bounty hunters and security professionals. It offers both passive reconnaissance by leveraging public sources and active DNS resolution capabilities through customizable wordlists, alongside features for subdomain scoring, misconfiguration detection, and diverse output formats. Additionally, it supports concurrency for increased scanning speed and plans to introduce extensibility for plugins in the future.

Vasuki is an automation tool designed for security professionals that streamlines the process of subdomain enumeration and vulnerability scanning. It aggregates multiple reconnaissance tools to identify subdomains, check for subdomain takeover potential, and detect various injection parameters including XSS and SSRF. Notable features include integration with tools like Nuclei for vulnerability scanning, notification capabilities for scan results, and an organized output of findings in text files.

Warlusts is a repository that provides a collection of curated and custom wordlists for use in various security testing scenarios, particularly for password cracking and penetration testing. Its primary use case is to enhance the efficiency and effectiveness of brute force attacks by supplying tailored wordlists. Notable features include the extensive curation of words and phrases, which are designed to cater to different attack vectors.

Web Scraper is a Python-based tool designed for web hacking and assessment, featuring a suite of 20 widely-used functionalities for executing various attacks and reconnaissance tasks with a single command. Its notable features include ASN lookups, HTTP header analysis, subdomain discovery, vulnerability scanning, and more, providing users with a comprehensive toolkit for bug bounty and data extraction efforts. It operates on Python 3.7 or higher and is optimized for Linux environments.

`xcrawl3r` is a command-line tool that recursively spiders websites to discover URLs by actively traversing webpages and parsing files such as sitemaps and `robots.txt`. This active spidering approach distinguishes it from similar tools by revealing hidden or unindexed links, making it particularly useful for security researchers and IT professionals. Notable features include support for multiple output formats, cross-platform compatibility, and integration with automated workflows through standard input and output options.

`xsubfind3r` is a command-line utility that efficiently discovers subdomains for a specified domain using information from various passive data sources. It is particularly useful for security researchers and IT professionals, offering features such as support for multiple output formats (including JSONL and stdout), the ability to integrate seamlessly into automated workflows via `stdin` and `stdout`, and cross-platform compatibility across Windows, Linux, and macOS.

Bucky is a tool designed for S3 account ID enumeration and bucket discovery, enabling users to extract the 12-digit AWS account ID of an accessible S3 bucket and discover additional associated buckets through exhaustive fuzzing of bucket names against a wordlist. Key features include the use of inline STS session policies to systematically brute-force the account ID and the ability to report the discovered account ID, bucket regions, and all identified buckets, thus facilitating reconnaissance efforts on AWS S3 resources.

CHOMTE.SH is an advanced automation framework designed for reconnaissance tasks in penetration testing, primarily serving bug bounty hunters and security professionals. Its notable features include subdomain discovery, DNS brute-forcing, quick port scanning, HTTP probing, and detailed reporting capabilities, allowing users to identify vulnerabilities and misconfigurations effectively. The tool is customizable through a flags.conf file and supports deep internet reconnaissance and JavaScript analysis to enhance security assessments.

The OSINT MCP Server is a unified platform that consolidates multiple open-source intelligence sources like Shodan, VirusTotal, and Censys into a single service, enabling AI agents to access comprehensive OSINT on demand. Its primary use case is to streamline the collection of reconnaissance data essential for penetration testing and threat assessments, eliminating the need for multiple tools and manual correlation. Notable features include support for numerous data sources, a simplified MCP protocol interface, an intuitive architecture, and a rich set of 37 integrated tools.

Security Books is a comprehensive repository offering over 160 curated cybersecurity-related books, guides, and resources, catering to various skill levels from beginners to advanced practitioners. This tool features a fully categorized structure with clickable links for instant access to each resource, ensuring that the cybersecurity community has free access to critical knowledge. With a commitment to regular updates, it serves as a valuable, continually expanding library for topics ranging from ethical hacking to network defense.

`xurlfind3r` is a command-line utility that efficiently discovers URLs associated with a given domain by sourcing publicly available data through passive means. It is particularly useful for security researchers and IT professionals, offering features like multiple output formats (JSONL, file, stdout), support for automatic workflows via `stdin` and `stdout`, and cross-platform compatibility across Windows, Linux, and macOS.

The Admin Control Panel Finder is a Perl-based tool designed to identify potential admin login paths on websites, catering primarily to developers and security professionals for authorized testing. It automatically checks common admin panel URLs across various web technologies, such as PHP and ASP, and employs keyword detection for typical login fields, making it a lightweight and beginner-friendly tool for ethical hacking and cybersecurity education.

AdwanceSNI is a command-line tool designed for subdomain discovery and vulnerability scanning on Termux and Linux platforms. Leveraging the capabilities of subfinder for subdomain enumeration and bughunter-go for vulnerability analysis, it features a user-friendly colorful terminal UI, progress indicators, and supports batch processing for multiple domains. This tool is primarily intended for educational and ethical hacking purposes, emphasizing user responsibility for permissions when scanning targets.

JSReconRadar is a robust Burp Suite extension designed for passive reconnaissance of JavaScript files, enabling the detection of secrets, API keys, endpoints, and security misconfigurations in real-time. It features over 1,600 detection patterns, customizable UI elements, advanced filtering options, and supports both Burp Suite Community and Professional editions, making it essential for identifying vulnerabilities in web applications. Noteworthy functionalities include a custom results tab, severity color coding, and the capability to save or export findings for further analysis.

BurpMCP-Ultra is a powerful Kotlin extension for Burp Suite Professional that integrates an MCP server, enabling programmatic control of Burp functionalities via AI agents. It supports 149 structured tools for tasks such as proxy history analysis, scan management, fuzzing, and guided exploitation, all secured through token-based local transport. Notable features include custom scan checks, an extensive real-time dashboard, and hardened localhost security controls.

Claude Security Research Skill enhances the Claude AI with structured security assessment workflows, enabling it to effectively manage and execute security research across multiple phases, including reconnaissance, vulnerability scanning, and reporting. Notable features include tool chaining, automated phase management based on target types, and the capability for Claude to interpret tool outputs, suggest subsequent actions, and compile professional assessment reports. This skill integrates seamlessly into Claude's environment, facilitating detailed and methodical security assessments without generating payloads or exploit code.

Crivo is an open-source Python tool tailored for offensive security analysts, pentesters, and bug bounty hunters, facilitating the extraction and filtering of URLs, IPs, domains, and subdomains from various text inputs and web pages. Notable features include built-in web scraping, flexible scope filtering, and clean output formatting for easy integration into automated workflows, making it efficient for processing data and generating organised reports.

DarkBuster is an advanced web directory and file brute-forcing tool designed for authorized security testing, featuring multithreading capabilities to optimize scan speed. It includes curated wordlists updated to May 2026, supports customizable extensions, and offers a user-friendly CLI interface with color-coded output and real-time progress tracking. Notable features include the ability to save results, use custom headers, and specify various scanning options to enhance the pentesting process.

ExplorerPy is an information-gathering reconnaissance toolkit that enables users to perform subdomain enumeration, directory brute-forcing, and port scanning on a specified domain. It features multithreaded execution for enhanced performance, customizable options for wordlists and timeouts, as well as capabilities for User-Agent and HTTP header spoofing to simulate legitimate requests. This tool is designed for both educational and testing purposes, ensuring a comprehensive approach to domain analysis.

FastRecvSMS is an SMS verification toolkit designed for security professionals, enabling the purchase of temporary phone numbers to receive SMS codes via a command-line interface (CLI). Key features include support for multiple providers, real-time SMS monitoring, automatic waiting for verification codes, and secure configuration management using local TOML files. The tool streamlines the process of obtaining and verifying SMS codes for various services, making it efficient for testing and security assessments.

favicon_hash_shodan is a tool designed to identify and retrieve all hosts sharing the same favicon by leveraging Shodan's search capabilities. Its primary use case is to aid cybersecurity professionals in uncovering potential target infrastructure or tracking down related web services by analyzing favicon hashes. Notable features include a simple command-line interface for direct usage, integration with Shodan for result viewing, and an uncover mode to enhance search capabilities.

Frida Setup is an installer script designed to facilitate the bypass of SSL pinning in Android applications by automating the installation of Frida and configuring Burp's certificate. The tool is primarily used with Genymotion Emulator or an appropriately configured ADB environment, enabling seamless interaction for SSL interception. Notable features include automatic installation of Frida and its tools, fetching the latest Frida server, downloading Burp's proxy certificate, and cleaning up post-installation requirements for a clean workflow.

gitghost is a tool designed to scan public GitHub repositories for exposed secrets, including those that may have been committed in the past and then deleted. It thoroughly searches through git history to identify vulnerabilities and presents findings in an HTML report complete with direct links to the locations of the secrets, as well as a guide on how to remediate the issues. Notable features include the ability to generate an exposure score, scan for various types of sensitive information, and run local scans without installation.

H1 Asset Fetcher is a command-line tool designed for bug bounty hunters to efficiently fetch, download, and decompile mobile app assets from various bug bounty programs like HackerOne and Bugcrowd. It offers a user-friendly, interactive prompt to guide users through selecting assets across Android, iOS, and executable files, with features including bulk downloading, asset decompilation using JADX, and credential management for streamlined repeated usage.

Hgrab is a lightweight framework designed for scanning various web-based software applications over specified ports using minimal bandwidth. It supports a diverse set of applications, including VMware vCenter and Apache NiFi, enabling users to easily identify and interact with these services via simple command-line inputs. Notable features include the ability to list available software for scanning and the integration with external tools like ZMap for efficient scanning operations.

HuntTheBug is an advanced reconnaissance framework tailored for bug bounty hunters, combining over 30 security tools into a streamlined workflow to facilitate automated vulnerability discovery. Notable features include parallel execution for enhanced speed, live domain verification, real-time Telegram notifications for immediate alerts, and comprehensive scanning capabilities for subdomains, URLs, and directories. This toolkit is specifically optimized for use on Kali Linux, ensuring efficient and effective reconnaissance processes.

Monitoring Monster (MonMon) is an automation tool designed for bug bounty hunters that facilitates real-time monitoring of target systems for changes, such as new subdomains or scope expansions. Key features include a smart diff engine for tracking modifications across multiple endpoints, support for alerts via platforms like Slack and Discord, and a user-friendly dashboard that allows for comprehensive task management and historical data reviews. The tool is built in Go and supports easy deployment via Docker, enabling seamless integration into security workflows.

OnlyVulns is a nonprofit, open-source platform designed for security researchers to publish vulnerability disclosures in a controlled and safe environment. It enables researchers to document their findings, including proof-of-concept submissions and technical write-ups, while allowing them to manage vendor communications and disclosure timelines autonomously. Key features include a non-corporate framework, an embargo process for pre-publication coordination, and options for community support and tipping, fostering a researcher-first approach to vulnerability disclosure.

PenScope is a comprehensive Chrome extension designed for bug bounty hunters, enabling automated map and probe functionalities within web applications. It autonomously scans an attack surface, identifies potential vulnerabilities, and generates HackerOne-format reports for critical findings, streamlining the workflow significantly. Notable features include enhanced probing capabilities with 45 attack vectors, extensive secret pattern recognition, and the ability to decode JWTs and log sensitive information without sending data until prompted by the user.

ps.sh is a Bash script designed for automated port scanning on specified target hosts, enhancing scan efficiency and reducing time. It offers features such as service discovery through various workflows using Nmap and Masscan, as well as support for scanning multiple targets simultaneously. Notably, users can customize target ports and output directories, making it a versatile tool for network exploration.

ReconOps is a structured, recon-only framework designed for bug bounty hunters, focusing on mapping and understanding the attack surface before exploitation. It provides a comprehensive methodology and tools for both passive and active reconnaissance, including automated scripts and templates for effective recon operations. Notable features include tiered guidance for various stages of reconnaissance, a checklist for engagements, and extensive documentation on techniques and tools.

ReconPro is a web reconnaissance tool catering to cybersecurity professionals and bug bounty hunters, facilitating the rapid identification of vulnerabilities through a curated library of Google dorks. It features a smart preset system for common scenarios, supports dual themes, and operates cross-platform without external dependencies, allowing users to easily execute targeted searches for specific vulnerabilities.

Shodan Filters is a curated repository of search queries specifically designed for Shodan, facilitating reconnaissance and asset discovery during penetration testing and bug bounty engagements. It offers a comprehensive list of ready-to-use filters categorized by technology and framework, enabling users to efficiently discover vulnerable components and configurations by simply entering queries in the Shodan search bar. Notable features include a variety of targeted filters for different technologies, such as Ruby, Django, Kubernetes, and WordPress, which help streamline the information gathering process.

Web Recon Automation is an automated reconnaissance script designed for bug bounty hunters and penetration testers, enhancing the efficiency of subdomain enumeration, live host discovery, vulnerability scanning, and reporting. Key features include automated dependency checks, integration with tools like `subfinder`, `httprobe`, `nmap`, and `nuclei`, as well as comprehensive reporting that summarizes findings in a structured Markdown format. The tool simplifies the reconnaissance process by allowing users to conduct multiple security checks with a single command execution.

X-POSURE v4.0 is an autonomous credential intelligence platform designed for discovering, extracting, correlating, verifying, and reporting exposed secrets across an organization's entire attack surface. Its primary use case is to enhance security by identifying vulnerabilities related to exposed credentials, further augmented with features like recursive crawling, Shodan integration, AI-powered contextual analysis, and deep secrets scanning via TruffleHog. This tool is engineered for advanced users who recognize the significance of credential exposure as a substantial security threat.

Bug Bounty is a comprehensive knowledge base designed for security researchers, penetration testers, and bug bounty hunters, featuring methodologies, cheatsheets, automation tools, wordlists, and real-world write-ups. Its primary use case involves equipping users with the necessary resources for web penetration testing, API security, cloud exploitation, and modern vulnerability assessment techniques. Notable features include battle-tested methodologies and a focus on ethical hacking practices, underscoring the importance of authorized testing only.

ffuf-GUI is a web-based fuzzing tool designed for penetration testing and security assessments, providing a user-friendly interface to automate fuzzing tasks directly from a browser. Key features include support for multiple attack modes (GET, POST, custom headers), real-time result display, response filtering, and the ability to export results in various formats. This tool is built for cross-platform compatibility, working seamlessly on Linux, Windows, Mac, and Android devices.

JSHunter is a professional command-line tool designed for comprehensive JavaScript security analysis, specifically focused on endpoint discovery and sensitive data detection. It features high-accuracy detection algorithms for identifying API keys, tokens, and potential vulnerabilities, alongside robust reporting capabilities and advanced networking options like proxy support and customizable headers. Additionally, its multi-threaded architecture ensures efficient processing, making it suitable for security professionals and penetration testers.

The orgs-data repository is designed to assist bug bounty hunters in identifying leaked secrets, vulnerabilities in GitHub Actions workflows, and conducting reconnaissance by gathering information from organizations' repositories. Notable features include scripts for listing GitHub organization names and tracking programs for potential vulnerabilities, along with a collaborative approach to maintain an up-to-date database of organizations and bug bounty programs.

Parrot Recon is an automation script designed for reconnaissance in bug bounty scenarios, chaining multiple enumeration and vulnerability scanning tools into a single execution. It supports a range of scan types, including API and web scanning, and outputs comprehensive results to a specified directory. Notable features include support for various data sources such as Postman collections, extensive built-in scan capabilities, and the ability to run multiple scans sequentially while handling missing tools gracefully.

ReconForge is an AI-assisted reconnaissance toolkit designed for bug bounty hunters and security researchers, facilitating rapid transition from raw data to actionable insights. It features subdomain discovery, DNS enumeration, SSL/TLS analysis, Shodan integration, and technology detection, all complemented by AI triage prompts for analyzing HTTP responses and generating professional markdown reports. The tool emphasizes a speed-oriented, production-ready design with robust error handling and comprehensive testing capabilities.

ReconFusionAI is an AI-powered web asset scanner designed to detect exposed secrets, credentials, PII, and vulnerabilities across web applications with high accuracy through a comprehensive library of over 1,183 detection patterns. Its notable features include advanced contextual analysis using Ollama for improved understanding of data context, a modular architecture allowing for easy updates, and dual output formats that provide detailed findings and reconnaissance intelligence. Additionally, it incorporates intelligent caching mechanisms and production-hardened capabilities for efficient and robust operation.

CORS-Scanner is a Go-based tool designed to identify CORS misconfiguration vulnerabilities in web applications. It allows users to specify origin headers and cookies for testing and processes line-delimited domains to check for vulnerabilities such as reflected origins with credentials and wildcard configurations. Notable features include customizable options for origin headers and cookie handling, as well as the capability to input multiple domains efficiently for scanning.

OrgASM is a modular attack surface mapping tool designed for discovering and enumerating potential vulnerabilities within a target's ecosystem, such as subdomains, IPs, and services. It integrates seamlessly with other tools like nuclei for scanning and wappalyzer for service detection, offering features such as a customizable configuration file, pivoting to related FQDNs, and the ability to automate scans using community APIs. Users can extend its functionality by adding custom APIs and tools, making it highly adaptable for various cybersecurity needs.

R3CON is a multifunctional web reconnaissance and vulnerability scanning tool designed for rapid crawling and detailed vulnerability detection across various attack vectors, including XSS, SQL injection, and open redirections. It offers multi-threaded crawling capabilities and extensive reconnaissance features, such as DNS lookups, subdomain enumeration, and identification of vulnerable libraries. The tool allows users to perform both active and passive scans, providing a comprehensive solution for web application security assessments.

TopScan is an automated web vulnerability scanner designed to quickly identify security weaknesses in web applications. Its primary use case includes subdomain enumeration, active subdomain verification, and vulnerability checks for XSS, information disclosure, and subdomain takeover, among other features. Notable functionalities include gathering WHOIS information, extracting URLs from sitemaps, and detecting hidden servers and admin panels.

vuln-scanner-flask is a web application designed for scanning vulnerabilities within websites and performing network exploitation and reconnaissance. Its notable features include an intuitive user interface, fast scanning capabilities, and functionalities for scheduling assessments and generating reports. The tool aims to facilitate security assessments while ensuring user-friendliness and security.

wacat is an automated web application testing tool that simulates chaotic input by navigating through a web application's links and forms in a random manner, providing comprehensive testing coverage. It offers advanced features like AI-driven error detection and content generation, supports various configurations for authentication, and can run in headless mode suitable for Continuous Integration (CI) pipelines. Built on Playwright, wacat is designed for user-defined behaviors and can detect a range of issues, making it ideal for thorough application assessments in a controlled environment.

BRS-XSS is an advanced XSS vulnerability scanner designed for modern web applications, providing deterministic and auditable detection capabilities. It features context-aware scanning, WAF evasion techniques, and a comprehensive knowledge base for payload management, along with a user-friendly web interface that supports real-time monitoring, detailed reporting, and customizable scanning options. Notably, it includes a Pentesting Task Tree strategy engine for adaptive testing, A/B testing for strategy comparison, and multiple report formats for enhanced analysis.

BurpAPISecuritySuite is a professional-grade extension for Burp Suite that consolidates multiple functionalities for API reconnaissance, intelligent fuzzing, and AI-enhanced security testing into a single interface. It is designed to improve performance and usability by sharing resources across various tabs, thereby minimizing memory usage and CPU overhead while maintaining a stable and efficient testing environment. Notable features include support for REST, GraphQL, and SOAP APIs, as well as tools for passive discovery, fuzzing, and advanced security assessments based on the OWASP API Top 10 guidelines.

Chaca is a native desktop web security scanner designed specifically for developers, providing fast and opinionated security audits of web applications through a user-friendly interface without requiring terminal use. It features both passive and active scanning capabilities, support for numerous content management systems and APIs, and generates detailed reports with filtering and export options. Additional highlights include a real-time progress dashboard, persistent scan history, and customizable scan presets, all built on a tech stack utilizing Rust, React, and Tauri.

CloudVault is an enterprise-grade security scanner designed for multi-cloud storage environments, specifically targeting AWS S3, Google Cloud Storage, and Azure Blob. It offers advanced attack chain analysis, automated permission checking, and comprehensive risk scoring, facilitating real-time discovery of exposed cloud resources through certificate transparency monitoring. Notable features include interactive text user interface (TUI), alerts integration with communication platforms, compliance mapping, and various export formats for reporting and remediation.

Critikal is an autonomous security research agent specifically designed for smart contracts, capable of identifying exploitable vulnerabilities in blockchain protocols through a comprehensive analysis process. It ingests repository data, performs reconnaissance, maps the attack surface, and validates its findings, generating proof-of-concept tests using Foundry along with detailed audit reports in HTML and Markdown formats. Notable features include multi-model support for AI analysis, an integrated knowledge graph, and a user-friendly TUI demo for easy interaction.

JitterBug is a reconnaissance tool designed to conduct passive information gathering by querying third-party databases for basic data, open ports, and potential CVEs associated with target IPs, all without direct interaction with the targets. Its stealthy operation ensures minimal detection risk, making it suitable for pre-attack reconnaissance and security assessments. Notable features include the ability to operate without direct engagement with targets and seamless integration within the DiaLog Project.

Omnisci3nt is a unified web reconnaissance toolkit designed for cybersecurity professionals, ethical hackers, and security researchers, enabling automated analysis of critical domain-related data such as subdomains, SSL/TLS certificates, and exposed services. Its notable features include IP and WHOIS lookups, DNS enumeration, port scanning, and web crawling, all aimed at enhancing visibility into a domain's attack surface for security assessments and threat modeling. The tool is intended for authorized testing and provides a streamlined workflow for comprehensively analyzing the external exposure of web assets.

Pentesting Cyber MCP is a framework that provides standardized server implementations for 50 popular security tools via the Model Context Protocol (MCP), facilitating automation in pentesting and bug bounty tasks. Each MCP server encapsulates a security tool with a uniform interface, making it interoperable with any MCP-compatible client and allowing seamless integration into security assessments. Notable features include a wide range of tools covering reconnaissance, vulnerability scanning, and exploitation, all accessible through standard MCP interfaces.

RAG/LLM Security Scanner is a professional security testing tool designed to identify critical vulnerabilities in Retrieval-Augmented Generation (RAG) systems and large language model (LLM) applications, such as chatbots and knowledge retrieval systems. Notable features include advanced prompt injection detection, data leakage assessments, function abuse testing, and comprehensive reporting capabilities, making it suitable for both demo and production environments. The tool supports easy integration with popular AI systems and provides detailed JSON/HTML reports with actionable insights.

RedTiger-Tools is a versatile automation tool designed for penetration testing (pentesting) and open-source intelligence (OSINT) that aims to consolidate multiple operations into a single, configurable platform. It features a plugin system for extending functionality, centralized configurations using JSON files, and dual operation modes (CLI and interactive interface), ensuring compatibility with both Windows and Linux environments while adhering strictly to legal and ethical standards for usage.

Vigil is an open-source, AI-powered security operations platform designed for comprehensive vulnerability management, incident response, and compliance tracking within a unified Express.js framework. Key features include six built-in scanners (Nmap, Nuclei, Trivy, Nikto, OpenSSL, DNS), 20 autonomous agents for parallel operations, and support for custom AI integrations, all while maintaining a lightweight architecture without external dependencies. The platform also offers advanced functionalities like role-based access control, two-factor authentication, and an encrypted credential vault for enhanced security.

WPRecon is an advanced WordPress reconnaissance and vulnerability scanning tool designed for security engineers to identify vulnerabilities, misconfigurations, and information disclosure in WordPress installations. It utilizes a YAML-driven template architecture that facilitates easy extensibility, rapid deployment as a single binary, and features such as high-performance parallel scanning, a diverse library of over 150 templates, and multi-format output options. Notable capabilities include automatic retries for failed requests, comprehensive HTTP operations, and a variety of matchers and extractors for efficient data retrieval and analysis.

The Vulners Python SDK is a comprehensive client for accessing Vulners' vast vulnerability intelligence database, facilitating queries on CVEs, exploits, and advisories enriched with risk metrics like CVSS and EPSS. It enables users to assess vulnerabilities across various software and systems, stream data for integration into custom pipelines, and set alerts for new matching vulnerabilities, all while supporting asynchronous operations for enhanced performance. Notably, it incorporates features for tracking active exploits and provides an AI-ready infrastructure for real-time data processing.

DeepSec is an AI-driven security platform that integrates code security auditing and authorized penetration testing into a unified CLI and terminal workbench. It features a three-layer detection architecture for real-time vulnerability scanning, leveraging regex, AST analysis, and LLM semantic evaluation, along with IDE plugins for seamless development integration. The platform is designed to enhance security efficiency by augmenting traditional methods with advanced AI capabilities.

honey is an automated supply-chain security tool that orchestrates multiple security scanners to assess vulnerabilities across a developer's machine. It integrates the findings from various scanners, such as bumblebee for compromised packages and osv-scanner for known CVEs, providing a unified verdict and optional daily reports through a messaging system. Key features include scheduling scans, customizable reporting policies, and the ability to suppress previously acknowledged findings.

SILENTCHAIN AI™ - Community Edition is a Burp Suite extension designed for AI-powered passive vulnerability analysis, providing intelligent detection of OWASP Top 10 vulnerabilities and security misconfigurations in real-time HTTP traffic. Notable features include context-aware detection using various AI models, detailed reporting with CWE and OWASP mapping, and robust data privacy measures through automatic sensitive data redaction. The tool enhances traditional security scanning by focusing on real vulnerabilities with zero false positives, making it a significant addition to web application security testing.

Synapse is a governed control plane designed for comprehensive software composition analysis, vulnerability detection, and reporting, facilitating security assessments in a controlled environment. Its primary use case revolves around automating security workflows, ensuring tamper-evident evidence collection, and allowing for deterministic scanning across various ecosystems with multiple built-in scanners. Notable features include a robust SBOM generation, risk-based prioritization of findings, and strict adherence to authorization and scope constraints before tool execution.

Xalgorix is an open-source AI-driven penetration testing platform that autonomously conducts comprehensive pentesting methodologies and verifies each finding through an independent verification process, ensuring the delivery of proven vulnerabilities rather than uncertain results. It is designed for self-hosting and supports a "bring-your-own-LLM" model, allowing integration with user-defined language models, while catering to both Linux environments and containerized implementations through Docker. Notable features include its autonomous execution, independent verification of findings, and the ability to run in a secured Docker container.

Abster Intelligence is a privacy-centric open-source investigation workspace designed for OSINT, GEOINT, and cyber research. Its primary use case is to facilitate data analysis and evidence gathering without the risk of data leakage, employing a local-first architecture where all investigation data is stored in the user's browser, ensuring strict data sovereignty. Notable features include a dynamic relational graph engine for visualizing connections, support for querying various OSINT tools directly from the interface, and the ability to share investigations securely via encoded URLs without compromising data privacy.

Aliens Eye is an advanced AI-driven OSINT tool designed for scanning usernames across over 840 social media platforms, utilizing machine learning and heuristic detection to yield comprehensive results. Key features include asynchronous scanning, profile extraction, cross-site correlation, recursive username expansion, and customizable reporting formats, along with support for proxies and Tor. The tool also offers a modern terminal UI and a server option for integration with LLM agents, making it a versatile solution for username discovery and analysis.

OWASP Amass is a comprehensive tool for network mapping and external asset discovery aimed at enhancing cybersecurity through the use of open source information gathering and active reconnaissance techniques. Its primary use case is to identify and map attack surfaces, enabling security professionals to assess the security posture of the networks they oversee. Notable features include its ability to aggregate data from various sources and integrate with existing tools, providing a robust framework for comprehensive threat assessment.

The AI Agents Repository is a curated collection of AI agent frameworks, security tools, and autonomous workflows, emphasizing areas such as offensive security, OSINT, and coding assistance. It features a comprehensive index categorized by engine classification and deployment modes, enabling users to discover and implement various AI-driven solutions effectively. Notable functionalities include practical assessments and the ability for community contributions through pull requests or issue reports.

Awesome Hacking & Cybersecurity Learning Path is a comprehensive resource designed to guide individuals from beginner to advanced levels in ethical hacking, penetration testing, and cybersecurity. It features curated materials on bug bounty hunting, OSINT tools, CTF challenges, and practical exercises for real-world scenarios, alongside essential concepts in networking and web application security. Notable features include detailed roadmaps for penetration testing, hands-on labs from platforms like TryHackMe and HackTheBox, and extensive coverage of privilege escalation techniques across multiple operating systems.

The Awesome OSINT Arsenal is a comprehensive open-source toolkit designed for open-source intelligence (OSINT) and cybersecurity, comprising over 753 tools organized into 50 categories. It facilitates quick installations on various Linux distributions and offers targeted scripts for specific tasks such as red teaming, blue teaming, and forensics, simplifying access to essential security resources. This toolkit supports multi-distro installers and includes a Termux subset for Android, enhancing its versatility for security researchers and practitioners.

Ayesha OSINT Toolkit is an open-source tool designed for conducting various Open Source Intelligence tasks, including username availability checks, email validation, and IP address lookups. Built with Python, it leverages scripts that access publicly available data sources, enabling users to gather crucial information efficiently. Key features include individual script functionalities for username checking, email finding, and detailed IP information retrieval, all of which can be executed based on user requirements.

BIRDY-EDWARDS is an AI-driven SOCMINT platform designed for local analysis of publicly available Facebook profile data, enabling authorized users to collect and analyze information without cloud dependencies. Key features include automated profile collection, interaction intelligence with sentiment analysis, country detection using LLM, interactive network graphs, and customizable PDF reporting. This tool is designed for legitimate intelligence, law enforcement, and academic research use, operating with a valid Facebook session and adhering to privacy regulations.

Birdy-Edwards Lite is a local-first SOCMINT platform designed for gathering and analyzing publicly available Facebook profile data, including posts and interactions, without requiring AI models or cloud services. It features automated data collection, network visualization, interaction mapping, and various graphical outputs such as heatmaps and force-directed graphs, all optimized for modest hardware capabilities. This tool is specifically tailored for investigators seeking rapid, reproducible results while adhering to data access limitations.

Certstream Server Go is a high-performance server written in Go that aggregates, parses, and streams real-time data from multiple certificate transparency logs to clients via WebSocket connections. It serves as a drop-in replacement for the original Certstream server, enabling users to analyze newly issued TLS certificates with more reliability and ease of use. Key features include support for custom configuration of monitored CT logs, straightforward setup via precompiled binaries or Docker images, and multiple endpoints for data connection.

Checker-Scammer is a CLI-based investigative tool designed to ascertain the legitimacy of WhatsApp numbers before initiating transactions, thereby mitigating the risk of falling victim to scams. Notable features include comprehensive data retrieval that encompasses profile pictures, personal information analysis, and an extensive suite of OSINT capabilities for tracking, identifying, and analyzing individuals associated with phone numbers. The tool aims to provide users with a robust mechanism for online transaction security in an increasingly digital marketplace.

Claudii Exploratores is an OSINT suite that leverages AI to enhance reconnaissance by providing a skill set for the Claude AI model and a Model Context Protocol (MCP) server. It offers a robust catalog of 898 curated OSINT tools across 24 categories, an indicator classifier for various data types, and a curated URL builder that generates relevant search links based on analyzed indicators. Notable features include cross-platform search capability and an offline IBAN verifier, all while ensuring operational control remains with the user.

Cloud Data is a repository designed to collect and parse cloud-related data from multiple supported cloud providers, including AWS and GCP, to extract useful information about specified targets. Users can define their targets in a `targets.txt` file, and the tool automates data fetching every seven days using GitHub Actions, with outputs saved for easy access. Notable features include customizable scheduling through cron jobs and integration with multiple data sources for comprehensive analysis.

The Common OSINT Model is a data model framework designed to simplify the integration and conversion of open-source intelligence (OSINT) data from various sources, primarily focusing on services like HTTP, TLS, and SSH. Notable features include its Pydantic-based structure for enhanced readability and data handling, automatic hash calculation for raw data, and implementation of converters for specific data sources such as Shodan and Censys. The tool is intended to support users by providing a consistent way to manage host and service information derived from external scanning services.

cupidcr4wl is an open-source OSINT tool designed for searching usernames and phone numbers across various adult content platforms, particularly useful in missing persons investigations and human trafficking cases. Key features include support for multiple input formats, result exporting to HTML, and a regularly updated list of platforms for accurate searches. Users can also modify the tool to report inaccuracies and suggest new sites for inclusion.

OWASP D4N155 is an information security auditing tool designed to generate intelligent wordlists based on the content of specified target pages. Its primary use case is to assist security professionals in identifying potential vulnerabilities by analyzing web content and extracting relevant terms for testing. Notably, it supports various input methods and custom parameters for tailored wordlist generation while being built primarily in Bash and requiring additional tools like Python and Go for full functionality.

dorks_hunter is a Python-based automation tool that serves as a wrapper for `xnldorker`, enabling users to systematically execute categorized Google dorks against a specified target domain. Its primary use case is to identify vulnerabilities or sensitive information exposure in web applications, with notable features including terminal output of results and an option to save the findings to a file for further analysis.

FalconEye is a comprehensive, self-hosted OSINT investigator's toolkit designed to streamline the investigation process through eighteen specialized modules. It facilitates a wide range of investigative tasks including cryptocurrency wallet tracing, phishing kit analysis, and domain intelligence, all integrated within a single interface that promotes one-click connectivity between related tools. Key features include LLM-powered scam detection for email headers, multi-source IP reputation assessments, and a fictional persona generator, making it a versatile platform for cybersecurity professionals.

Farsight is a modular CLI-based reconnaissance and threat intelligence framework designed to convert open-source intelligence (OSINT) into actionable insights for security assessments. Its notable features include comprehensive organization discovery, asset recognition, threat intelligence capabilities, and support for news monitoring, alongside customizable outputs in Markdown and PDF formats. The tool can function effectively without API keys while allowing integration with various services for enriched data retrieval.

Crypto OSINT investigation toolkit

Ghost Map Pro is a free, open-source Chrome extension that allows users to scrape Google Maps search results and export them as structured CSV files containing business leads, including details such as business name, contact information, and ratings. Notable features include email discovery through automatic website scraping, exhaustive output fields tailored for CRM integration, and a completely self-contained operation within the user's browser, eliminating the need for API keys or external servers.

GoTor is a concurrent web crawler designed for robust web scraping through the Tor network, utilizing SOCKS5 support for anonymity. Its primary use case is to crawl websites while providing a JSON crawl report and a local HTTP API for job control, making it suitable for integration with applications like TorBot. Notable features include customizable crawl depth, worker count, and the ability to randomize headers, along with built-in diagnostics for Tor connectivity and health checks.

The guns.lol Username Checker is a command-line interface (CLI) tool designed to verify the availability of usernames on the guns.lol platform using Selenium with advanced detection logic. Key features include a stylish purple interface, automatic cleanup of Chrome processes, support for filtering premium aliases, and real-time notifications through Discord webhooks. This tool offers a streamlined user experience with options for custom username lists and logging results.

IntelHub is an advanced browser-based OSINT toolkit designed for researchers, analysts, and investigators, enabling comprehensive analysis with tools for Telegram analysis, digital forensics, and local AI integration. Notable features include a privacy-first local AI agent for offline operations, real-time web searches via DuckDuckGo, local file analysis with metadata extraction, and an enhanced user interface for streamlined investigations.

LinkedInDumper is a Python 3 script designed for extracting employee data from the LinkedIn API. It enables users to collect detailed information, including first names, last names, positions, and profile links with minimal API calls, while also allowing customization of email address formats through a command-line interface. The tool operates using an unofficial LinkedIn API and requires user authentication via a session cookie, facilitating the gathering of data even for accounts protected by two-factor authentication.

MetaDetective is a Python-based tool designed for metadata extraction and web scraping, specifically tailored for OSINT and pentesting applications. It enables users to extract a wide range of metadata—including authorship, software versions, GPS data, and hyperlinks—from various file types and conduct direct web scraping without reliance on search engines. Notable features include GPS reverse geocoding, customizable output formats, selective field extraction, and deduplication capabilities, making it a comprehensive solution for security researchers and penetration testers.

Metawarc is a command-line tool designed for efficient extraction of metadata from files contained within WARC (Web ARChive) archives. Its primary use case involves the analysis and retrieval of metadata from various file formats such as PDFs, MS Office documents, and images, while offering features like built-in WARC support, a low memory footprint, and comprehensive command options for indexing, statistics, and metadata dumping. Notably, it generates a DuckDB database for organized metadata storage and provides easy CLI commands for various extraction tasks.

MISP modules are autonomous extensions designed to enhance the MISP threat intelligence platform by providing new functionalities such as data expansion, import/export capabilities, and workflow actions. These modules can operate independently through a web interface or command-line interface, utilizing a simple REST API for integration with other tools. Built in Python 3, they facilitate the customization of MISP's features without altering its core architecture, making it easier for users to extend functionality while maintaining system integrity.

The MISP Training repository provides a comprehensive set of training materials focused on MISP, threat intelligence, and OSINT. Key offerings include slide presentations on core concepts, MISP integration, administration, and best practices, along with the complete LaTeX source code for community contributions. This resource is designed to enhance knowledge sharing and collaboration in the field of cybersecurity and information sharing.

The Atypical OSINT Guide serves as a comprehensive resource for professionals engaged in Open Source Intelligence (OSINT), offering unconventional insights and methodologies. It includes sections on immersive learning, practical training, and ethical considerations, making it suitable for users looking to enhance their investigative skills through gamification and diverse pathways. Notably, it encourages community contributions and emphasizes responsible practices in OSINT investigations.

NotLoBi's NotLoBi is an OSINT (Open Source Intelligence) framework designed to provide comprehensive cheat sheets and tools for various intelligence-gathering methodologies. It includes resources across multiple domains such as social media investigation, image analysis, geospatial intelligence, deep and dark web information, as well as financial and drug-related intelligence. Notable features include categorized tools for people's search, reconnaissance, cryptocurrency analysis, and anonymization techniques, making it a versatile resource for researchers and investigators.

Nyx is a reverse phone lookup tool designed to retrieve subscriber information associated with a phone number, such as usernames, photos, bios, and last activity data, primarily from instant messaging platforms like WhatsApp and Telegram. The tool emphasizes the vulnerabilities in these messaging applications, raising awareness of how their features can be exploited to harvest personal data. Users must operate within legal boundaries and obtain necessary permissions to use Nyx responsibly.

Odinova Digital Tiger is a discontinued application designed for Open-Source Intelligence (OSINT) that provides a comprehensive suite of tools for investigative workflows and data analysis. Notable features include a tabbed interface for document management and Markdown file viewing, HTML rendering for clear presentation, and dark theme support for enhanced usability. The tool aims to centralize OSINT operations, enabling efficient data management and promoting collaboration among users.

OpenGraph Intel (OGI) is an open-source visual link analysis and OSINT framework designed for interactive exploration of connections between entities. Its primary use case lies in performing in-depth investigations through features such as a visual graph interface, over 20 built-in data transforms, real-time collaboration, and a plugin system for custom analytics. Notable functionalities include an AI Investigator for prompt-driven analysis, multi-format import/export capabilities, and seamless deployment via Docker.

OptraSight is an open-source cyber threat intelligence workstation designed for security analysts and threat intelligence teams. It facilitates OSINT triage, threat actor profiling, and AI-assisted analysis, enabling users to collect threat signals, review evidence, and draft defensive queries for SIEM and detection systems within a cohesive local environment. Notable features include an intuitive interface for evidence review, enriched actor context, and a clear traceability workflow from data intake to actionable insights.

OSINT Bible 2026 is a comprehensive repository designed for the ethical practice of Open-Source Intelligence (OSINT), providing a curated compilation of procedures, tools, and methodologies for effective information gathering and analysis. Its primary use case is to assist researchers and investigators in performing lawful and ethical OSINT activities, featuring a wide array of investigation techniques, frameworks for automation, and specialized insights into various areas like threat intelligence and deep web research. Notable features include a structured quick index for easy navigation, a focus on ethical guidelines, and complementary resources like Abster Intelligence for private workspace management.

OSINT Custom Search Engines (CSE) is a repository that consolidates various custom search engines tailored for open-source intelligence (OSINT) tasks across multiple platforms and data types. This tool primarily serves investigators seeking enhanced searching capabilities on social media, public records, and other digital repositories, offering specialized engines for users to effectively search for specific information like names, social media accounts, and sanctioned entities. Notable features include a wide assortment of manually tested CSEs, integration with popular OSINT methodologies, and community contributions for ongoing updates and improvements.

OSINT for Countries V2.0 is a comprehensive collection of open-source intelligence tools and resources, organized by country, aimed at supporting fact-checkers and digital profilers. The repository features a standardized format for categorizing resources, covering various domains such as legal information, public documents, personal identifiers, and more. Notably, it encourages community contributions to keep the content current and relevant, filling a gap left by outdated collections.

OSINT Kit is a comprehensive repository of tools designed for Open Source Intelligence (OSINT) that aids researchers, security professionals, and enthusiasts in collecting publicly accessible information from the web. The tool categorizes resources into various domains, such as data breach searches, social media intelligence, and image analysis, facilitating streamlined access to a wide array of OSINT methodologies. It is built using Astro and Starlight, with contributions encouraged from the community.

The "osint-namecheckers-list" repository provides a comprehensive catalog of curated tools for username searches, account discovery, and username availability checks across various social networks and websites. Notable features include a wide array of open-source tools with capabilities such as extensive site coverage, batch processing, custom reports in multiple formats, and advanced filtering options, enhancing operational efficiency in OSINT workflows. The repository focuses specifically on username-related tools, ensuring that users have access to effective and specialized resources for namechecking.

The OSINT Toolkit is a web-based platform designed for conducting comprehensive open-source intelligence (OSINT) investigations using various tools and methodologies. Key features include GitHub profile analysis, DNS reconnaissance, WHOIS history tracking, and integrations with external resources to uncover emails, phone numbers, and compromised accounts. Built with FastAPI and TailwindCSS, it emphasizes user experience while providing extensive data retrieval and analysis capabilities.

OSINT-Tools-Russia is a curated collection of open-source intelligence tools specifically designed for conducting investigations related to the Russian Federation. The repository features a variety of categories including public data portals, legal entities, cadastral maps, vehicles, and social information, with most tools available primarily in Russian. Notably, some resources require specific browser configurations for optimal use, thereby suggesting a preference for tools that integrate built-in certificates like Yandex-browser.

OSINTai is an advanced AI-powered web crawler designed for Open Source Intelligence (OSINT) professionals, enabling efficient and accurate intelligence gathering from various web sources. It features high-performance asynchronous crawling, intelligent proxy management, and AI-driven content analysis, allowing for comprehensive extraction of indicators such as emails, domains, and social media handles, while ensuring operational security through stealth techniques and duplicate content detection. Notably, OSINTai includes a scoring system that prioritizes data based on risk assessment and indicator density, enhancing the relevance and utility of the gathered intelligence.

OSINT Intelligence is a comprehensive repository of Open Source Intelligence (OSINT) tools designed for cybersecurity professionals, researchers, and investigators. It categorizes various intelligence resources such as domain analysis, social media monitoring, and threat intelligence, facilitating streamlined access and contribution through a structured markdown format. Notable features include its organized tool listings by category and a collaborative framework encouraging community contributions.

People-Search-OSINT is a comprehensive resource tool that aggregates various free people search websites primarily focused on the UK and the US. It includes links to numerous data brokers and public record services that provide information such as contact details, background checks, and electoral rolls. Notable features include a diverse selection of services designed for different use cases, ranging from family history research to social media profile searches.

Postleaks is a cybersecurity tool designed to identify sensitive data leaks in the public library of the Postman API platform. It allows users to search for specific keywords within public API assets, using customizable options such as strict matching and workspace extension, while utilizing the Whispers library for secret detection. Notable features include output formatting, keyword file input, and the ability to display results in JSON format, along with various filters for refinement.

psn_monitor is a Python-based tool designed for real-time tracking of Sony PlayStation Network (PSN) player activities, allowing users to monitor online status, game play, and detailed player profiles. It features capabilities such as email notifications for various player events, CSV logging of user activities, and configuration flexibility through environment variables and command-line arguments. The tool is optimized for functionality with minimal object-oriented programming, ensuring ease of use for automation and monitoring purposes.

The Public-Scripts repository offers a collection of PowerShell scripts designed for enhancing identity security and automating tasks within Microsoft 365 and Windows infrastructure. Notable features include scripts for Entra ID credential enumeration, Exchange app access policy audits, and OSINT tools, all aimed at streamlining enterprise management and security auditing processes. This repository consolidates tools previously available on TechNet Gallery and provides links to companion blog posts for additional context and usage guidance.

PyAhmia is a command-line tool that allows users to search for hidden services on the Tor network by querying the Ahmia.fi search engine without the explicit requirement of using Tor. Notable features include the ability to export search results to CSV, enable or disable routing through Tor, cache responses for faster searches, and filter results by time period and limit.

SearchPhone is a robust OSINT tool designed for retrieving linked phone number information by leveraging multiple APIs to aggregate data from various sources. Key features include phone number validation, simultaneous searches across Google and DuckDuckGo, GitHub code searches, social media mentions on Reddit, carrier information retrieval, and automated report generation in both JSON and PDF formats, all executed with efficient parallel processing for improved speed.

Security Suite is an open-source toolkit designed for comprehensive OSINT reconnaissance, web security testing, API security assessments, and compliance checks, all enhanced with AI-powered analysis capabilities. It features 11 OSINT modules, six web scanners, and four API security tools, along with integration for SIEM systems, scheduled scans, and a REST API for programmatic access. The tool simplifies setup across multiple operating systems and allows for customization of AI models and tool options during installation.

SINARC (Sistema Integrado de Análise de Redes Complexas) is an experimental open-source program designed for data analysis of public sources by generating graphs. Its primary use case is to empower citizens to exercise social control over public administration in line with constitutional rights and the Law on Access to Information. Notable features include integration with various databases, interactive tutorials, and a command alphabet, facilitating user engagement and comprehensive data analysis.

Social Media ID Cheatsheet is a tool designed to help users identify unique profile IDs for various social media platforms using source code analysis and OSINT techniques. This tool is particularly valuable for digital forensics and monitoring, as it allows users to maintain access to accounts even after changes to usernames or display names, supporting both API integration and data analysis needs. Notable features include support for multiple platforms like Instagram, Threads, TikTok, and 𝕏, ensuring comprehensive coverage for user ID tracking.

Sovereign Watch is a self-hosted, edge-to-cloud intelligence platform designed for the fusion of multi-domain data, specifically high-velocity telemetry such as ADS-B, AIS, and OSINT. Its notable features include a "Pulse" architecture for real-time data processing and "Tiered AI" cognition, enabling comprehensive situational awareness while enforcing data sovereignty by operating on local hardware. The platform offers extensive monitoring capabilities through various pollers and an intuitive interface for data visualization and analysis.

The Telegram OSINT Toolkit is a sophisticated, locally operated tool designed for intelligence gathering on the Telegram platform, aimed at use cases in OSINT, cybersecurity research, and authorized law enforcement. Key features include advanced search capabilities, bulk monitoring, comprehensive data exports in multiple formats, member enumeration, and real-time monitoring, complemented by support for proxy and Tor integration, and persistent SQLite storage for efficient data handling.

tempolocus is a time-series analysis tool designed to infer geographical location based on activity patterns observed over time. Its primary use case involves processing JSON-formatted data, including weekly and yearly activity buckets or timestamp lists, to generate probabilistic outputs that classify activity types and suggest probable countries and timezones. Notable features include support for various holiday profiles, comparative analysis against holiday calendars, and the ability to handle multiple input formats for versatile applicability.

TokIntel is an advanced TikTok OSINT framework designed to extract comprehensive profile information, including bios, creation dates, and full metadata from TikTok usernames. Notable features include fast API-based data retrieval using Apify's TikTok Profile Scraper, batch processing for multiple usernames, and the generation of JSON and text reports for structured data output. Its user-friendly CLI interface allows for efficient profile reconnaissance and secure API key handling.

Tornado-demix is a forensic research toolkit designed for the de-anonymization of Tornado.Cash ETH transactions by leveraging public on-chain data. It utilizes a probabilistic heuristic to correlate deposit and withdrawal patterns based on transaction timing and fixed-denomination amounts, outputting likely exit addresses for further investigation. Key features include support for single and multiple wallet analysis, denomination-profile matching, and cluster tracing, all performed without compromising cryptographic integrity.

Uncover is a Go-based tool designed to automate the discovery of exposed hosts on the internet by leveraging the APIs of multiple search engines like Shodan, Censys, and FOFA. Its primary use case centers around efficiently querying these services in tandem, allowing for input via standard input and stdout, while supporting multiple API keys and automatic key randomization for enhanced security and operational efficiency. Notable features include the ability to utilize awesome search queries and a broad array of supported search engines, making it versatile for cybersecurity professionals.

Project Akasha is a modular Telegram UserBot utilizing the Telethon framework, designed for context-aware interaction and automation. It features advanced capabilities such as localized voice synthesis through Edge-TTS, a two-stage music downloader, and various group management tools, making it suitable for users looking to enhance their Telegram experience with AI-driven functionalities. Importantly, caution is advised due to its heavy scraping and growth modules, which can lead to user bans if misused.

Visualize-External-Addresses is a Python tool that enables real-time visualization of external IP address connections for Windows devices, integrating netstat output with Whois data and displaying it through Google Earth. The tool allows users to monitor and analyze network connections by generating KML files for external addresses, which can be updated every few seconds for continuous tracking. Notable features include easy setup via Anaconda, location-based monitoring with latitude and longitude inputs, and the requirement of Google Earth for graphical representation.

Watson is a tool designed for searching social media accounts across various platforms by checking for availability of specified usernames. Its primary use case is to assist users in verifying the existence of usernames on multiple sites simultaneously, utilizing features such as custom output folders, timeout settings for requests, and adjustable request speeds. Additionally, it supports querying multiple usernames and provides options for detailed output management and configurations.

WhatsOSINT is a tool designed to retrieve and display information associated with a WhatsApp number, such as status and profile photo, utilizing data from an API. Its primary use case is for OSINT (Open Source Intelligence) investigations, allowing users to toggle between live checks or cached data to manage API costs effectively. The project includes customizable settings for check modes and data providers, making it adaptable to various user needs while ensuring compatibility with multiple operating systems.

`xint` is a TypeScript CLI tool designed for interacting with the X API, enabling users to search, monitor, analyze, and export data directly from the terminal. Key features include support for real-time filtered streams, comprehensive account analysis, and local data management while utilizing OAuth for secure operations. Like its predecessor twint, `xint` prioritizes the use of official APIs over scraping to facilitate research and automation tasks within the X ecosystem.

xint-rs is a command-line interface (CLI) tool designed for efficient and comprehensive real-time monitoring, search, and analysis of X (formerly Twitter) data. Built in Rust, it offers notable features such as full-text search, user and follower tracking, AI analysis, and a terminal user interface (TUI), all while ensuring minimal runtime overhead with a compact binary size of 2.5MB and startup time under 5ms. This tool requires X API access and supports myriad functionalities ranging from profile analysis to trend monitoring and tweet management.

YouTube-Video-OSINT is a tool designed for conducting open-source intelligence (OSINT) investigations on YouTube and other video platforms. It provides various resources and features for fetching deleted content, analyzing video metadata, and leveraging speech recognition and subtitle extraction tools. Notable functionalities include the ability to search for archived videos, manage channels, and utilize AI-driven tools for enhanced data extraction.

ZettelForge is an agentic memory system specifically designed for cyber threat intelligence (CTI) that captures and maintains critical contextual knowledge from analysts. It automates the extraction of CVEs, IOCs, threat actors, and MITRE ATT&CK techniques from analyst notes, resolves naming aliases, and constructs a comprehensive STIX 2.1 knowledge graph, facilitating intent-aware searches without the need for external APIs. This tool aims to mitigate the knowledge loss associated with analyst turnover, enhancing investigation continuity and effectiveness within security operations centers.

Ghostint Tracker is an advanced web-based OSINT investigation and mapping tool designed to centralize, visualize, and enrich investigations through a dynamic graph interface and synchronized global mapping capabilities. Key features include a hybrid AI mode for enhanced data processing, a comprehensive catalog of over 450 external OSINT tools for one-click access, and robust data export options for tracking and reporting progress.

Aarya is an advanced OSINT tool designed to validate email addresses and extract detailed digital footprints across various platforms, including social media and e-commerce sites. Notable features include a deep analytical capability that retrieves extensive metadata such as Google Maps reviews and account creation dates, as well as dynamic user-agent management to enhance stealth during scans. Aarya focuses on delivering high-quality identity intelligence rather than merely confirming existence, offering a sophisticated user interface and explicit reporting on scan results.

The AI OSINT Security Analyzer is a Streamlit-based web application that leverages AI technology, specifically Cohere's Command A model, to conduct comprehensive threat assessments for websites, IP addresses, and software vulnerabilities. It integrates multiple data sources such as Shodan, VirusTotal, AbuseIPDB, and CVE databases, providing users with actionable insights into security risks. The tool features a user-friendly interface and is open source, inviting community contributions to enhance its capabilities.

The Awesome-FOFA library serves as a comprehensive resource for utilizing FOFA to enhance asset discovery and threat intelligence through various methodologies and advanced scenarios. It provides guides for beginners, showcases techniques for efficient search practices, and explores capabilities in threat hunting and vulnerability analysis. Notable features include strategies for using fuzzy search, managing large asset inventories, and leveraging AI for attack surface assessments.

The Awesome OSINT MCP Servers repository provides a curated collection of Model Context Protocol (MCP) servers designed to enhance the execution of Open Source Intelligence (OSINT) tools. By integrating with large language models (LLMs), these servers enable users to perform complex queries easily and generate flexible reports, streamlining the OSINT process across diverse domains such as SOCMINT, network scanning, and threat intelligence. Notable features include extensive API integrations for various OSINT tasks and support for both free and paid tiers.

The Awesome Search Engines for Cybersecurity Researchers repository provides a curated collection of specialized search engines tailored for cybersecurity professionals. This resource highlights tools for threat intelligence, account compromise detection, and vulnerability scanning, with several entries offering API access for enhanced automation and integration. Notable features include the ability to search through extensive databases of leaked credentials, malware behavior, and domain intelligence, facilitating comprehensive investigations into adversarial activities and vulnerabilities.

BannerGrapV2 is an advanced network reconnaissance and vulnerability discovery tool designed for both offensive and defensive security operations, making it suitable for Red and Blue Teams, bug bounty hunters, and security auditors. Notable features include multi-threaded banner grabbing, extensive service fingerprinting, a robust vulnerability detection engine, and flexible reporting options in multiple formats, all powered by a performance-focused architecture enabling concurrent scans of up to 10,000 hosts.

The Axel Freeman GitHub repository offers insights and methodologies focused on leveraging AI in marketing, specifically for developers and product builders. It features a series of articles detailing practical applications of AI tools and strategies, emphasizing automation through the Freeman Framework, which integrates AI agents, data analytics, and content generation techniques to optimize marketing efforts. Notable features include a focus on real-world experiences, actionable advice without fluff, and the use of multiple AI models for enhanced marketing effectiveness.

Blue OSINT is an open-source intelligence tool designed for investigators and analysts to gather publicly accessible information from the internet. Notable features include username and email lookups, phone number searches, domain and IP WHOIS information retrieval, social media profile scraping, and dark web breach checks, all with the ability to export results in multiple formats. The tool aims to facilitate various OSINT activities while emphasizing lawful use.

Brahmastra OSINT is a comprehensive open-source intelligence (OSINT) toolkit designed for collecting and analyzing data across various domains, including geospatial intelligence (GEOINT), signals intelligence (SIGINT), imagery intelligence (IMINT), and social media analysis (SOCINT). Its notable features include a wealth of resources and tools for visualizing geographic data, intercepting communications, analyzing social media trends, and processing imagery, making it accessible to researchers, analysts, and hobbyists alike.

Clearfront is an open-source OSINT (Open Source Intelligence) tool that leverages AI to analyze digital footprints across more than 3,400 public data sources, providing users with comprehensive reports and interactive evidence graphs based on input such as emails, usernames, or IP addresses. It supports multiple interfaces including a terminal REPL, CLI, web console, and MCP server, while integrating with various AI backends to ensure accurate results without hallucination. Key features include parallel tool execution, extensive modular tools, and the capability to run fully offline with user-provided API keys.

Coeus OSINT ToolBox is a comprehensive open-source intelligence platform designed for effective information gathering from various open sources. It provides a wide range of tools for conducting background checks, investigating individuals or usernames, and accessing anonymous communication services, as well as resources for searching both the surface and deep web. Notable features include tools for web resources, social media investigation, and guides on managing personal information online, making it a versatile tool for both individuals and organizations engaged in OSINT activities.

Company-Business-OSINT is a collection of tools designed for conducting open-source intelligence research on businesses, with a primary focus on UK companies. The repository provides links to various resources including official registries, company databases, and email finders, enabling users to access both free and paid data sources effectively. Key features include direct searches from Companies House, access to global trade data, and comprehensive tools for identifying corporate ownership and financial information.

Crawllama is an AI research agent designed for open-source intelligence (OSINT) and multi-hop reasoning, capable of executing complex queries through advanced agent selection and adaptive processing. It features integration with local large language models, a REST API for extensibility, and performance optimizations for parallelization and large context support. Notable features include a multi-hop reasoning workflow, intelligent caching, and a plugin system that enhances its adaptability for various intelligence tasks.

Crimson-Wolf is an all-in-one utility suite for Discord, designed primarily for educational and research purposes, offering functionalities related to Discord tokens, webhooks, and bots. Key features include tools for token management, OSINT capabilities, and a user-friendly interface, with compatibility for both Windows and Linux operating systems. This tool is frequently updated and emphasizes security, advising users to download only from the official GitHub repository to avoid malicious versions.

CRLJ is a comprehensive resource repository aimed at cybersecurity professionals, students, and enthusiasts, providing structured pathways for learning and skill development in the field. It features resources such as educational materials, a cybersecurity roadmap, and foundational knowledge to support various learning stages. Notable features include links to essential cybersecurity topics, curated book lists, and guidance on office ergonomics for a healthy work environment.

The Cyber Threat Intelligence Report repository serves as an independent archive for collecting and publishing open-source intelligence (OSINT) reports focused on defensive research, supply chain attacks, zero-day vulnerabilities, and threats associated with North Korean APT groups. Notable features include in-depth analyses of recent incidents impacting sectors such as Web3 and data security, presented in multiple languages (Korean, English, Japanese, and Chinese) to cater to a diverse audience.

Cyberbro is a user-friendly application designed to extract Indicators of Compromise (IoCs) from unstructured input and assess their reputation using various threat intelligence services. Key features include automatic parsing of logs, multithreaded processing for rapid checks, comprehensive reporting capabilities, and integrations with major cybersecurity tools. Its lightweight deployment and support for advanced domain and abuse information make it suitable for both beginners and experienced analysts seeking efficient IoC management.

DorkTerm is a web-based tool for security researchers that facilitates the execution of Google Dork queries to identify potential vulnerabilities in a specified domain. It automates the generation and opening of 15 predefined Google Dork searches in separate tabs, enabling quick reconnaissance of common vulnerabilities, such as login pages and exposed files. The tool is lightweight and user-friendly, providing guidance for enabling popups to enhance its functionality.

Email-&-Username-OSINT is a tool designed to assist users in collecting open-source intelligence (OSINT) related to email addresses and usernames. Its primary use case involves identifying potential email addresses or usernames through a variety of methods, including manipulating URL structures and utilizing various online resources. Notable features of this tool include the compilation of numerous third-party resources and tools that facilitate email and username searches, enhancing the effectiveness of the OSINT collection process.

Favihunter is a cybersecurity tool designed for security practitioners to identify and discover related internet assets through the analysis of favicon hashes across multiple search engines. Its primary use case involves downloading a favicon from a provided URL, computing various hash representations, and generating search URLs for platforms like Censys, Shodan, and VirusTotal, among others. Notable features include the ability to analyze single URLs, multiple URLs from a file, and local favicon files, as well as a clean-up option for temporary files.

Focal Harvest is a lightweight Python CLI tool designed to automate web research and OSINT collection, streamlining the process of querying, scraping, and synthesizing data from multiple online sources. Its notable features include zero-config local statistical fallbacks for offline operation and a bidirectional mobile bot listener for real-time interaction via Telegram and Discord. The tool significantly enhances efficiency by automating repetitive manual tasks, enabling users to generate structured reports with minimal setup and rapid execution.

Fredirect is a Node.js tool designed to facilitate the development of applications with integrated proxy, Tor, and threat detection capabilities. It leverages the latest version of pnpm for package management and provides a streamlined setup process for developers. Notable features include support for version management through .nvmrc and the use of corepack to enable efficient dependency handling.

GHOST is a self-hosted OSINT investigation management system designed for individual investigators and researchers, offering a structured alternative to traditional spreadsheet-based tracking. Notable features include comprehensive people management with role-based categorization, interactive relationship visualization for entity networks, and a global intelligence map for geocoded location tracking. The tool emphasizes ease of use with a modern interface while enabling customizable case management capabilities.

github_monitor is a real-time GitHub OSINT tool designed to track various user activities such as profile updates, repository engagement, and follower changes, with instant notifications via email and webhooks. Its notable features include comprehensive tracking of new GitHub events, detecting when a user blocks or unblocks you, saving all activities with timestamps to CSV files, and support for both public and enterprise GitHub environments. Additionally, it facilitates easy integration with notification services like Discord and ntfy.

God's Eye View is an open-source spatial intelligence tool that visualizes live data on a photorealistic 3D globe, incorporating public information regarding flights, vessels, and other elements. Its primary use case is to provide an interactive experience that allows users to explore real-time spatial data in an engaging, cockpit-like interface. Notable features include the ability to inspect code, integrate public data sources, and a visualization that enhances user understanding of global activity.

H4X-Tools is a modular, terminal-based toolkit designed for open-source intelligence (OSINT) gathering, reconnaissance, and web scraping, developed in Python to operate on both Linux and Windows. Its primary use case includes advanced data extraction and analysis from platforms like Instagram, as well as comprehensive searches for usernames, emails, and phone numbers across various databases and services. Notable features include support for multiple data formats for export, configurable queries with customizable parameters, and integration with external libraries for enhanced functionality.

The Hacking-Social_Media-Accounts repository provides templates and configurations for the GoPhish phishing toolkit, facilitating the creation of deceptive landing pages and email templates aimed at capturing user credentials for social media platforms. Notable features include dedicated templates for Instagram login pages and security emails, along with instructions for setting up these tools effectively to simulate phishing attacks. This repository serves as a resource for security professionals and ethical hackers to test and enhance organizational security awareness.

Haylxon is a high-performance, minimalistic screenshot tool designed for capturing web pages using Chrome's headless mode. It supports both local and remote browsers, facilitating features such as tab pooling for efficiency and the ability to execute tasks in parallel. Users can generate flexible outputs, including various image formats and HTML reports containing detailed metadata about the screenshots taken.

Horus is a comprehensive investigative tool designed to assist users with data compilation and API interactions, serving as a pre-operations assistant. It features a modular architecture allowing for API configuration, functionality checks, and integration with services like Shodan, while requiring specific CLI tools for additional capabilities. The tool aims to streamline investigations by providing essential data management and interaction tools in one package.

Intel Codex is a comprehensive operational manual designed for digital investigators and security analysts, emphasizing OSINT methodologies and security protocols. It features over 40 standard operating procedures (SOPs), guides for various social media platforms, and case studies that illustrate practical applications in real-world investigations. Notable elements include legal and ethical compliance frameworks, detailed investigation techniques, and a focus on malware analysis and penetration testing methods.

IRONSIGHT is a real-time open-source intelligence (OSINT) dashboard designed for monitoring active conflicts, specifically focusing on the Iran/Israel and Russia/Ukraine theaters. It aggregates diverse data sources, including news, Telegram, military tracking, and financial markets, providing features such as live threat mapping, event categorization, and real-time alerts, all without requiring API keys. Built with modern web technologies, this tool offers a comprehensive view of current military activities and regional threats in an interactive format.

lastfm_monitor is a real-time tracking tool for Last.fm that facilitates the automated playback of songs in the local Spotify client while providing comprehensive analytics on user listening activity. Notable features include instant notifications for user presence changes, song metrics like duration and skips, persistent status tracking, webhook integrations for alerts, and a wrapped statistics generator that summarizes listening habits. The tool also supports configurable alerts via email and external services, making it a versatile option for music data management and engagement.

Leadminer is a contact management tool designed to extract, clean, enrich, and manage contacts for email and SMS campaigns. Its notable features include extracting contacts from mailboxes, cleaning email lists, enriching contact data with signature extraction, and exporting to formats like CSV and Google Contacts, along with the ability to send email campaigns using the user's email while providing analytics. This tool integrates with third-party services for enhanced functionality, making it suitable for both individual and business use cases.

Leaker is a passive leak enumeration tool that identifies valid credential leaks through various online sources, allowing searches by email, username, domain, keyword, and phone number. Notable features include support for multiple leak databases, deduplication of results, JSONL output for integration with pipelines, and built-in rate limiting with proxy support.

The LeakIX Python client provides a programmatic interface for interacting with the LeakIX platform, primarily utilized for retrieving and handling data related to internet leaks, subdomains, and other events in a structured manner. It supports both synchronous and asynchronous API calls, with responses encoded in a defined format, allowing users to leverage built-in methods for response handling and data transformation. This client is compatible with Python versions 3.11 through 3.14 and facilitates easy integration into Python applications through its straightforward installation and documentation.

Marple is an open-source tool designed to collect links to online profiles based on usernames across multiple search engines, providing functionality for social media investigations and online presence analysis. Its notable features include support for over ten search engines, proxy integration, CSV export of results, and plugins for enhanced metadata extraction and information gathering. By allowing customization of search parameters and reliability thresholds, Marple enables users to refine their queries for more accurate data retrieval.

The microsoft-ips repository provides systematically compiled text-file lists of Microsoft-owned IP address ranges and service endpoint domain names in multiple formats, tailored for integration with firewalls and DNS categorization. Notable features include categorization by geographic region and service, such as Worldwide, US Gov DoD, and China (21Vianet), alongside various formats like CIDR notation for IPv4/IPv6 and FQDNs with or without wildcards. This tool is essential for organizations needing to configure network security and access control for Microsoft services.

Navi Multitool is a high-performance terminal application designed for security testing and OSINT exploration, featuring a modern user interface and an extensive suite of specialized modules. Notable functionalities include Discord operations, advanced exploitation tools such as a Discord RAT and SQL scanner, and utilities for network mapping and cryptography. This tool caters to various use cases from automation of Discord tasks to targeted intelligence gathering and exploitation, providing users with a comprehensive arsenal for cybersecurity tasks.

NERD (Network Entity Reputation Database) is a software tool and service designed to acquire, store, and aggregate data on malicious network entities, primarily focusing on IP addresses. It provides users with an accessible interface to analyze and retrieve information about these threats, facilitating enhanced network security decision-making. Notable features include its comprehensive data aggregation capabilities and a dedicated instance available at nerd.cesnet.cz for user access.

Ominis-OSINT is a digital reconnaissance tool designed for gathering and analyzing publicly available information from various online sources. It notably offers features such as Google search filtering, an enhanced user interface, optimized threading for faster performance, and proxy validation for secure, anonymous searches. The tool specializes in username searches, providing detailed insights while mimicking human-like behavior to evade detection by anti-bot mechanisms.

OnionClaw is a multifunctional tool designed to provide AI agents with complete access to the Tor network and .onion services, facilitating OSINT, threat intelligence, and security research. Its notable features include automated dark-web crawling, continuous threat monitoring, and advanced credential surveillance with full identity rotation, all capable of operating in both an OpenClaw skill environment and as a standalone application. While intended for legitimate use, the tool's capabilities raise significant concerns regarding the potential for misuse in criminal activities and automated disinformation campaigns.

The OSINT repository by JambaAcademy is a comprehensive resource for enhancing open-source intelligence gathering and analysis, providing templates and tools tailored for a variety of professional applications. Key features include AI-driven methodologies, standardized reporting templates, and extensive coverage of over 100 OSINT tools across multiple investigative categories. This repository aims to streamline investigative processes while ensuring ethical standards and legal compliance.

OSINT Agent Skills is a structured knowledge base that equips autonomous AI agents with the methodologies and operating procedures of a senior open-source intelligence analyst. It provides curated resources including pivotal playbooks, tool registries, and reporting templates, ensuring AI agents conduct informed investigations while adhering to ethical standards and avoiding misinformation. This agent-agnostic framework enhances the rigor of OSINT tasks, automating data collection and enabling detailed, source-cited reports.

The OSINT CLI Tool Skeleton is a versatile framework for developing OSINT tools, enabling users to create functionality with minimal coding effort. It allows developers to implement a single plugin file that can be automatically utilized as a command-line interface (CLI), Python library, HTTP microservice (using FastAPI), and as an MCP server for AI agents, with built-in support for concurrency, proxying, and reporting in various formats. Notable features include auto-discovery of plugins, customizable reporting options, and an easy-to-use library API for synchronous and asynchronous operations.

OSINT Hub is a web-based resource that provides a comparative analysis of various OSINT tools and services, categorized into eight functional areas for efficient data collection and analysis. It offers a dataset that users can contribute to, ensuring the tool remains current with industry developments, while also enabling local development through Node.js and Yarn. Notable features include a structured dataset compliant with a strict schema, tools for local validation, and a responsive dev server for easy deployment.

OSINT-IA is an AI-powered tool designed to enhance OSINT analysis by streamlining data collection and reporting processes. Its primary use case revolves around leveraging AI capabilities for activities such as audio transcription, video analysis, and report generation. Notable features include a comprehensive list of AI chatbots integrated with WhatsApp and a variety of AI tools for programming support and research assistance.

OsintgramCXX is an advanced OSINT tool designed for collecting and analyzing publicly available information from Instagram with a focus on ethical use. Notable features include modding support for custom hooks and commands, device spoofing capabilities for network calls, manual interaction for user control, support for multiple proxies, and the ability to engage with multiple Instagram profiles simultaneously. Currently in active development, it aims to enhance user experience while adhering to legal and ethical standards.

OSIRIS is a real-time global intelligence dashboard designed for situational awareness, integrating over 40 open data sources including flight tracking, surveillance feeds, and natural disaster monitoring into a comprehensive interface. Its notable features include a multi-domain fusion of data, keyless-first architecture, extensibility for new data sources, and an AI analyst for generating insights and briefings, along with a built-in OSINT toolkit for reconnaissance activities. Built with advanced web technologies, OSIRIS provides smooth navigation and real-time updates across a variety of intelligence domains.

The phone-number-location-tracking-tool enables users to accurately track the real-time location of a phone simply by entering its number, utilizing GPS data extraction methods. It features an easy-to-use interface and a quick installation process, making it accessible for a wide range of users. The tool is designed for desktop use and provides high accuracy in location tracking.

Recons101x is a portable passive reconnaissance tool designed to enumerate hostnames from the Shodan service without requiring an API key or third-party libraries. It supports batch scanning, various output formats (including JSON), and optional DNS resolution, making it suitable for authorized testing on hosts. The tool operates across multiple platforms using Python 3 and includes configurable options like timeout settings and concurrent workers for enhanced usability.

Web Extension for saving a faithful copy of a complete web page in a single HTML file

SingleFile version compatible with Manifest V3

The Social Media Checker API is a multi-platform tool designed to verify the existence of social media accounts using usernames, emails, or phone numbers across major networks such as Facebook, Instagram, and Twitter. It offers features such as single and bulk account checking, customizable platform selection, and provides detailed JSON responses indicating the account status on each platform. Notable for its enterprise-grade reliability, the API can handle up to 10 accounts in a single request, making it suitable for both individual and organizational use cases.

Spotify Monitor is a real-time tracking tool designed to monitor friends' music activity on Spotify, allowing users to track listening habits, sync playback, and receive notifications for skipped tracks. It offers two primary functionalities: monitoring Spotify friends' activity and checking the health of Last.fm scrobbles, alerting users if their plays do not appear on their Last.fm profile. Notable features include presence detection, session statistics, and a versatile setup process via Python or Docker.

Spotify Profile Monitor is a powerful tool designed for real-time tracking of changes within Spotify profiles, including playlist updates, follower growth, and profile alterations. Its notable features include notifications via various channels, a detailed history log, and tools for exporting playlist data and searching for users, making it a comprehensive solution for Spotify users who want to stay informed about their accounts and those of their friends.

Steam Monitor is a powerful tool designed for real-time tracking of Steam players' activities, including monitoring their online status and gameplay. Notable features include detailed user information insights, automated email and webhook notifications, session continuity handling, and flexible configuration options, all of which allow users to gain comprehensive insights into a player's gaming behavior and interact with changes effectively.

Subfinder is a fast passive subdomain enumeration tool designed to discover valid subdomains for websites by leveraging curated online sources. Its primary use case is for penetration testers and bug bounty hunters who require stealthy and efficient subdomain discovery, featuring modules for resolution and wildcard elimination, multiple output formats, and resource optimization. Subfinder supports STDIN/OUT integration and offers customizable source selection, filtering options, and rate-limiting to enhance its performance and adaptability in various workflows.

SubreconGemini is a high-performance subdomain discovery tool that leverages Google Gemini AI, certificate transparency logs, and customizable wordlist brute-forcing to identify and validate live subdomains. Key features include hybrid discovery methods, smart validation techniques to minimize false positives, maximum concurrency through asynchronous operations, and the ability to generate structured output reports in various formats. The tool is designed for flexibility, allowing users to scan single or multiple domains while enabling optional AI-enhanced discovery capabilities.

Urx is a command-line tool that efficiently extracts URLs from OSINT archives like the Wayback Machine and Common Crawl, utilizing asynchronous processing for rapid data collection. Key features include keyless access to multiple sources, result filtering by various criteria, URL normalization, and support for multiple output formats, making it ideal for security testing and analysis applications. Additionally, it supports caching and incremental scanning to enhance performance and efficiency in URL collection tasks.

The VAPT Toolkit provides a comprehensive environment for vulnerability assessment and penetration testing, integrating over 50 third-party security tools and custom automation frameworks on an Ubuntu 22 platform. Notable features include a deterministic network exploitation orchestrator that automates host discovery and vulnerability verification using nmap and Metasploit, as well as a MITM browser autopwn orchestrator combining tools like bettercap and Responder for streamlined exploitation. The toolkit supports extensive automation in reporting, deliverable generation, and a wireless attack framework for versatile testing capabilities.

WayTrace is a domain reconnaissance tool that leverages the Wayback Machine to reconstruct the public history of a specified domain, extracting 43 categories of intelligence such as emails, subdomains, and exposed secrets. It operates entirely outside the target environment, ensuring that no direct interaction occurs, and it provides a detailed timeline of findings based on archive data, along with self-hosting capabilities and a user-friendly interface in both English and French. Notably, it features a guided scanning process and comprehensive configuration options for customized usage.

Webamon CLI is a command-line interface designed for utilizing the Webamon Search API, enabling users to perform extensive threat intelligence searches and threat hunting across the web. Key features include the ability to search a vast corpus by domain, IP, URL, or hash, on-demand website scanning, compromised credentials hunting, and tracking of phishing and malware campaigns. The tool also supports exporting results in various formats, making it a versatile solution for cybersecurity professionals.

Worldview is a full-stack situational-awareness dashboard that visualizes multiple live public data streams on an interactive 3D globe, including flights, satellites, earthquakes, traffic, and CCTV feeds. Notable features include customizable rendering modes (CRT, night-vision, thermal), real-time data aggregation, and a tactical interface with operational overlays. Built with modern technologies such as React, TypeScript, and CesiumJS, it provides a comprehensive tool for monitoring global dynamics in real-time.

DIVER OSINT CTF is an online competition focused on Open Source Intelligence (OSINT) that emphasizes the research and analysis of publicly available information across diverse domains, including military and public datasets. Notable features include a realistic approach to problem-solving, a wide range of difficulty levels for participants, and a commitment to ensuring that challenges reflect real-world scenarios without encouraging illegal activities. The competition aims to equip players with practical skills applicable to both OSINT CTF events and real-life situations.

X-Posed is a browser extension for Chrome and Firefox that displays relevant account information from X's "About this account" panel next to usernames while browsing. Its primary use case includes inline account details like country flags, source icons, and location warnings, along with features such as timeline filters, evidence sharing, and user control over displayed indicators. Notable features include full account cards and customizable data management, enhancing users' ability to analyze account context without identifying physical locations.

AI Tor.v69 is a hybrid neural intelligence core designed for managing a DAO, analyzing financial flows, and integrating advanced theoretical concepts of physics within the Web 3-4-5 ecosystem. Key features include a secure access module for digital sovereignty, autonomous governance analysis, and a quantum ledger for simulating financial flows in high-pressure environments, underpinned by a robust technical architecture utilizing modern web technologies.

Akashic is a self-hosted geospatial intelligence tool that consolidates diverse live public data, including aircraft, satellites, earthquakes, and weather, into a single interactive operational workspace, all without the need for API keys. It offers multi-layered mapping, concurrent reconnaissance capabilities, and a dynamic intelligence deck for real-time event monitoring and analysis. Notable features include extensive entity inspection, live public radio integration, and a variety of views such as flat and photorealistic maps.

BCHackTool is an all-in-one launcher and installer designed for penetration testing and OSINT (Open Source Intelligence) on Kali Linux and Termux environments. It features a menu-driven interface for easy access to a curated set of tools, automates the installation process, and includes helpful flags for managing scripts and tools. This tool streamlines the setup and execution of security testing tools while ensuring users operate within ethical boundaries.

The "claude-skills-journalism" tool provides a suite of modular agent skills tailored for journalists, researchers, and media professionals, facilitating the integration of AI into their workflows. It features interactive skill browsing, setup guides, and support for multi-agent workflows, enabling users to automate and enhance various journalism-related tasks, such as fact-checking, interview preparation, and editorial processes. Notably, it supports both Claude and Codex environments, allowing for customized commands and persistent session management to maintain continuous productivity.

CTI Expert is a cyber threat intelligence and open-source intelligence analysis toolkit that enables users to convert Claude into a trained intelligence analyst, utilizing over 74 commands across 49 techniques. This tool operates without requiring API keys for its core functionalities, facilitating structured intelligence collection and analysis. Notable features include the capability to integrate personal API keys for enhanced functionality and ease of use with automatic detection of the keys in the configuration.

Funstat API is a Python client designed for interfacing with the Funstat/Telelog API to retrieve and analyze Telegram user and group statistics. It supports both synchronous and asynchronous operations, offering a variety of methods such as retrieving user stats, group members, message counts, and nickname histories, making it suitable for developers looking to gather insights into Telegram data efficiently. Notable features include easy token management, customizable configurations, and the ability to handle user privacy settings gracefully.

The Global Anti Scam Organization blocklist provides a machine-readable list of scam URLs and IP addresses, updated daily, to assist in identifying and blocking fraudulent online activities. Utilizing Python and frameworks such as Selenium, the tool offers diverse formats for downloading the blocklist, including versions compatible with popular ad blockers and network-wide filtering tools. Its primary use case is to enhance cybersecurity measures by mitigating risks associated with online scams.

go-fasttld is a high-performance module designed for the extraction of effective top-level domains (eTLD) and subcomponents from various URL formats, including hostnames and IP addresses (both IPv4 and IPv6). Utilizing the Mozilla Public Suffix List, it supports private domains and offers a command-line interface (CLI) for easy extraction, while also providing functionality to handle internationalized label separators. Notable features include the ability to pretty-print results and robust handling of different URL structures.

The OpenCTI Helm Chart facilitates the deployment of the OpenCTI platform on Kubernetes, enabling organizations to efficiently manage and visualize cyber threat intelligence. Its primary use case is to structure and organize threat data in a scalable manner. Notable features include compatibility with Helm for streamlined installation and updates, and availability in both chart repository and OCI format for flexible usage.

MailAccess is a self-hostable OSINT platform designed for investigating email addresses by aggregating data from breach databases, social networks, DNS records, and the open web. It features an identity graph for correlating user accounts, a name consensus engine for verifying identities, and a domain email harvesting tool that discovers organization addresses from multiple data sources. The tool provides structured findings in various export formats and is specifically tailored for security researchers and penetration testers.

The Picarta Image Geolocalization API provides users with the capability to determine the geographic location of an image by analyzing its content and metadata. Its primary use case involves localizing images from either local files or URLs, returning details such as city, province, country, GPS coordinates, and confidence scores based on the provided image. Notable features include support for various location filters, flexibility in specifying the number of predictions, and the ability to search within defined geographic bounds.

Project Absence is an OSINT tool tailored for system administrators and security engineers, facilitating domain and server reconnaissance through modules such as subdomain and file discovery, as well as DNS data extraction. Its architecture allows for enhanced functionality via Lua scripting, while it adheres to an OSINT-only methodology by contacting each discovered entity just once to gather pertinent information. Notable features include support for clipboard integration and the ability to run the tool via Docker, alongside standard Rust installation methods.

The `public-dns-servers` repository provides an up-to-date list of verified public DNS servers, filtered for reliability and performance. Its primary use case is to facilitate automated tasks or Open Source Intelligence (OSINT) activities that require dependable DNS resolvers. Notable features include weekly updates via a CI/CD pipeline and strict criteria for server validation based on response time and accuracy.

RivalSearchMCP is a deterministic research server that provides a comprehensive toolset to search, fetch, score, and compare information autonomously across multiple domains, including web, social platforms, news, academic databases, and code repositories. It features nine specialized tools with capabilities like auto-quality scoring, conflict detection, and structured output for seamless integration with AI models. The server operates without the need for API keys, ensuring accessibility and ease of use while maintaining production-level hygiene through rate limiting and built-in observability.

Scope Intelligence is a self-hosted OSINT research platform designed for collecting, retrieving, and analyzing public web evidence to produce attributable company intelligence. It features versioned sources with citations, relationship mapping among entities, and a comprehensive review process, ensuring operators have traceable evidence linked to their findings. Additionally, the tool emphasizes security and operator control, offering customizable data collection environments and robust diagnostic capabilities.

The Threat Actor Usernames Scrape repository collates usernames from various cybercrime forums for threat intelligence purposes, providing a resource for cybersecurity professionals to enrich their investigations or utilize as password lists. Notable features include the large dataset of over 942,000 usernames, along with the potential for integration into Threat Intelligence Platforms (TIPs) for enhanced tracking and analysis of threat actors across different environments. The repository is designed to be collaborative, encouraging contributions to keep the information current and comprehensive.

TIA is an autonomous AI security operations platform that utilizes 30 specialized AI agents for continuous threat detection, OSINT intelligence, and incident response without human intervention. Noteworthy features include real-time threat monitoring with a proven record of blocking over 563 attacks, zero breaches, and a cost-effective operation rate of $405 per month, making it ideal for organizations seeking robust cybersecurity solutions.

Vanguard-Map is a real-time 3D tactical intelligence mapping tool that visualizes global moving entities such as ships, aircraft, satellites, and more, rendered as a dynamic terrain cloud. Its primary use case is to provide situational awareness for maritime and aerial traffic analysis, featuring high-resolution terrain options, scenario simulation capabilities, and live data integration through external APIs. The application supports customizable time control for simulating various scenarios and performs physics validation checks to ensure data integrity during movements.

Velocity is a self-hosted mapping tool that provides users the ability to visualize and rewind the historical positions of aircraft, ships, and other entities without the reliance on third-party API keys or services. Its notable features include the ability to maintain an unlimited history on local storage, a comprehensive evidence locker with SHA-256 hashing for provenance tracking, and an integrated MCP server for AI querying. The tool emphasizes data integrity and user ownership, presenting a trustworthy interface for monitoring various live feeds and events.

AEGIS is a strategic recon and situational intelligence platform designed for live operator workflows, utilizing a Next.js-based web application. It features a comprehensive suite of tools including live global tracking layers, open-source intelligence workflows, browser-accessible recon tools, AI-generated analysis, and the capability to produce fusion dossiers, making it suitable for security, geopolitical, and crisis-monitoring applications. The platform emphasizes a user-friendly interface for fast situational assessments, integrating various data layers and alerts within a single operational workspace.

Advanced Secret Finder is a high-performance API key scanner developed in Rust, capable of detecting over 70 API key patterns while employing concurrent scanning of GitHub repositories. It features live validation of keys against major platforms, intelligent false positive filtering, and separation of public and private findings to enhance security during analysis. Additionally, it offers a user-friendly interactive mode and integration with GitHub Actions for seamless automation in continuous integration workflows.

as-ip-blocks is a tool that provides daily-updated datasets of autonomous systems (AS) with active BGP prefix announcements, available for download in JSON and plaintext formats. Its primary use case includes network analysis, firewall rule creation, and tracking IP ranges associated with specific organizations, with notable features such as aggregated prefixes, historical change tracking via Git history, and bulk download options.

as-metadata is a comprehensive dataset tool that provides detailed metadata for autonomous system numbers (ASNs), including organization names and country codes sourced from regional internet registries. Its primary use case is for offline lookups, network analysis, and threat intelligence, offering features like automatic updates based on source data changes and formatted data in both JSON and CSV. Notable enhancements include fields for categorization, network roles, and connectivity statistics, permitting thorough organizational mapping and analysis without API constraints.

Citizen Intelligence Agency (CIA) is a Swedish political intelligence platform designed to enhance democratic transparency and accountability through evidence-based analysis and Open Source Intelligence (OSINT) methodologies. Primarily aimed at monitoring the activities of the Riksdag, Government, and public agencies in Sweden, it features robust data analysis capabilities, a commitment to independence and non-partisanship, and is aligned with Information Security Management Standards (ISMS). Noteworthy attributes include comprehensive documentation, annual reviews, and a strong focus on secure software development practices.

CloudCheck is a Rust-based tool designed to determine if a given IP address or hostname is associated with a cloud service provider. It features a command-line interface (CLI), a Rust library, and Python bindings, with dynamic updates for cloud provider signatures and CIDR data from community sources. The tool also supports a REST API for programmatic access, allowing for integration in various applications.

ContrastAPI is a comprehensive security intelligence tool designed for AI agents, providing grounded answers regarding vulnerabilities, threats, and attack surfaces by aggregating data from authoritative sources like the NVD and CISA KEV. It features a robust REST API with over 60 endpoints for CVE/KEV/CWE lookups, exploit probability scoring, domain and IP investigations, IOC enrichment, and code-security checks, while also facilitating seamless integration through SDKs for Python and Node.js. Notably, it is free to use without requiring API keys or signups, offering 55 tools and 7 resources for effective security analysis.

Crypto-Scam and Crypto-Phishing Threat Intel Feed provides a continuously updated feed of active cryptocurrency phishing and scam websites, helping organizations block these threats effectively. The tool is designed to be compatible with various blocking solutions, including Pi-hole and firewall systems, and features a daily update cycle to ensure users have access to the latest malicious domains. Additionally, it offers insights into domain characteristics, such as the prevalence of certain TLDs among scams, and supports reconnaissance activities for identifying rogue infrastructure.

The Excalibra cybersecurity repository serves as a comprehensive educational resource designed to enhance skills in ethical hacking, penetration testing, and cybersecurity fundamentals. Key features include detailed sections on Open Source Intelligence (OSINT), the use of Nmap for network discovery and security auditing, insights into social engineering tactics, and guidance on employing Kali Linux, making it a valuable tool for individuals seeking a structured learning path in cybersecurity.

DeepState Map Data is a tool that provides daily updated GeoJSON files representing the Russian-occupied territories of Ukraine, facilitating geographic analysis. It includes a unified, compressed dataset that consolidates historical geometries with their respective update dates, enabling users to easily access the most current and comprehensive data. Notable features include automated daily updates via GitHub Actions and a structured data format that supports various access methods, including Python and terminal utilities.

The Epstein repository is a monitoring tool designed to track changes to the Department of Justice's released Epstein Files, which contain extensive documentation of a global child sex trafficking network. It automatically checks for new, removed, or altered files every six hours, maintaining a comprehensive changelog and offering interactive data visualizations, such as flight maps and passenger networks. Key features include a searchable database of individuals connected to the case and detailed analysis of flight routes associated with the trafficking.

The EU Parliament Monitor is a Political Intelligence Platform designed to enhance transparency and accountability in the European Parliament. Its primary use case involves providing AI-generated news and detailed insights related to legislative activities affecting Europe’s 450 million citizens, available in 14 languages. Notable features include a comprehensive Political Intelligence Hub, an API for developers, and a site map that ensures accessibility to content across various languages.

The European Parliament MCP Server is a TypeScript implementation designed to facilitate structured access to European Parliament Open Data for AI clients, including handling various data regarding Members of the European Parliament (MEPs), legislative sessions, and parliamentary activities. Its notable features include advanced analytical tools for MEP influence scoring, coalition analysis, legislative scoring, and attendance trends, all while ensuring compliance with ISMS and GDPR standards, making it suitable for intelligence applications in OSINT contexts.

GhostIntel v2.5 is an advanced OSINT (Open Source Intelligence) framework designed for cybersecurity professionals and digital investigators to gather and analyze public information without the need for API keys. Notable features include support for 8 countries, batch processing capabilities, breach detection, and risk scoring, along with a user-friendly web interface that allows for intuitive multi-target scans across 129+ platforms. This tool is optimized for uncovering online footprints, enhancing threat intelligence, and conducting comprehensive digital reconnaissance.

IntelOwl is an open-source Threat Intelligence management tool designed to provide comprehensive threat data regarding malware, IP addresses, and domains through a single API request. It features a fully-fledged REST API, a built-in graphical user interface for data visualization, and a modular plugin framework that allows for integration with various analyzers and connectors, facilitating automation for security analysts. Its scalability and speed in retrieving intelligence data make it suitable for enhancing the efficiency of security operations centers (SOCs).

The IP Fraud Database is an open-source tool that provides a continuously updated list of over 750,000 confirmed malicious IP addresses and networks, with refresh intervals of just 30 minutes. It features individually verified threat categories and infrastructure types, allowing easy integration into security systems such as firewalls and web application firewalls (WAFs) without restrictions. Additionally, the community-driven aspect enables users to report and contribute new malicious IPs, enhancing the database's effectiveness in combating cyber threats.

Ip-tracker (Chakravyuh) is a reconnaissance framework designed for red teaming and security research, offering a fusion of passive OSINT techniques with advanced social engineering features. Its notable capabilities include auto-tunneling, real-time alerts to Telegram, and comprehensive device fingerprinting, all without manual port forwarding. The tool facilitates IP intelligence, phone number validation, and multi-threaded port scanning, enhancing the efficiency of data collection and target analysis.

OSINT NET Auditor is a desktop IP and port scanner application developed using Tauri, primarily for scientific and educational purposes. Key features include a user-friendly installation process, customizability through building from source using Node.js and Rust, and the capability to detect potential security vulnerabilities in network configurations. The app aims to provide an accessible tool for users interested in network auditing and security assessment.

kafSIEM is an edge-ready operations intelligence tool that monitors Kafka agent traffic and OSINT feeds to build an evidence-linked entity graph stored in SQLite. It provides an analyst workflow through a web desk and a typed OpenAPI, facilitating the tracking of unmanned systems and SCADA infrastructures. Notable features include a configurable analyst desk, domain-specific ontology packs, and a streamlined deployment via Docker without the need for a cluster database.

The nzz-maps tool facilitates the scraping and analysis of territorial control data related to the Ukraine war, utilizing resources from nzz.ch and liveuamap.com. It automates daily updates through GitHub actions and offers API endpoints for querying areas, battalions, and annotations. Notable features include an interactive Jupyter notebook for data analysis and visual representations of territorial changes over time.

Open-source Aviation is a comprehensive catalog of aviation-related open-source projects and datasets, providing access to a wealth of information such as ADS-B data, airport details, weather data, and tools for various aviation applications. Key features include community-driven resources, statistical data, and tools for aeronautic calculations, making it a valuable repository for developers and aviation enthusiasts looking to leverage open-source data for analysis and development. The project encourages contributions and continuous expansion, fostering collaboration in the aviation software community.

OpenCTI is an open-source platform designed for managing cyber threat intelligence, enabling organizations to structure, store, and visualize both technical and non-technical information about cyber threats using a STIX2-based knowledge schema. Its notable features include a GraphQL API, integration capabilities with tools like MISP and TheHive, and functionality for data import and export in various formats, promoting comprehensive analysis and understanding of cyber threat data. The platform supports enhanced user experience through its modern web application and offers both Community and Enterprise editions with varying levels of features.

OpenOSINT is an OSINT agent designed for security researchers and analysts, featuring 19 investigation tools accessed through a natural-language interface. It can be utilized as a REPL, CLI, MCP server, or web UI, with notable capabilities including credible execution of tool calls, ensuring accurate data retrieval without hallucinations. The tool also integrates seamlessly with services like IP2Location for enhanced IP tracking and RapidProxy for efficient data collection.

OpenTrace is an offline desktop application designed for organizing and analyzing Open Source Intelligence (OSINT) investigations. It features a visual investigation board that allows for extensive customization, including editable relationship labels and a task management system, while ensuring complete user privacy without any online dependencies. Key functionalities include a global OSINT tool library, automatic saving, cross-platform compatibility, and the ability to export data in both PNG and JSON formats.

P2PBlocklists is an extensive repository designed for IPv4 address lookup, enabling users to map and filter IP addresses based on their associated countries or organizations. This tool is particularly useful for cybersecurity applications such as denying or allowing traffic from specific providers, OSINT investigations, and implementing firewall rules to enhance network security. Notable features include a comprehensive database of over 3 billion public IPv4 addresses, compatibility with popular firewall solutions, and customizable lists to suit organizational needs.

The phishing_kits repository provides an archive of phishing kits collected from suspicious domains identified by phishunt.io. Its primary use case is for research and OSINT purposes, offering a structured layout for easy access to these kits while maintaining the original capture format. Notable features include organization by date and hostname, facilitating efficient analysis and study of phishing techniques.

Ransomposts is a tool that aggregates and displays ransom notes published by ransomware groups, with updates occurring twice daily from the source at ransomware.live. Its primary use case is to provide cybersecurity professionals and researchers with timely information about ransomware activities and trends. Notable features include automated data fetching and a dedicated publication interface accessible via a web link.

Rosint.dev is a Reddit user intelligence tool that allows users to search the complete post and comment history of any Reddit account, including those with private profiles and deleted content. Its notable features include dual-source search functionality from Arctic Shift and PullPush, a user-friendly interface for viewing posts and comments, date range filtering, and pagination—all without requiring user login.

ShortDot Evidence is a cybersecurity tool designed to catalog and analyze the domains registered under ShortDot SA's registry, focusing on domains that are primarily used for phishing activities. It provides a comprehensive enumeration of over 6.2 million domains, highlighting the high rate of brand impersonation and the absence of legitimate businesses among these registrations. Notable features include live statistics on phishing domain counts, daily auto-updated data retrieval, and detailed insights into the estimated revenue generated by ShortDot, making it a valuable resource for threat intelligence in the domain space.

Social Monitor is a comprehensive tool designed for aggregating and summarizing posts from various social networks and news sources, aiming to filter out noise and highlight the most relevant content based on user interests. Its notable features include customizable digest summaries on a daily, weekly, or monthly basis, and a robust backend architecture that supports various data ingestion and monitoring workflows. This tool is ideal for creating dashboards, monitoring topics or brands, and developing internal analytics for teams.

Spydi's ThreatIntel Feed provides aggregated threat intelligence blocklists sourced from various OSINT databases, honeypots, and C2 trackers, offering tiers of confidence for IP and domain blocklists. It features multi-source validation to enhance accuracy, automatic whitelisting of CDN IPs to minimize false positives, and is constructed for compatibility with tools like Pi-hole and AdGuard. The service is designed for rapid global distribution via Cloudflare R2, ensuring low latency access to threat intelligence data.

ThreatFox IOC IPs is a Python-based tool that generates a machine-readable IP blocklist sourced from ThreatFox, a project by Abuse.ch. It provides users with an updated blocklist of malicious IPs every hour, making it suitable for cybersecurity applications like threat intelligence and proactive network defense. Notable features include automatic updates and compatibility with the AIOHTTP library for efficient data handling.

THUMPERSECURE is a comprehensive collection of tools aimed at facilitating open-source intelligence (OSINT) and enhancing privacy by enabling effective digital footprint management and reconnaissance. It targets investigators, privacy-conscious users, developers, and operators, offering a streamlined, user-friendly experience with an emphasis on clarity and automation. Notable features include a live Code Cookbook providing access to utilities for recon and workflow processes.

TweetFeed is a dynamic tool that aggregates and provides feeds of Indicators of Compromise (IOCs) shared by the community on Twitter/X, facilitating cybersecurity research and threat intelligence. Notable features include programmatic access with various output formats such as CSV, RSS, MISP, and STIX, along with real-time updates every 15 minutes to ensure the data is current and relevant. This enables users to easily integrate the IOCs into their security workflows and monitoring systems.

URLInsane is a command-line tool designed for detecting domain typosquatting and facilitating OSINT (Open Source Intelligence) investigations across multilingual target domains. It generates and scans for potential typosquatting variants of a specified domain, allowing users to identify threats such as phishing and brandjacking, with features that include customizable variant generation, reporting options in various formats, and a focus on multiple target types beyond just domains.

The USOM Blocklists repository provides a daily updated collection of malicious URLs and IP addresses compiled by the Turkish Cyber Security Directorate. It serves as a resource for cybersecurity professionals to enhance their threat detection and prevention capabilities, offering various formats of blocklists suitable for different applications, such as ad blockers and network filtering tools. Notable features include multiple download options for blocklists and integration with GitHub Actions for automated updates.

VoidAccess is a self-hostable OSINT tool designed for transforming dark-web research queries into structured threat intelligence, catering to security researchers and threat-intelligence teams. Its notable features include parallel collection of diverse data sources, entity extraction, multi-source enrichment, relationship mapping, and various export formats, all operable via a CLI or a web UI with a Docker Compose setup. The tool emphasizes content safety and pipeline efficiency to ensure reliable threat investigation and analysis.

Watchboard is a multi-topic intelligence dashboard platform designed to provide real-time tracking and updates on conflicts, scientific advancements, and political histories. It features over 60 active trackers, AI-driven updates, interactive 2D and 3D visualizations, a public JSON API for integration, and the capability for users to create custom trackers easily. Enhanced with push notifications and a comprehensive source tier classification system, it serves as a powerful tool for monitoring critical global events.

XposedOrNot API provides real-time data breach monitoring by allowing users to check if an email or domain has been involved in known breaches. Its key features include easy access to breach lookups and analytics without requiring an API key for basic functionality, and comprehensive alerts for ongoing breach risks. This open-source API is designed for developers to integrate breach monitoring into their applications efficiently.

The "osint-notes" repository is a comprehensive catalog of Open Source Intelligence (OSINT) tools organized by various categories such as data extraction, email investigation, and social media intelligence. It serves as a valuable resource for cybersecurity professionals and researchers seeking to enhance their investigative capabilities with tools tailored for specific OSINT tasks. Notable features include detailed sections on each tool with descriptions, links, and tags to facilitate easy navigation and discovery of appropriate utilities for gathering and analyzing public information.

The tool described in the repository focuses on utilizing blockchain analysis to uncover relationships between dark web services and trace cryptocurrency transactions, specifically Bitcoin. It leverages tools like Fresh Onions and Wallet Explorer to identify digital fingerprints of onion sites and analyze wallet connections, thereby enhancing the investigative capabilities of OSINT activities related to cryptocurrency crimes. Notable features include the ability to link onion sites, trace transactions to exchanges, and reveal ownership connections among dark web platforms.

Clarity CLI is a multifunctional tool library developed in Python, designed for various tasks related to Open Source Intelligence (OSINT) and cybersecurity. Its notable features include comprehensive OSINT search capabilities, password management tools, and SQL vulnerability detection and exploitation functionalities. The tool aims to assist users in gathering digital information while emphasizing responsible usage.

Google Hacking Assistant is a Chrome extension designed to enhance security research by automating the injection of predefined and customizable hacking syntax into search engine results from platforms such as Google, Baidu, and Bing. It features an intelligent sidebar that facilitates advanced searches with over 11 built-in query types, custom syntax management, and bulk URL extraction capabilities, while ensuring user privacy through local data storage and no tracking. This tool aims to streamline the process of conducting legitimate security assessments and penetration testing.

rec0n is an automated toolkit designed for subdomain reconnaissance and sensitive data discovery, facilitating threat assessment and vulnerability identification. Key features include subdomain enumeration, live host detection, CORS vulnerability scanning, and sensitive file discovery with effective CLI output management. The tool integrates multiple utilities for enhanced functionality, allowing for organized output and historical data collection.

WITCHCRAFT is an advanced cybersecurity toolkit designed for professionals engaged in operational security (OPSEC), offering functionalities for hacking, OSINT, and forensic analysis. Key features include a modular command structure for tasks such as port scanning, data mapping, and searching for keywords across numerous platforms, bolstered by a comprehensive spellbook containing unique wordlists and databases for enhanced reconnaissance. This tool serves as an all-in-one cyberdeck system for efficient data-ghosting, network penetration, and threat analysis.

IntelTrace is an automated OSINT intelligence collection tool designed for Linux environments, featuring a hacker-themed Flask web dashboard. It facilitates the collection of public intelligence data on IPs, emails, phone numbers, and usernames, offering advanced functionalities such as a reputation scoring engine, timeline builder, and robust reporting capabilities in both PDF and JSON formats. Notable features include a dark web scanning capability and a user-friendly interface with animated effects, catering to investigators seeking legal OSINT solutions.

lit-bb-hack-tools is a command-line toolkit specifically designed for bug bounty hunters and penetration testers, focusing on web application security assessments. It includes a variety of tools that analyze URLs to extract critical information such as unique extensions, headers, status codes, and potential security vulnerabilities like DOM XSS sinks. Noteworthy features include processing input from standard input, producing comprehensive outputs, and supporting various common web testing scenarios.

Medium Miner is a tool designed for scraping articles from Medium, enabling users to read Medium blogs offline in their preferred Markdown reader. Its notable features include the ability to search for specific topics and download all articles from a specified author, making it a comprehensive solution for content consumption from Medium. The tool is free and easy to install and use, catering to users who wish to access Medium content without an internet connection.

PANDORA is a multifaceted cybersecurity tool designed primarily for offensive security tasks, including DDoS attacks, web scanning, and data extraction through various methods like SQL injection and doxing. Notable features encompass a range of hacking utilities such as a deface maker, database dump capabilities, network sniffing, and an auto exploitation tool, making it versatile for both penetration testing and malicious activities. The tool is presented with detailed installation instructions for multiple environments, including Linux and Termux.

Phishing AI Agent is an advanced tool designed to identify vulnerable employees within organizations, leveraging AI to automate the reconnaissance and campaign generation process for phishing simulations. Its notable features include dynamic knowledge fetching for real-time intelligence, multi-source profile enrichment, AI-powered vulnerability analysis, and SMTP integration for either simulation or real email delivery. This tool is intended for authorized security testing and employee awareness training only, providing security teams and red/blue teams with a robust method to enhance cybersecurity measures against phishing threats.

R4ven is a security research tool designed to demonstrate the potential risks associated with modern web browser permissions, illustrating how granting access can expose sensitive data such as location, camera inputs, IP addresses, and device information. It enables users to collect metadata in a controlled environment for educational purposes, emphasizing the importance of privacy hygiene and the dangers of social engineering attacks. Notable features include IP and GPS tracking, camera access, user-driven permission interactions, and integration with platforms like Discord for data presentation.

Tele-Trace is a local web-based OSINT tool for Telegram, designed for profile analysis and research investigations utilizing Flask and Telethon. Its key features include detailed profile scanning by username or phone number, user account age estimation, a trust score calculation based on multiple factors, and advanced username intelligence capabilities with bio analysis. This solution operates entirely on your device, ensuring data privacy without reliance on cloud services.

Worm-AI CLI is a command-line interface that provides access to Grok models via an unofficial reverse-engineered API wrapper. It is designed for flexible interaction with large language models, featuring a built-in jailbreak system for unrestricted responses and a fully customizable terminal UI. Its modular architecture allows for easy modifications and enhancements, making it suitable for research and educational purposes.

HDN-Locator is a Python-based GPS tracking tool designed to capture the exact coordinates of any device through a convincing fake YouTube video page that requests location access. Its notable features include real-time map visualization, anti-spoofing capabilities to detect fake GPS apps, and cross-platform compatibility across Windows, Linux, and macOS. The tool autonomously saves location data in JSON format, enhancing its usability for tracking purposes.

Host Scan is a professional network reconnaissance tool written in Python 3 that allows for high-speed scanning of open TCP/UDP ports on remote hosts, leveraging optimized concurrency for rapid results. It provides service identification for open ports, features a modular architecture for clean code separation, and incorporates CI/CD processes with automated testing and security analysis to ensure code quality. The tool is designed explicitly for ethical cybersecurity purposes and must be used only with explicit authorization.

IP-Tracker is an advanced OSINT tool designed for tracking and geolocating IPv4 addresses while enriching data with associated phone information. Its primary use case is to assist security analysts and technical consultants during the footprinting phase of penetration testing, enabling mass resolution and agile queries of network addresses. Notable features include integration with detection flows, modular architecture adhering to DevSecOps standards, and robust testing capabilities with automated unit tests.

s1c0n is a reconnaissance tool designed to simplify the vulnerability assessment process for web servers. Its primary use case includes automated scanning for WAFs, ports, subdomains, web directories, and content management systems, with the capability to customize user-agent strings and scan through proxies. Notable features include comprehensive auto-detection of server technologies, WordPress plugin enumeration, and an easy installation process, catering to various Linux distributions.

Buildware-Tools is a versatile cybersecurity multitool designed for tasks such as Discord automation, OSINT reconnaissance, network diagnostics, and cryptographic utilities, all accessible via a single terminal interface. It operates natively on both Windows and Linux, requires only Python for setup, and features an array of tools, including an IP port scanner, DNS lookup, and a website vulnerability scanner, with some functionalities accessible only after contributing to the project. Regular updates ensure continuous enhancements and the introduction of new features, while a plugin manager allows the integration of community-made plugins.

CyberTrace is an advanced OSINT (Open Source Intelligence) and cyber intelligence platform designed for security researchers, bug bounty hunters, and penetration testers. It consolidates various reconnaissance techniques such as IP geolocation, ISP lookup, and WHOIS information into a streamlined, cyberpunk-themed dashboard, facilitating faster and more efficient investigations. Key features include an interactive map for visualizing data and the ability to gather intelligence from public camera sources, enhancing situational awareness for security operations.

FexCam is a proof of concept tool designed for security research and education, demonstrating the exploitation of modern web APIs, including camera and geolocation functionalities, upon user consent. Its primary use case is to foster awareness of social engineering tactics and the importance of browser permission management, featuring capabilities such as media stream processing, system metadata extraction, and geolocation precision. Notable functionalities include integration with tunneling services like Ngrok and Cloudflare, enabling secure external access to local servers for demonstration purposes.

Hackify is a bash script designed for Debian-based systems that facilitates the rapid installation of penetration testing wordlists and tools with a single command. Its primary use case is to streamline the setup process for cybersecurity professionals and enthusiasts, offering ease of deployment for various pentesting utilities. Notable features include comprehensive installation commands, support for Docker installations, and optional enhancements like Firefox themes and addons tailored for security tasks.

InstaMailChecker is an OSINT tool designed to verify if a specific email is registered on Instagram. Its primary use case includes bulk processing of email addresses with support for saving results, utilizing options such as reading from a text file and integrating with GNU Parallel for enhanced performance. The tool is built on .NET 10 and provides a straightforward command-line interface for quick checks.

Phone Number Tracker is an advanced OSINT framework designed for comprehensive phone intelligence gathering, utilizing over 2650 lines of Python code. It provides features such as phone parsing and validation, live location tracking through multiple APIs, and extensive subscriber information. Notably, it includes capabilities for forensic reporting, case management, and deep OSINT checks across various platforms, making it a robust tool for authorized security research and educational purposes.

DARKSTAR v2.1 is a command-line penetration testing framework designed for security professionals, featuring 57 modular tools across various categories. Its key features include a plug-and-play plugin system, automatic plugin discovery, a matrix-inspired color-coded terminal UI, and support for threading and async operations, making it highly customizable and efficient for diverse security assessments. The toolkit is compatible with multiple platforms, including Kali Linux, Termux, Windows (WSL), and macOS, and requires only standard Python dependencies.

SimpleReconSubdomain is a passive and active subdomain enumeration tool designed for OSINT and reconnaissance workflows, leveraging async Python to query 50 sources in parallel without external shell dependencies. Key features include multi-probe wildcard detection, DNSSEC NSEC zone walking, TLS SAN extraction, and advanced scraping techniques, which facilitate comprehensive subdomain discovery and enumeration, along with subdomain takeover detection capabilities. The tool supports continuous monitoring and provides output in various formats, making it suitable for integration into automated security workflows.

INtrack is a multi-threaded internet crawler and security scanner focused on network reconnaissance and vulnerability detection. It supports various scanning types, including the detection of web applications, IoT devices, and exposures, while offering flexible target selection, customizable settings, and real-time progress visualization. Notable features include support for multiple scanner types based on CVEs, the ability to scan either specific IPs or subnets, and a customizable thread count for efficient scanning.

Logicytics is a forensic data collection tool designed for Windows systems, developed in Python to systematically retrieve and package extensive system data into a ZIP file for analysis. Its primary use case is to assist cybersecurity professionals in gathering sensitive information for forensic investigations. Notable features include its active development status and straightforward installation process, ensuring comprehensive data harvesting capabilities.

claude-code-pentest automates the penetration testing lifecycle using six specialized skills that range from reconnaissance to exploit chaining and report generation. Its notable features include subdomain enumeration, vulnerability discovery across web applications and APIs, cloud infrastructure analysis, and the capability to compose findings into comprehensive bug bounty reports—all implemented via 43 standalone Python scripts that require no external dependencies. The tool is designed for authorized security testing only and is integrated with Claude Code for user-friendly command execution.

The Cyber Intelligence Toolkit is a comprehensive resource designed for investigators and analysts that integrates manuals, playbooks, checklists, and appendices for digital investigations. It focuses on OSINT methodologies, digital forensics, AI content detection, and operational security, enabling users to conduct structured and effective investigations. Notable features include standardized investigation frameworks and practical guidelines, making it adaptable for both field operations and detailed analyses.

Dracula OS is a specialized Linux distribution based on Kali Linux, tailored for Open Source Intelligence (OSINT) and Cyber Intelligence investigations. It integrates a curated suite of OSINT tools and applications sourced from GitHub, facilitating streamlined deployment through an OVA file. Key features include extensive frameworks for reconnaissance, web intelligence, metadata analysis, and social media investigations, making it a comprehensive platform for cyber intelligence professionals.

LeakScope is a tool designed for the discovery and analysis of exposed services and data leaks using Shodan and ZoomEye, enabling users to search, triage, preview, and dump relevant information accessible without authentication. Notable features include dual-provider discovery, customizable queries, and a comprehensive database that supports multiple data types and export options, all housed within a user-friendly interface that visually represents data usage and search statistics. The tool facilitates the identification of potential threats and vulnerabilities in various services without the need for exploitation, making it suitable for security researchers and IT professionals.

OSINT360 is a GPT-5.2-powered assistant tailored for open-source intelligence (OSINT), digital forensics (DFIR), and cyber investigations, offering comprehensive support for intelligence operations including collection, analysis, and reporting. Its notable features include command-based interaction for expedited workflows, structured reporting formats, a tool-first approach favoring open-source tools, and adherence to compliance and ethical standards. The tool also facilitates adversary profiling, compliance with global cyber laws, and integrates real-time intelligence through live web lookups.

Pentest Toolkit is an advanced penetration testing framework designed for rapid and efficient security assessments, integrating over 100 industry-standard tools into both a Python suite for automation and a Bash interface for hands-on operations. Its primary use case includes comprehensive testing phases, from reconnaissance and web security to SSL/TLS analysis and network assessment, all culminating in professional report generation. Notable features encompass automated reporting in multiple formats, robust web application vulnerability testing, and streamlined reconnaissance processes.

RevEng.AI Radare2 Plugin enhances the Radare2 framework with AI-driven reverse engineering functionalities, including decompilation, function analysis, and binary similarity detection. It seamlessly integrates with existing Radare2 workflows, providing automated setup scripts across multiple platforms and the capability to utilize an external API for advanced analysis tasks. Noteworthy features include a straightforward installation process, automatic library path configuration, and the generation of necessary configuration files directly through Radare2 commands.

Reait is a toolkit designed for the analysis of compiled executable binaries utilizing the RevEng.AI API, primarily aimed at identifying similar components, vulnerabilities, and generating advanced YARA++ REAI signatures for binary files. Notable features include the ability to extract symbol embeddings, conduct similarity searches among executable programs, and support for stripped ELF and PE binaries in both GNU/Linux and Windows environments. The tool facilitates in-depth binary analysis through commands that submit executables, retrieve analysis results, and query a database for similar symbols.

SLAP (Secret Locator and Package-Analyzer) is a tool designed to streamline the discovery of sensitive information in SCCM deployment points by searching for secrets within files and downloading entire packages for analysis. Key features include the ability to report on secrets found using customizable regex patterns, inventory files in CSV format, and bypass secured datalibs for comprehensive scanning. SLAP enhances the efficiency of threat detection in SCCM environments by automating the retrieval and examination of data stored across application packages.

ThreatHunting-Keywords is a repository providing a comprehensive list of keywords to facilitate threat hunting activities in cybersecurity. It serves both blue teams and red teams, offering tools and methodologies for detecting and analyzing malicious activities that may evade automated security systems. Notable features include integration with SIEM tools like Splunk and ELK, DFIR optimized hunting strategies, and support for creating detections using YARA rules and SIGMA rules.

The ThreatHunting-Keywords-yara-rules repository provides a collection of YARA rules tailored for threat hunting sessions, enabling users to identify potential threats based on specific keywords associated with offensive and greyware tools. It features two main ruleset folders: one prioritizing broader detection coverage at the cost of performance, and another optimized for higher fidelity and efficiency, along with a Python script for cross-platform scanning capabilities. The rules are systematically organized and include specialized sets for different tool types while allowing for the identification of potential threats in various file formats.

URLCrazy is an OSINT tool designed for generating and testing domain typos and variations to identify instances of typo squatting, URL hijacking, phishing, and corporate espionage. Notable features include support for 17 types of domain variants, over 8000 common misspellings, compatibility with 1500+ Top Level Domains, and options for popularity estimation and keyboard layout configurations. The tool automates the detection of potential threats against domains by checking the validity and usage of generated typo variants.

AIRTBench is an autonomous AI red teaming agent designed to evaluate the adversarial capabilities of large language models (LLMs) through AI/ML Capture The Flag (CTF) challenges. It systematically targets LLM-based systems to exploit vulnerabilities, providing a standardized benchmark for measuring their performance in red teaming scenarios. Notable features include a modular architecture for extensibility, integration with the Dreadnode Strikes platform, and comprehensive documentation for setup and usage.

The "Awesome Black Hat Arsenal" repository is a curated collection of advanced cybersecurity tools presented at Black Hat Arsenal events, aimed at practitioners in red teaming, blue teaming, application security, and OSINT. It organizes tools by geographical location, year, and category, providing detailed descriptions, authorship, and GitHub links for each tool, facilitating easy access to cutting-edge security utilities. This resource serves as an invaluable reference for security professionals seeking to enhance their toolkit with the latest innovations in the field.

Chad is a tool designed to search for Google Dorks, allowing users to find indexed information on the web efficiently, utilizing Playwright's headless browser for bypassing common security measures. Its notable features include the Chad Extractor for data extraction and validation, file download capabilities, and options to handle Google’s frequently changing cookies. Additionally, it offers a broken link hijacking feature and is primarily intended for educational use in cybersecurity research.

EVA is an AI-driven penetration testing tool designed to aid users throughout the pentesting lifecycle with intelligent analysis, automated enumeration, and real-time vulnerability assessment. It features support for multiple AI backends, session management for persistent interactions, and an interactive interface for executing commands and analyzing results, thereby enhancing the efficiency of penetration testing efforts. This tool aims to assist, rather than replace, cybersecurity professionals by providing strategic guidance and quicker outcomes during engagements.

MCP Security Hub provides a collection of production-ready, Dockerized Model Context Protocol (MCP) servers tailored for offensive security applications, enabling AI-assisted security assessments and vulnerability scanning. With 38 MCP servers covering various domains like reconnaissance, web security, and binary analysis, it integrates over 300 security tools accessible through natural language commands via AI clients like Claude. Noteworthy features include a CI/CD-ready setup with GitHub Actions, minimal Docker images, and orchestration capabilities with Docker Compose for streamlined multi-tool workflows.

NekoCLI is a lightweight AI assistant for terminal environments that facilitates image and video generation, code creation, and command execution. It boasts features such as persistent chat history, a variety of operational modes including pentest capabilities, and visually formatted output. Designed for quick access and minimal dependency, NekoCLI allows users to handle media files and interact with an AI logic API for real-time assistance.

Nutcracker is an Android application analysis tool designed for security researchers, enabling the download of apps directly from Google Play and facilitating static and dynamic analysis to detect and bypass anti-root protections. Notable features include extraction of hardcoded secrets, insecure manifest analysis, and comprehensive OSINT reconnaissance, all of which culminate in a detailed technical PDF report. The tool also integrates an LLM-powered false positive filter for enhanced accuracy in its findings.

`offsec-ai` is a sophisticated Python library and command-line interface designed for authorized red-team engagements, integrating classic network reconnaissance methodologies with advanced AI and LLM security testing. It features a suite of tools for probing AI/LLM endpoints against the OWASP LLM Top 10, scanning MCP servers for critical vulnerabilities, and conducting comprehensive infrastructure security assessments, with recent enhancements for A2A protocol security checks that include dangerous skill detection and secret scanning. This tool mandates explicit authorization for active attack features, ensuring ethical use while delivering powerful capabilities for security testing.

recon-deck is a self-hosted reconnaissance tool that transforms nmap output into an actionable, port-aware checklist in under 30 seconds. It features an AI co-pilot to explain scan results and suggest next steps, supports cross-host attack planning, and provides detailed export options for penetration testers and OSCP students, all while maintaining offline functionality. Notable capabilities include usage analytics and integration with HackTricks for enhanced documentation.

SubSurfer is a high-performance tool designed for subdomain enumeration and web property identification, ideal for red team operations and bug bounty hunting. It features fast asynchronous scanning, customizable port scanning, and web service identification capabilities, with a modular design that allows integration with other tools or use as a Python module. Continuous updates and the ability to tailor scans make it a versatile choice for cybersecurity professionals.

WebStrike is an automated web penetration testing framework designed to orchestrate various Kali tools through a structured phase-based pipeline, enhancing the workflow of web pentesting. It links tools together, utilizing outputs from one as inputs for the next while providing deduplication and comprehensive reporting. The framework allows for both manual and automated modes of operation, enabling users to manage the level of intrusion and control over testing processes efficiently.

WebXray is an offensive web scanner developed in Python that facilitates comprehensive security assessments by combining features such as crawling, XSS and SQL injection detection, security header analysis, and WAF detection. Its notable capabilities include reflected XSS detection, support for various output formats, and ease of integration into existing bug bounty workflows or pipelines. Designed primarily for security professionals, it helps identify potential vulnerabilities in web applications during reconnaissance.

WLX (WordListeXplorer) is a local wordlist intelligence and workflow management tool designed for offensive security professionals and bug bounty hunters, enabling them to efficiently organize, search, and integrate large-scale wordlist collections into their workflows. Notable features include SQLite-powered indexing, fast keyword searches, tag-based filtering, session-aware variable management, and direct integration with offensive tools through shell environment variables, all within a terminal-native interface for streamlined operations.

csprecon is a reconnaissance tool designed to discover new target domains by leveraging Content Security Policy (CSP) data. Its primary use case is for security professionals conducting reconnaissance in order to identify potential attack surfaces across multiple domains, with features such as concurrent requests, domain filtering, output options in JSON format, and the ability to handle CIDR input. The tool can also be configured for rate limiting and proxy usage, making it versatile for various operational environments.

i-Detector is an educational tool designed for simulating Instagram login and two-factor authentication (2FA) mechanisms, aimed at ethical hacking and cybersecurity training. It includes a simple fake login page that collects user credentials via a data management script, which runs on various platforms including Windows, Linux, and Android. The tool is intended for practical learning experiences in social engineering techniques and is continuously updated with features in its main project repository.

Nagooglesearch is a Python library designed to facilitate web searches without relying on Google's direct API, making it suitable for educational and testing purposes. It allows users to customize search parameters, manage user agents, and configure cookies while ensuring the return of unique, relevant URLs that do not contain the keyword "google." Notable features include adjustable sleep intervals between requests to prevent rate limiting, the ability to specify custom user agents, and support for proxy connections.

OXIDE is a precision-forged Rust-based vulnerability scanner designed for offensive security applications, particularly penetration testing and security research. Key features include an async concurrent architecture, a WAF evasion suite, an AI/ML-driven zero-day detection engine, and a modular framework with 14 detection modules. This tool is optimized for Kali Linux and emphasizes responsible use, strictly prohibiting unauthorized access or malicious applications.

Pentest Swarm AI is an open-source penetration testing tool that leverages a swarm architecture for coordinated multi-agent operations, enabling efficient vulnerability assessment. Its primary use case is facilitating authorized security testing through live integration with popular offensive tools like nmap, sqlmap, and Metasploit, while incorporating AI models for advanced analysis. Notable features include a stigmergic blackboard for agent coordination, automated evidence capture, and the ability to generate submission-ready reports.

Strix is an open-source AI-powered penetration testing tool designed to autonomously identify and remediate vulnerabilities in applications. It provides a comprehensive pentesting toolkit including real exploit validation, multi-agent orchestration for scalability, and integration with CI/CD pipelines for continuous security checks. Key features include actionable findings with remediation guidance, auto-fixing capabilities, and the generation of compliance-ready reports, significantly accelerating the security testing process compared to traditional methods.

TeleStrike is a red team utility for simulating penetration tests and conducting security audits on Telegram accounts, designed solely for authorized assessments and educational purposes. Its notable features include two-factor authentication enumeration, session hijacking simulations, automated social engineering flows, and customizable modules for various attack vectors. The toolkit serves to evaluate the resilience of Telegram's authentication mechanisms against real-world attack scenarios.

CloakQuest3r is a Python-based security research tool designed to assess potential origin IP exposure of websites utilizing Cloudflare and similar reverse proxy or CDN services. Its primary use case involves subdomain enumeration and passive analysis techniques to identify misconfigurations that could lead to the disclosure of sensitive server infrastructure. Notable features include its capability for real IP detection, making it essential for security professionals, penetration testers, and web administrators focusing on authorized security testing and infrastructure hardening.

WaSonar is a command-line interface tool designed for educational research and security assessments focused on the WhatsApp protocol. It facilitates real-time device tracking, device discovery, and profile extraction from linked devices, while also offering a resource exhaustion feature that can stress test the target by sending oversized payloads. Notably, WaSonar employs silent probes to determine online status without alerting the user and allows users to initiate rapid, high-frequency message deliveries to gauge system resilience.

VulnParse-Pin is a post-scan intelligence and decision support engine designed to transform vulnerability scan findings into a prioritized and explainable remediation plan, focusing on real-world exploitability rather than just severity scores. It reduces vulnerability noise by up to 94% by incorporating factors such as Known-Exploited Risk (CISA KEV), real-world exploitation probability (EPSS), and exploit availability from public databases, thereby enabling more effective risk management. Notable features include normalization of data, enriched scoring models, and customizable prioritization based on actual threat signals.

The Cyber Threat Intelligence tool provides comprehensive analysis of ongoing activities and research by advanced persistent threat (APT) actors, leveraging broad monitoring of exploit markets, social media, and vulnerability discussions. Its key features include geopolitical analysis, a wide array of indicators such as IOCs and TTPs, and predictive capabilities powered by an AI-based system to forecast potential attacks. This enables organizations to proactively prepare for and mitigate cybersecurity threats.

Darknet-mcp-server is a comprehensive tool designed for aggregating dark web and threat intelligence specifically for AI agents. It consolidates data from multiple sources, including HIBP, ThreatFox, ransomware tracking, and blockchain intelligence, into a unified server that allows for on-demand access to a wide array of threat data. Notable features include support for .onion access, malware analysis capabilities, and an array of tools and data sources to streamline dark web intelligence gathering and analysis.

ExploitFlow (EF) is a modular library designed to create cybersecurity exploitation routes, known as exploit flows, by combining and composing exploits from various sources and frameworks. Its primary use case is to facilitate research in Game Theory and AI within the cybersecurity domain through a structured representation of actions and system states. Notable features include its extensibility with adapters for other exploitation frameworks and a design syntax inspired by TensorFlow, allowing for seamless integration and experimentation.

The h4cker repository is a meticulously curated collection of cybersecurity resources, tools, scripts, and training materials, aimed at supporting various aspects of cybersecurity, including offensive and defensive strategies, cloud security, and AI security. Notable features include a structured taxonomy for easy navigation across different cybersecurity domains, dedicated sections for certifications and lab-building, and organized training references and resources. This repository serves as a valuable supplemental resource for professionals seeking to enhance their knowledge and skills in cybersecurity.

PatrowlHearsData is an open-source data repository and scraping tool designed for the collection of vulnerability intelligence, including CVE, CPE, CWE, and exploit references. It facilitates security operations by providing real-time updates and orchestrating threat intelligence feeds, making it suitable for organizations looking to enhance their cybersecurity posture with comprehensive vulnerability insights. Notable features include scalability, a user-friendly installation process, and the option for professional support through a paid Pro Edition.

Arsenal is a versatile cybersecurity tool designed for vulnerability discovery and web application security testing. It automates the process of scanning and identifying common web vulnerabilities such as SQL injection, XSS, and open redirects, while also generating targeted wordlists for various web applications. Notable features include integration with multiple data sources for reconnaissance and the ability to automate tests for local file inclusion and sensitive file exposure.

Awesomenmap is a comprehensive knowledge base dedicated to Nmap, providing a centralized repository for essential Nmap NSE scripts, CVE search tools, and automated reconnaissance pipelines. It streamlines access for security analysts, pentesters, and blue teams, featuring organized references and integration of third-party scripts to ensure they are current. Notable features include post-scan reporting capabilities and visualizations for enhanced security assessments.

Capsaicin is a next-generation web directory and asset discovery engine designed for red teamers, bug bounty hunters, and DevSecOps. It employs advanced evasion techniques, including TLS fingerprint spoofing and human-like delay simulations, to bypass modern web application firewalls and effectively uncover hidden paths, secrets, and misconfigurations. Notable features include smart auto-calibration to eliminate false positives, stateful fuzzing for misconfigured APIs, and the ability to detect over 16 different WAFs.

Cloud OSINT is a curated resource designed for conducting open-source intelligence (OSINT) assessments of cloud infrastructure, featuring dorks, tools, techniques, and methodologies applicable across major cloud platforms such as AWS, Azure, GCP, Oracle, and IBM. Its primary use case is to assist security professionals, red teamers, and bug bounty hunters in effectively mapping and analyzing cloud environments through a structured reconnaissance workflow. Notable features include comprehensive guidance on cloud infrastructure patterns, domain identification, and a variety of targeted dork queries, enhancing the efficiency of reconnaissance efforts.

CyberMind CLI v6.0 is a powerful AI-driven offensive security tool designed for a diverse range of users including bug bounty hunters, red teamers, penetration testers, and security researchers. It offers 22 autonomous attack modes, a unique OMEGA brain orchestration feature, and support for exploiting Web3, mobile, and cloud environments, while integrating seamlessly with Kali tools. Key features include manual and automated execution options, real-time alerting via Telegram, and a VSCode extension for enhanced usability.

The Educational Cybersecurity Tools repository serves as a comprehensive catalog of over 150 tools aimed at ethical hacking, penetration testing, and cybersecurity education. It encompasses various categories including network scanning, vulnerability assessment, and malware analysis, while emphasizing that all tools are intended for educational purposes only and may not be used for unauthorized access to systems. Noteworthy features include detailed tool descriptions, an extensive list of categories, and a focus on promoting ethical standards in cybersecurity practices.

Harpoon is an autonomous black-box penetration testing tool designed for web applications, optimized for use on Kali Linux but capable of running on other Debian-based distributions and WSL. It orchestrates and integrates various existing security scanners, streamlining the process of vulnerability discovery by normalizing outputs into a relational SQLite model and providing comprehensive reporting, including HTML reports and PoC artifacts. Notable features include asynchronous execution, WAF-awareness, and extensive automated phases covering everything from DNS reconnaissance to validation of findings.

LLMtary is an AI-powered penetration testing platform designed for security professionals, facilitating an autonomous workflow from reconnaissance to exploit validation and report generation. It integrates large language model intelligence to conduct a comprehensive examination of targets, capable of operating entirely offline with local models or utilizing cloud-based AI for improved accuracy. Key features include a structured testing loop, multi-phase enrichment for targeted vulnerabilities, and native support across major operating systems, ensuring a streamlined and efficient penetration testing experience.

NetCrawler is an AI-driven reconnaissance and vulnerability scanning tool that utilizes a local Ollama LLM to automate the scanning process. It intelligently selects and executes various reconnaissance modules such as subdomain enumeration, web fingerprinting, and vulnerability scanning, while generating structured reports in both Markdown and JSON formats. Notable features include a terminal-based user interface, iteration through an observation-think-act cycle, and the capability to integrate additional modules seamlessly.

NOX Framework is a cyber threat intelligence engine designed for red teaming, digital forensics, and corporate exposure analysis, capable of executing massively parallel scans across 124 intelligence feeds without bottlenecks. Its notable features include an integrated operational security layer with automatic proxy rotation, a dynamic risk scoring system, and an autoscan pipeline that facilitates comprehensive scanning and data gathering through recursive scans and asset discovery. This plugin-driven platform emphasizes operational efficiency and security, catering to advanced cybersecurity operational needs.

NullSec Pineapple Suite is a comprehensive payload collection for the Hak5 WiFi Pineapple Pager, featuring 125 payloads organized into 14 categories for various aspects of WiFi security testing, including reconnaissance, interception, exfiltration, and stealth operations. Notable features include an extensive range of attack and reconnaissance payloads, a fast boot optimizer, a user-friendly one-click installation process, and the option for active development support. This suite significantly expands the capabilities of the WiFi Pineapple Pager compared to official and other third-party offerings.

Phantom is an autonomous AI-driven penetration testing platform designed to perform detailed reconnaissance and exploit vulnerabilities without human intervention. Integrating over 30 professional security tools within a secure Docker environment, it leverages a reasoning loop to adaptively select and execute multi-step attack vectors, producing verified findings complete with proof-of-concept scripts. Unlike traditional scanners that rely on static CVE signatures, Phantom delivers a comprehensive and accurate vulnerability assessment with real-time adaptability and detailed reporting aligned with the MITRE ATT&CK framework.

ReconMind is an AI-powered bug bounty agent designed to emulate the decision-making process of a senior penetration tester, automating the entire vulnerability assessment workflow from reconnaissance through to reporting. Key features include an LLM-driven approach that intelligently selects targets and scans, filters false positives, and generates platform-ready reports for services like HackerOne and Bugcrowd. Its streamlined pipeline ensures comprehensive coverage, while being free to use, and provides flexibility with local and cloud-based LLM integrations.

The Security Reference Guide is a curated repository of cyber security resources tailored for SOC analysts, pentesters, DFIR practitioners, and other security-focused roles. It organizes valuable links into categories such as offensive and defensive operations, engineering fundamentals, and training resources, providing context to help users select the appropriate tools and materials quickly. Notably, the guide emphasizes legitimacy, cautioning against the misuse of tools for unethical purposes.

ShadowMap is a professional IP geolocation intelligence tool designed for tracking IP addresses with multi-source accuracy and Google Maps integration. Its notable features include querying multiple APIs for enhanced accuracy, precise coordinate outputs, proxy and VPN detection, and compatibility with mobile platforms like Termux. Intended for educational and authorized testing purposes, it provides users a clean, professional interface and the ability to save detailed geolocation reports.

Takopii is a production-grade banker malware architecture designed for Android, featuring four APK specimens that encapsulate techniques from 17 real-world malware families. Its primary use case is to facilitate the study of malware detection and defense strategies, offering Kotlin source code alongside comprehensive YARA and Sigma detection rules. Notably, all specimens demonstrate zero detection across 66 VirusTotal engines, showcasing advanced evasion capabilities within a structured kill chain framework.

ThreatSwarm is a comprehensive penetration testing tool that utilizes 27 AI agents to execute the entire kill chain—from reconnaissance to exploitation, post-exploitation, digital forensics, and reporting—streamlined into a single command interface. It enforces strict scope limitations via `scope_check.py`, ensuring compliance with authorized testing parameters, while leveraging a library of 754 MITRE-mapped skills to guide its operations. Notably, it operates as a Claude Code plugin, eliminating the need for additional infrastructure like Docker or cloud accounts, and outputs detailed vulnerability reports with CVSS scoring.

AI OSINT is a comprehensive toolkit designed for identifying exposed artificial intelligence infrastructure on the internet through curated OSINT resources, including Google dorks, Shodan, and GitHub queries. It serves Red Team operators, penetration testers, and OSINT researchers by providing specific detection methods for various AI entities, such as LLM endpoints, AI agent gateways, and leaked API keys, while addressing emerging threats such as systemic supply chain vulnerabilities and credential leaks. Notable features include a keyword substitution convention to tailor searches to specific needs, enhancing its utility in real-world cybersecurity assessments.

Akira is an AI-powered penetration testing tool designed to operate natively within various environments, including Claude Code and Gemini CLI. It specializes in identifying vulnerabilities that traditional scanners may overlook, such as logic flaws and cryptographic weaknesses, by integrating a structured reasoning system that demands reproducible evidence for each finding. Notable features include a robust technique library, a Bayesian hypothesis engine, and the ability to handle complex attack vectors through a systematic engagement and reporting workflow.

Beatrix Suite is a command-line bug bounty hunting framework designed to streamline the entire pentesting workflow by integrating 32 scanner modules and 22 external tools. It features a 7-phase Kill Chain methodology, automated login and session management, and an AI-assisted pentester (GHOST) for advanced analysis, making it suitable for scanning domains, URLs, and IP addresses efficiently in headless environments. This tool aims to eliminate the fragmentation of traditional bug bounty tools by providing a single-command interface that orchestrates multiple tools throughout the assessment process.

CatchClaw v5.3.0 is a multi-platform AI Agent security assessment tool that supports nine different AI platforms including OpenClaw and Dify. It features 78 DAG attack chains and exploit modules that cover a full range of attack vectors from reconnaissance to data leakage, utilizing an asynchronous Tokio engine for concurrent execution while offering visual attack graph exports and customizable reporting options. The tool is designed to facilitate automated vulnerability verification and threat modeling within complex multi-agent environments, restricted to non-commercial use only.

dj-camphish is a browser-based toolkit designed for ethical hacking, OSINT training, and privacy awareness demonstrations, allowing users to capture webcam snapshots with permission and redirect them to a custom URL. Key features include an intuitive admin panel for managing captures, secure CSRF protection, responsive design for mobile and desktop, and a straightforward setup process without the need for port forwarding.

Gideon is an autonomous cybersecurity operations agent designed for intelligent threat analysis and red teaming. It automates the process of gathering intelligence and conducting thorough security research by breaking down complex questions into actionable tasks, utilizing real-time data from various sources. Notable features include dual-mode operation for both defensive and offensive engagements, goal-directed autonomy, and an evidence-based approach to generating actionable security insights.

HoneyAI is an all-in-one, AI-powered honeypot designed to proactively intercept and deceive attackers across various protocols using a local LLM. It generates dynamic, realistic responses to malicious attempts such as SQL injections and SSH logins, with customizable commands and automated reporting to multiple threat intelligence platforms. Notable features include a wide range of protocol emulation, real-time attack notifications, and the ability to integrate with any LLM, ensuring comprehensive coverage and adaptive defenses against cybersecurity threats.

MSFT-IP-Tracker is a tool designed to monitor and track Microsoft IP addresses for applications in security research, firewall configurations, routing, and troubleshooting. It collects data from a range of Autonomous System Numbers (ASNs) and publishes daily updates featuring IPv4 and IPv6 addresses in CIDR notation. Notable features include automated daily releases and a comprehensive source of Microsoft’s ASN IP ranges, providing users with up-to-date information for network decision-making.

OSINT-D2 is an advanced open-source intelligence platform designed to transform usernames and emails into comprehensive identity dossiers, leveraging agentic AI for autonomous investigations. The tool features multi-source correlation across over 30 platforms, cognitive profiling through a six-dimension analysis, and seamless integration with ScrapingAnt's proxy infrastructure for efficient data gathering. Additionally, it supports premium PDF reporting, incorporates breach exposure checks via HaveIBeenPwned, and offers cross-platform executable binaries.

pentest-ai-agents is a suite of 50 subagents designed to enhance penetration testing by utilizing Claude Code as an offensive security research assistant. Each agent specializes in areas such as reconnaissance, web applications, Active Directory, and cloud security, offering streamlined automation for various tasks without the need for extensive setup. Notable features include the ability to route tasks to specific experts, support for easy installation as a Claude Code plugin, and a robust validation process to ensure secure and efficient operation of each agent.

ReconNinja is an autonomous multi-phase security reconnaissance framework that conducts comprehensive security assessments through a single command. It supports a myriad of functionalities including passive OSINT, port scanning, web discovery, vulnerability scanning, and Active Directory enumeration, producing reports in multiple formats like HTML, JSON, and Markdown. Notable features include an adaptive agent mode for dynamic decision-making, a user-friendly GUI, and enhanced reliability for complex scans with a uniform `PhaseContext` adapter layer.

Shells-X is a modular web shell framework designed for authorized penetration testing and security research, allowing users to deploy a single-file shell that incorporates various tools for executing commands, interacting with databases, and scanning ports. Its notable features include customizable builds with unique SHA256 fingerprints, an interactive environment for PHP and SQL commands, robust system diagnostics, and encrypted traffic handling. The framework also supports automatic detection of CMS/frameworks and provides a one-click export option for recon data to Faraday.

SiteSniper is an automation script designed for blackbox penetration testing, leveraging tmux for organizing and executing various penetration testing scripts across multiple phases. Its primary use case involves preparation and execution of commands for tasks such as information gathering, exploit identification, and web application analysis. Notable features include a user-friendly interface for phase selection, precompiled command execution, and a structured approach to manage multiple testing sessions efficiently.

WordListsForHacking (WFH) is a comprehensive wordlist generation toolkit designed for penetration testing and red team operations, featuring 44 subcommands encapsulated within a single command-line interface. It supports tasks such as charset and mask generation, web scraping, personal and corporate profiling, and advanced techniques including machine learning-based ranking and acrostic generation. The tool is geared towards enhancing the efficiency and effectiveness of security assessments through diverse and robust functionalities.

Omniscient V3 is a comprehensive reconnaissance and adversary simulation framework designed to enhance security assessments by consolidating over 130 best-in-class tools into a unified pipeline. Key features include AI-driven results augmentation, distributed execution across platforms such as Kubernetes and Docker, advanced stealth techniques for emulating sophisticated attacks, and immutable audit trails for compliance and reporting. This tool is primarily aimed at security professionals, providing a streamlined approach to identifying vulnerabilities in complex attack surfaces.

ScanCannon is a high-speed Bash script designed for efficient credentials-based attack surface enumeration and reconnaissance of large external networks, leveraging tools like `masscan` for rapid port detection and `nmap` for detailed service analysis. It outputs consolidated reports in HTML and CSV formats while enabling project-driven scanning that tracks changes over time, facilitating continuous monitoring of attack surfaces. Notable features include full ASN-based discovery, API detection, CVE hinting, and resilience through checkpointing and parallel scanning.

365 is a comprehensive OSINT and threat hunting tool designed for network and web reconnaissance, discovery, enumeration, vulnerability mapping, exploitation, and reporting. Its notable features include a streamlined setup process for Kali Linux and a range of scripts for automating various security assessment tasks. This tool is primarily used for enhancing security assessments and facilitating vulnerability exploitation in targeted environments.

ASHIRT is an automated adversary simulation documentation tool designed to centralize the capture, indexing, and searchability of evidence collected during operations. Its primary use case is to streamline the process of documenting activities by providing a non-intrusive methodology that reduces manual steps and enhances sharing across teams. Notable features include support for high-fidelity data synchronization and a dedicated frontend and backend architecture for improved usability and deployment flexibility.

The "Awesome OSINT for Everything" repository provides a comprehensive list of OSINT (Open Source Intelligence) tools and websites tailored for penetration testing, information gathering, and red team operations. It encompasses a wide array of categories, including reverse searching, social media analysis, data leaks, and more, making it an invaluable resource for cybersecurity professionals and bug bounty hunters. Notable features include organized sections by topic, facilitating easy navigation and access to relevant tools across diverse OSINT areas.

The Cybersec Toolkit is an advanced cybersecurity solution that incorporates AI integration through a Model Context Protocol (MCP) server, enabling interactive tool management during penetration testing and bug bounty hunting. It features a comprehensive repository of over 670 tools, categorized into 18 modules and 14 profiles, allowing for modular installation and multi-platform support, including Linux and Termux. Unique to this toolkit is its capability for the AI to autonomously drive tool execution based on problem context, providing a hybrid approach that combines operator control with AI assistance.

CyberStrike is an open-source AI-driven tool designed for automated penetration testing, enabling users to transform their existing AI language model subscriptions into autonomous red team agents. It features over 13 specialized agents, 7,600+ security skills, and 120+ OWASP testing techniques, facilitating tasks such as reconnaissance, vulnerability discovery, exploitation, and reporting from a terminal interface. With compatibility for 150+ AI providers and a variety of built-in and MCP tools, CyberStrike streamlines offensive security assessments efficiently.

HDN Phish Toolkit is a comprehensive social media phishing simulation tool designed for authorized security testing and educational purposes. It creates realistic login pages for over nine popular platforms, enabling organizations to assess and understand phishing vulnerabilities while offering features like real-time credential capture, IP tracking, and a web dashboard for monitoring captured data. The tool is cross-platform compatible, supporting Windows, Linux, and macOS environments.

LLMVault is a comprehensive, hands-on training platform designed to educate users on the OWASP LLM Top 10 vulnerabilities applicable to large language models (LLMs). It features 25 deliberately vulnerable labs across three tiers—core, advanced, and expert—each focusing on different attack and defense scenarios, allowing users to learn practical exploits and their mitigations in a controlled environment. Notably, LLMVault emphasizes a self-contained setup that requires no online exposure, ensuring a secure learning experience.

The n8n-CyberSecurity-Workflows tool provides over 100 pre-built automation workflows tailored for various cybersecurity functions, including red team, blue team, and application security tasks. It features seamless integrations with popular security tools, a user-friendly interface for ease of use, and benefits from ongoing community contributions that enhance its functionality. This application is designed to streamline and simplify security automation processes for professionals in the cybersecurity domain.

Recon Skills is a comprehensive toolkit designed for authorized security testing, focusing on external reconnaissance across web applications, APIs, and various vulnerability assessments. Notable features include a structured catalog of skills for discovery, validation, and reporting, covering areas such as authentication testing, attack-path analysis, and evidence review, while emphasizing best practices for operational security and quality assurance. The tool aims to facilitate both manual and automated workflows for security professionals, ensuring a thorough approach to web security assessments.

SilentSniffer is an educational tool designed as a web security diagnostic sandbox to demonstrate the extent of information exposure in modern web applications. Functioning entirely as a local client-side environment, it visually portrays how a user's device state and behavioral data can be accessed without consent, utilizing a zero-coupling dynamic plugin architecture for modular functionality. Notable features include a threat escalation hierarchy that categorizes information exposure severity and ensures no data leaves the user's device during operation.

Storm-Framework is an offensive security tool suite designed for reconnaissance, vulnerability assessment, and exploitation, catering to cybersecurity professionals, penetration testers, and bug bounty hunters. Built with a user experience similar to Metasploit, it streamlines security testing workflows and supports multiple platforms including Kali Linux, Ubuntu, and Windows. Notable features include a comprehensive framework flow, detailed documentation, and a structure visualizer that aids in navigating the tool's components.

SubdomainX is an advanced subdomain discovery and security reconnaissance tool that integrates over twelve enumeration tools and six API services into a single command-line interface (CLI). Its primary use case is to facilitate comprehensive subdomain enumeration, vulnerability detection, and monitoring, featuring capabilities such as HTTP probing, technology fingerprinting, subdomain takeover detection, and notifications via various platforms. Notable features include the ability to generate detailed reports in multiple formats, an interactive terminal user interface (TUI), and support for resuming interrupted scans, making it a robust solution for security assessments.

AcquiFinder is a Python script designed to scrape Google search results for acquisition titles sourced from Crunchbase using Apify's Google Search Scraper. Its primary use case is to automate the retrieval of relevant acquisition data for specified companies, facilitating market research and analysis. Notable features include easy installation through a virtual environment and minimal setup requirements, such as an Apify account with API access.

Xkeys is a Burp Suite extension designed as a passive scanner to identify and extract sensitive strings such as keys, secrets, and tokens from web pages, listing them as informational issues. It requires Jython for setup and facilitates the automation of asset identification through passive scanning, enhancing the security assessment process by providing valuable insights on potential vulnerabilities. Notable features include various pattern matching for value extraction and seamless integration with Burp Suite’s interface.

The "cybersecurity-penetration-testing" repository serves as a comprehensive collection of resources focused on penetration testing techniques, tools, and best practices in cybersecurity. It includes categorized links to software, libraries, frameworks, technical guidelines, and educational materials, aiming to assist security professionals in identifying and mitigating vulnerabilities in various environments. Notable features include extensive categories covering everything from anonymity tools to network vulnerability scanners, ensuring a broad spectrum of resources for ethical hacking endeavors.

Emailfinder is an open-source OSINT tool designed to extract email addresses from various search engines and platforms, including Google, DuckDuckGo, Bing, Yahoo, Yandex, and GitHub. It operates via a command-line interface, supporting batch processing of domains and offering flexibility through its command structure, allowing users to customize their searches for specific engines and exact matches. Notable features include the ability to fetch results from multiple sources and provide an autocompletion script for enhanced usability.

Minerva is an automated reconnaissance and penetration testing script that streamlines the assessment of a target by integrating multiple tools for tasks such as Nmap scanning, OSINT gathering, and vulnerability enumeration. Notable features include automated Google Dorking for targeting potential admin pages and the use of established tools like theHarvester, amass, and nikto for comprehensive analysis. This tool simplifies the penetration testing workflow, making it accessible for users to execute complex assessments with minimal setup.

Nullinux is a penetration testing tool designed for Linux environments, specifically tailored for enumerating OS and domain information via SMB protocols. It features capabilities such as single and multi-host enumeration, user and group enumeration, and multi-threaded RID cycling, all while employing a null session approach if no credentials are provided. Additionally, Nullinux generates a formatted output file devoid of duplicates to facilitate further exploitation activities.

Penstaller is a Python automation tool that streamlines the setup of essential bug bounty and penetration testing tools on a clean system with a single command. It automates the installation of critical programming languages and various pentesting utilities, facilitating a rapid and efficient environment preparation for both novice and experienced security testers. Notable features include a comprehensive list of tools covering different aspects of security testing, along with recommendations for additional manual installations of wordlists.

r3conwhal3 is a multifunctional reconnaissance tool designed for web application data collection and analysis, employing a concurrency-based approach to enhance performance and resource efficiency. Its primary use case includes performing both passive and active reconnaissance, with capabilities to enumerate subdomains, conduct vulnerability scans, and manage custom configurations through an environment file. Notable features include a comprehensive execution chain, support for Docker deployment, and the ability to save output results for future reference.

Sexettintool is a multifaceted cybersecurity tool designed for educational and ethical hacking purposes, enabling users to execute various automated exploits and security assessments. Key features include exploit scanning with Searchsploit, firewall detection via wafw00f, brute force automation with ncrack, and vulnerability analysis using nikto and lynis, among others. The tool is structured to enhance cybersecurity awareness while retaining a focus on responsible usage, with comprehensive support for Linux users and potential Docker deployment.

smtp-user-enum is a Python-based tool designed for SMTP user enumeration using commands like `VRFY`, `EXPN`, and `RCPT`. Its notable features include granular timeout management, automatic reconnection capabilities upon encountering errors, and flexible customization options for input formats, making it effective for identifying valid email addresses and their aliases. This tool is inspired by a Perl script and supports both Python 2 and Python 3.

Vide.sh is a versatile tool designed for probing and crawling targets to enumerate their attack surface through various scanning engines, such as nmap, httpx, and whatweb. It can process input from various sources, including XML files, lists of targets, standard input, and direct strings, while offering a range of configurable scanning options to tailor the attack surface enumeration according to user needs. Notable features include the ability to skip probing and crawling, run multiple types of scans, and generate organized output, including screenshots and detailed logs of the scanning results.

BugBountyData is a repository that compiles a list of public bug bounty programs and responsible disclosure initiatives, accessible through a user-friendly web interface. Its primary use case is to facilitate easy exploration of various bug bounty opportunities for cybersecurity researchers. Notable features include an unfiltered list of subdomains with guidelines on how to filter domains based on organizational policies, enhancing clarity and usability for participants.

BurpSuite-Config is a tool designed to enhance the Burp Suite's functionality by providing customizable "Match and Replace" and "TLS Pass Through" rules. Its primary use case is to streamline the interception and modification of web traffic for security assessments. Notable features include intuitive rule configuration for efficient traffic manipulation and the ability to handle encrypted traffic seamlessly.

certinfo is an SSL certificate scraping tool designed to extract domain names from SSL certificates across multiple hosts. Its primary use case includes both basic certificate data extraction and recursive enumeration of subdomains through Certificate Subject Alternative Names (SANs), offering features like multi-threaded processing, support for varied input formats, and real-time output. Users can choose from multiple output formats, including JSON and CSV, and customize the number of concurrent workers for efficiency.

GarudRecon is a bash-based reconnaissance automation framework designed for security professionals and bug bounty hunters, facilitating asset discovery and vulnerability assessment through the integration of over 80 open-source security tools. It offers multiple operational modes, such as SmallScope, MediumScope, and LargeScope, to tailor the reconnaissance process according to different engagement scopes, alongside advanced capabilities for automated monitoring and vulnerability detection including subdomain enumeration, port scanning, and exploitation checks. Noteworthy features include a workflow mode for tool chaining, fleet mode for distributed scans, and cron job scheduling for recurring tasks.

Gitxray is a security analysis tool designed to analyze GitHub repositories for OSINT and forensic purposes by utilizing the public GitHub REST APIs to extract valuable information efficiently. Its primary use case includes identifying sensitive data in contributor profiles, spotting threat actors or fake repositories, and conducting forensic investigations by filtering results by specific dates. Notable features include customizable text output, integration with VirusTotal for enhanced threat detection, and the ability to run comprehensive scans on repositories to gather extensive data.

haktrailsfree is a command-line tool designed to extract up to 10,000 subdomains from SecurityTrails using user-provided cookies instead of an API key, effectively bypassing the limitations of the free API tier. Key features include the ability to handle both single and multiple domains, configurable cookie input, and options for silent or verbose output. This tool facilitates extensive subdomain enumeration, making it valuable for security assessments and research.

hidden_fuzzer is a command-line tool designed for rapid web content discovery, specifically targeting hidden paths and directories in web applications. Leveraging Jaro and Jaro-Winkler similarity algorithms, it automatically filters out false positives without the need for complex configurations. Notable features include multi-threaded scanning, recursive directory fuzzing, and support for various customizations such as proxy routing and parameter fuzzing.

HunterA is an advanced mobile penetration testing framework designed for Android devices operating without root access, functioning within the Termux environment. It consolidates a diverse array of powerful tools for tasks such as port scanning, WHOIS/DNS reconnaissance, CVE vulnerability searches, and traffic sniffing, along with features like a fully asynchronous engine and integration with Termux:API for enhanced capabilities. Its modular design supports a range of functionalities, from OSINT to vulnerability exploitation, making it a comprehensive solution for mobile pentesting.

ipfinder is a command-line tool designed to efficiently extract IP addresses and other data from Shodan search queries, catering to both advanced users and beginners through its support of complex query syntax and simple domain-based filtering. Key features include flexible facet selection, options for filtering query types, handling of HTTP errors with retry logic, and the ability to control output verbosity, making it suitable for robust cybersecurity investigations and data extraction tasks.

LazarusWakeUp is a Python-based tool designed for reconnaissance and management of disabled Active Directory (AD) principals, enabling users to find, enable, disable, and analyze these accounts. Its notable features include the ability to operate over LDAPS for secure communications, verbosity options for output detail, and batch operation capabilities to streamline account management tasks. This tool is intended for educational purposes and emphasizes lawful usage.

Nucleihub is a tool designed for organizing and managing Nuclei templates from various community sources, enabling users to consolidate template files efficiently. It features auto-flattening of directory structures, duplicate handling, smart filtering, and validation of downloaded templates, with optimizations for low-resource environments. The tool supports URLs ending in `.git`, `.yaml`, or `.zip` formats, enhancing flexibility in template retrieval.

nucleihub-templates is a continuously updated repository of Nuclei templates designed for security testing, aggregating over 600 sources and refreshed every six hours via GitHub Actions. It provides security researchers and penetration testers with a comprehensive suite of templates for effective vulnerability scanning, leveraging an automated collection pipeline that removes duplicates and validates templates against the latest Nuclei version. Notable features include automatic updates, diverse template categorization, and seamless integration into existing security workflows.

OriginipHunter is a Go-based tool designed to identify the origin IP addresses of domains by leveraging multiple security APIs, including Shodan and SecurityTrails. Its notable features include support for concurrent validations, parallel execution for improved performance, and customizable settings through a configuration file. The tool outputs results in various formats and allows users to easily manage API keys for different services, enhancing its flexibility in domain reconnaissance.

ParamFinder is a tool designed for security assessment that crawls input and textarea tags on web pages to identify and manipulate parameters for testing vulnerabilities, particularly in the context of web applications. It allows the user to input single or multiple URLs, automatically generating modified URLs with specified parameters for ease of testing, while offering features such as concurrency options, output file configurations, and the ability to operate in silent or verbose modes. Notably, it facilitates the identification of potential security issues like XSS by transforming input parameters with preset values, ensuring a streamlined approach to parameter analysis.

portmap is a high-speed port scanning tool that leverages Shodan's public data to identify open ports associated with specified IP addresses or CIDR ranges. Its primary use case is to quickly ascertain accessible services on remote hosts using Shodan's APIs, featuring commands for basic port scans and enhanced details retrieval, including ASNs and organization details. Notable functionalities include JSON output options, support for multiple IP inputs, and a user-friendly command-line interface.

Preferred Network List Sniffer (PNLS) is a Red Team Wi-Fi auditing tool designed to capture SSIDs from a device's preferred network list by intercepting Probe Requests in the surrounding environment. The tool features a user-friendly web interface for visualizing the intercepted data and is focused on exploring the privacy implications associated with Wi-Fi communication. Noteworthy functionalities include compatibility with Raspberry Pi, the ability to filter SSIDs, and the provision for asynchronous server communication using WebSockets.

pvreplace is a robust URL parameter and request fuzzing tool designed to enhance security assessments by processing URLs or Burp Suite raw requests, substituting values with custom payloads while preserving unique parameter combinations. Notable features include multiple fuzzing types (replace, prefix, postfix), various fuzzing modes (single, multiple), and the ability to target specific components such as parameter names, values, path segments, and headers. The tool facilitates a comprehensive fuzzing approach to identify vulnerabilities within web applications.

ScanPro is a menu-driven tool that enhances the functionality of Nmap for network scanning purposes. Its primary use case involves simplifying the scanning process by allowing users to select target IPs, ports, and scan types through an interactive menu, while also facilitating service detection and output formatting. Notable features include support for NSE scripting and HTTP information gathering, making it a versatile utility for penetration testing and network analysis.

The Largo-m/security-tools-hacking is a modular Windows penetration testing framework designed for security professionals, facilitating various stages of red team operations such as reconnaissance, exploitation, and post-exploitation. Key features include system information collection, geolocation lookup, browser history extraction, and optional key logging, all presented in a user-friendly manner that allows for easy integration and extension of custom modules.

SocialFinder is an efficient username enumeration tool built in Go, designed to verify the availability of usernames across multiple social media platforms and websites. It offers real-time output, customizable URL lists, and smart matching for URL variations, allowing for rapid enumeration with clear, colored terminal results. The tool is optimized for performance using httpx, and it supports options like inclusion of NSFW sites and silent mode for discreet checks.

subdog is a comprehensive subdomain enumeration tool designed to aggregate subdomains from over 17 different data sources, providing cybersecurity professionals with extensive lists of root subdomains. Notable features include parallel processing for expedited results, output options for saving to files while displaying terminal output, and automatic duplicate removal along with normalization to filter unwanted entries. By supporting external tools and allowing flexible source selection, subdog enhances the efficiency and effectiveness of subdomain discovery tasks.

TireFire is a semi-automatic enumeration platform designed for penetration testing, leveraging HackTricks resources for real-time updates and command execution. It enables users to initiate and control scans, effectively managing their footprint while generating organized lists of results, which is particularly beneficial for training environments and professional assessments. Notable features include support for multiple terminal interfaces like Tmux and Tilix, allowing for flexible and streamlined scan management.

tldscan is a high-performance domain scanner designed to identify active domains by testing various Top-Level Domains (TLDs) against user-specified domain names. It features customizable concurrency levels, wordlist options for domain generation, and the ability to output results to a specified file, making it suitable for domain reconnaissance tasks in cybersecurity. Notably, users can choose between small and large wordlists and utilize silent or verbose modes for streamlined operation or detailed debugging.

TraxOsint is an open-source OSINT tool designed for gathering comprehensive information on IP addresses using various APIs and services for accurate data comparison. Its notable features include asynchronous scraping, capabilities for checking IP validity, open port status, and geographical information generation, along with integration with services like Pastebin and ProtonVPN. The tool also provides a command-line interface for user interaction and outputs detailed IP-related data, including geographical mapping.

unew is a high-performance command-line utility designed for efficiently processing and managing unique lines from input streams, offering functionalities similar to `sort`, `uniq`, and `tee`. Its primary use case is deduplication and data organization, featuring advanced capabilities such as case-insensitive processing, file splitting, shuffling, and the ability to append new unique lines to existing files. Benchmarked against similar tools, unew demonstrates superior speed and memory efficiency, making it suitable for handling large datasets.

vulntechfinder is an automated vulnerability scanning tool that utilizes technology stack detection to execute targeted scans using tools like Nuclei and httpx. It supports features such as automated tech stack identification, configurable parallel processing, smart filtering for technology inclusion, and crash-safe resume capabilities, making it versatile for various scanning needs. The tool is compatible with any security tool that accepts technology tags, thereby enhancing its utility in security assessments.

WaybackURLsX is a Go-based tool designed to extract archived URLs from the Wayback Machine, emphasizing performance and user-configurable features. It offers smart filtering for sensitive files, adaptive rate limiting to comply with Wayback Machine constraints, and automatic retry mechanisms with exponential backoff for robust error handling. Notable features include detailed logging, support for domain-specific searches, and the capability to filter results based on custom regex patterns.

WebCap is a lightweight web screenshot tool that captures fully-rendered DOMs and detailed HTTP request/response logs without the need for browser automation frameworks. Its primary use case is to provide comprehensive insights into web pages, with unique features including JSON output, JavaScript extraction, and OCR text extraction. Users can operate it via a command line interface or a web server, allowing for automated scanning of multiple URLs and capturing of detailed web elements efficiently.

Windfire is a high-performance, Rust-based tool designed for URL liveness detection, enabling fast and lightweight asset availability checks for domains, IPs, and URLs. Its notable features include support for HTTP/SOCKS proxies, HTTP status code filtering, customizable paths, and the ability to choose between liveness-only and full fingerprinting scan modes, all while maintaining high concurrency and asynchronous execution. Additionally, users can control the scan rate and export results in CSV or JSON formats.

BugBounty Arsenal is a comprehensive, full-stack security scanning platform designed for bug bounty hunters and security researchers. It features over 50 detectors for various vulnerabilities across multiple categories, continuous monitoring with scheduled scans, findings triage to manage results over time, and CI/CD integration to automate security checks in development pipelines. Unique capabilities include attack surface management, tailored AI-driven remediation advice, and extensive reporting options, all from a centralized dashboard.

BurpRecon is a cybersecurity tool designed for bug bounty hunters, facilitating the extraction and analysis of attack surface intelligence from Burp Suite XML exports. It automates identification of high-value vulnerability candidates such as IDORs, Host Header Injections, and Privilege Escalation vectors through a multi-phase analysis, while also performing technology fingerprinting and CVE lookups—all through a single interactive command-line interface. Notable features include detailed scoring for various vulnerabilities, ready-to-run proof-of-concept generation, and support for passive subdomain enumeration.

CertCrunchy is a reconnaissance tool designed to leverage SSL certificate data from online sources to identify potential hostnames. It allows users to retrieve SSL data for specific domains or an IP range, with notable features including multi-threading for faster queries, output customization in CSV or JSON format, and integration with various APIs, such as Censys and VirusTotal.

Dark Nexus is a modular and multi-threaded C++17 framework designed for comprehensive network reconnaissance and infrastructure analysis. It consolidates various tools into a single executable, offering powerful features including subdomain scanning, OSINT gathering, and advanced asset mapping through a user-friendly hybrid CLI. Its aggressive multi-threading capabilities and intuitive architecture ensure efficient operations across 12 distinct modules, catering to a wide range of reconnaissance needs without the burden of complex setups.

emailextractor is a high-speed email scraping tool developed in Go that enables concurrent crawling of websites to extract email addresses for purposes such as reconnaissance and sales intelligence. Key features include fast concurrent processing, fallback to headless Chrome for JavaScript-rendered content, smart URL normalization, and optional JSON output for easy integration.

gosqli is a specialized tool designed for the rapid and accurate detection of blind SQL injection vulnerabilities using time-based techniques. It can scan both URLs and HTTP request files with user-defined payloads, ensuring zero false positives through sequential testing and real-time verification of results. Notable features include automatic exploitation integration with tools like sqlmap, configurable output options, and support for proxy routing, making it suitable for comprehensive security assessments.

httpx is a versatile and high-performance HTTP toolkit designed for probing web services effectively. Its primary use case focuses on conducting a variety of HTTP-based checks such as status codes, content length, and various headers, equipped with features like smart fallback from HTTPS to HTTP, multi-threading, and error handling for WAFs. With a modular code base and customizable flags, httpx allows users to efficiently gather information from URLs, IPs, or CIDR networks while automatically managing retries and backoff strategies.

JSpider is an advanced JavaScript-based crawler and endpoint discovery tool designed for security researchers, facilitating the extraction of hidden API routes, sensitive parameters, and hardcoded secrets directly from websites. Notable features include automated checks for over 500 critical paths, parameter discovery, recursive crawling, high-fidelity secret detection for 40 patterns, and seamless authentication header handling to access secured endpoints. The tool operates entirely client-side, offering real-time tracking and analysis of extracted data in a straightforward dashboard.

LLMrecon is an advanced security testing framework specifically designed to identify and exploit vulnerabilities in Large Language Models (LLMs), adhering to the OWASP Top 10 2025 guidelines. It features a variety of novel attack techniques such as FlipAttack and DrAttack, along with machine learning-optimized attack selection, comprehensive defense detection capabilities, and support for testing models from multiple platforms, making it suitable for enterprise-level deployment.

Nightingale is a comprehensive Docker toolkit designed for penetration testing and security research, providing a reproducible multi-architecture environment with curated tools for various workflows, including web, network, mobile, and OSINT. Notable features include a browser-based terminal for easy access, community-driven tool enhancements, and integration with security-focused CI tools like Trivy. The project facilitates rapid setup and customization, allowing users to tailor the environment to specific testing needs or internal usage.

Open Attack Surface Management (OASM) is an AI-powered, open-source platform designed to discover, monitor, and secure digital infrastructures by providing continuous asset visibility and vulnerability assessments. Notable features include automated asset discovery, a distributed scanning engine for high scalability, real-time monitoring with alert integration, and support for AI assistants to enhance data analysis and querying capabilities. The tool streamlines security workflows and risk management through customizable scanning configurations and comprehensive reporting functionalities.

**reconFTW** is an automated reconnaissance tool aimed at security researchers and penetration testers, streamlining the information-gathering process. It integrates a variety of scanning and enumeration techniques, allowing users to gather extensive details on target domains through an intuitive interface. Notable features include support for multiple platforms, Docker compatibility, and an array of built-in reconnaissance modules that enhance operational efficiency.

RedTeam Agent is an autonomous AI-powered simulation tool designed for red teaming and penetration testing, streamlining the process of security assessments across multi-platform environments. It features 8 specialized AI agents that facilitate a comprehensive 5-phase attack methodology, alongside containerized Kali tools and a web-based GUI for managing projects and operations with minimal user interaction. Notable functionalities include an intelligent case collection pipeline and robust reporting mechanisms, allowing users to efficiently conduct security evaluations and automate repetitive tasks.

SpectreWeb AI is an advanced MCP server facilitating AI-assisted manual web penetration testing, which enables operators to leverage AI tools for reconnaissance, payload generation, and response analysis while maintaining direct control over testing strategies. Its notable features include context-aware payload creation, built-in WAF bypass capabilities, and session persistence for findings across multiple targets. This tool is designed to overcome challenges presented by traditional blind scanning techniques, optimizing the testing process for bug bounty hunters and security professionals.

Techfinder is a high-performance technology detection tool developed in Go, designed to identify web technologies and frameworks—including dynamically loaded JavaScript frameworks—using a headless browser with a reusable browser pool for enhanced scanning speeds. It features multi-threaded processing, various output formats (plain text, JSON, CSV), Discord integration for real-time alerts, and robust configuration options for large-scale scans. Key capabilities include a fast static detection mode, crash-safe resume functionality, and automated downloading of necessary fingerprint data on first use.

Temodar Agent is an AI-powered security analysis platform specifically designed for WordPress plugins and themes, offering security researchers an efficient mechanism for vulnerability assessment. Key features include risk-based target prioritization, Semgrep-powered static analysis, and AI-assisted investigation workflows that maintain context throughout the review process. Built as a local-first Docker application, it supports multi-provider LLM orchestration and facilitates structured code reviews to enhance vulnerability triage.

WordList is a comprehensive tool for generating custom wordlists intended for web application fuzzing and reconnaissance tasks. It supports the creation of various specialized wordlists, including those for DNS enumeration, default credentials, and parameters extracted from URLs, while also offering integrations for use with the Nuclei vulnerability scanner. Notable features include the ability to aggregate wordlists from multiple sources, classifies output by size, and efficiently prepares tailored wordlists based on specific URL patterns and application technologies.

XSSRecon is an automated tool designed for the discovery of reflected XSS vulnerabilities in web applications by testing URL parameters for reflection of a specified payload. It features a dual detection method for assessing input reflection in both HTTP responses and DOM, as well as support for concurrent processing and customizable testing of special characters. Additional capabilities include smart optimizations for testing efficiency, flexible output formats, and integration with external tools like `pvreplace` for precise parameter injection.

ABSpider Recon is a web reconnaissance tool designed for authorized passive intelligence gathering and active vulnerability assessments, targeted primarily at bug bounty hunters, security engineers, and auditors. It features a unified dashboard and command-line interface (CLI) that simplifies key reconnaissance tasks, including DNS lookups, port scans, and payload checks into a streamlined workflow. Notably, it offers a live demo environment and can be run locally via npm, making it accessible for both professionals and educational purposes.

The "Awesome Hacking with AI" repository is a comprehensive resource that explores the integration of Artificial Intelligence in offensive security practices, such as penetration testing and red teaming. It features a curated collection of AI-driven tools, methodologies, and case studies while emphasizing ethical considerations in their application. Notable features include a learning roadmap, prompt libraries for various tasks (e.g., payload generation and OSINT profiling), and advanced tactics like AI-powered malware development and botnet exploitation.

Beetle is an offline-first Application Security Intelligence Platform designed for the analysis of Android APKs and iOS IPAs, including those built with Flutter and React Native. It integrates static analysis with a focus on creating explainable workflows that correlate isolated findings into realistic attack chains, facilitating better understanding of vulnerabilities with evidence-based insights. Key features include low false-positive rates, source navigation for precise findings, and optional AI assistance for reasoning about security issues, all while maintaining data security by performing analysis locally.

bf_active_sub is a subdomain enumeration tool designed for active scanning through brute-force techniques. It efficiently verifies the existence of subdomains by attempting various combinations from a provided wordlist, ensuring zero false positives, and allowing results to be outputted directly in the terminal or saved to a file. Notable features include support for various wordlist sizes and compatibility with Debian-based systems, making it a valuable asset for penetration testing and bug bounty efforts.

BladeRecon is a modular reconnaissance framework tailored for bug bounty hunters and web penetration testing, focusing on attack-surface discovery and reporting. It offers a terminal-native workflow that generates clean output in various formats, including HTML and Markdown, while integrating features such as subdomain discovery, endpoint extraction, secret detection, and Nuclei scanning for improved intelligence gathering. Designed to be lightweight and beginner-friendly, BladeRecon prioritizes usability without sacrificing operational transparency, making it a valuable tool for small-scale pentesting efforts.

The Bug Bounty Methodology and Tools repository provides a structured approach for ethical hackers to enhance their bug bounty hunting skills. It emphasizes the importance of reconnaissance and OSINT, which constitutes the majority of the bug hunting process, while also listing essential tools used during red team operations. Key features include a comprehensive methodology guide and practical resources, with a focus on continuous learning and improving attack vectors.

Cariddi is a domain crawling and scanning tool designed to identify sensitive information such as endpoints, secrets, API keys, and various file extensions from a list of provided URLs. Notable features include intensive crawling of subdomains, options for hunting specific secrets and errors, and customizable scanning parameters, making it particularly useful for penetration testing and bug bounty hunting. The tool can be easily installed across various platforms, supporting both single-target and bulk scanning configurations.

Cloud is a cybersecurity tool designed for monitoring and collecting SSL certificate data from major cloud service providers, specifically AWS EC2 and GCP. Its primary use case is to assist security researchers in enumerating subdomains, domains of target companies, and performing IP lookups, with daily updates to the dataset ensuring relevance and timeliness. Notable features include the ability to discover origin IP addresses behind security proxies and the organization of data into structured CSV files for easy access and analysis.

CommiPiste is a tool designed for precise identification of open-source web software versions and associated CVEs by analyzing public static files. Its primary use case is authorized security testing and inventory management, leveraging a signature database that allows users to match files against specific Git commits. Notable features include automatic database updates, support for various output formats, and the capability to autoindex unknown software repositories for future scans.

DeepBug is an automated reconnaissance and bug bounty hunting platform that integrates various open-source tools to facilitate subdomain enumeration, port scanning, JavaScript analysis, and vulnerability scanning within an intuitive user interface. Its primary use case is to streamline bug bounty workflows, allowing users to manage projects, perform discovery scans, and generate comprehensive reports on findings. Notable features include customizable project management, a robust dashboard for tracking scan progress, and integration with popular vulnerability scanning tools like Nuclei.

The HTB / THM / OSCP Master Penetration Testing Checklist is a comprehensive, modular framework designed to guide penetration testers through the phases of engaging with Hack The Box, TryHackMe, and OSCP-level machines. Key features include structured sections from setup and reconnaissance through exploitation and post-exploitation activities, as well as a quick reference for tools, commands, and troubleshooting. This checklist serves as a valuable resource for both beginners and intermediate practitioners in the penetration testing field.

KeyFinder is a browser extension designed for Chrome and Firefox that passively scans web pages for leaked API keys, tokens, and secrets. With over 80 detection patterns across multiple categories such as cloud services, payments, and databases, it operates silently in the background, leveraging techniques like entropy analysis and monitoring various attack surfaces to identify sensitive information. Notable features include zero dependencies, compatibility with modern web standards (Manifest V3), and the ability to alert users via tab badges when potential exposures are detected.

Kumo is an OSINT and security reconnaissance framework that enables the analysis of a target domain via a single command, leveraging 26 parallel modules to deliver comprehensive results in real-time. Key features include extensive checks on DNS records, email security, open ports, leaked credentials, and malware associations, as well as a user-friendly web interface and fast scanning options. This tool is ideal for security professionals conducting thorough assessments of domain-related vulnerabilities and exposures without the need for API keys.

Laitoxx is an OSINT and cybersecurity toolkit featuring a user-friendly GUI, designed for educational purposes to facilitate security analysis, penetration testing, and digital footprint assessment. Key functionalities include an extensible plugin system (Lua), various OSINT tools for data collection, web and network scanning capabilities, and a suite of utilities for hash and text manipulation. Notable enhancements in version 2.3.2 include an advanced theme editor, auto-theme scheduling, and multiple bug fixes for enhanced stability and usability.

NetWatch is an all-in-one network security dashboard designed to convert any Linux machine into a comprehensive security sensor. It features real-time deployment of honeypots, traffic sniffing, OSINT tools, and threat management capabilities, all accessible via a single command and user interface. Key functionalities include automatic threat scoring, detailed traffic analysis, and the ability to block attackers, making it suitable for security professionals and home users alike.

Fast, parallel and easy to use web crawler for penetration testing and bug bounty

OpenFirebase is an automated security scanning tool designed to extract Firebase configurations from Android APKs and iOS IPAs, enabling unauthenticated and authenticated scanning of Firebase services, such as Realtime Database, Firestore, and Storage. Notably, it detects accidentally embedded service account credentials and supports multiple input formats, providing comprehensive analysis for both mobile and web applications. The tool also includes built-in wordlists and example payloads for effective fuzz testing and vulnerability assessment.

`pwneye` is an offensive security tool designed for interacting with IP cameras that support ONVIF and RTSP protocols, streamlining various tasks such as discovery, authentication testing, metadata collection, and stream validation through a single command-line interface. Notable features include multithreaded bruteforce attacks for credential guessing, ONVIF device enumeration, RTSP stream handling, and a dedicated live preview client, all aimed at facilitating security assessments of surveillance systems.

SQLMutant is a mutation testing tool designed for Red Teams and Bug Bounty Hunters that automates the process of identifying SQL injection vulnerabilities within a specified domain. It leverages tools like Waybackurls, HTTPX, Arjun, and SQLMAP to perform domain enumeration, URL fetching, and SQL injection testing, while providing various fuzzing capabilities for URLs, headers, and form data. Notable features include integration with historical web page archives and aggressive parameter extraction to enhance vulnerability detection.

urlX is a high-performance reconnaissance tool for bug bounty hunters, penetration testers, and security researchers, facilitating passive URL discovery from over 11 intelligence sources, live host probing, and active web crawling for hidden endpoints. Its key features include smart file and extension filtering, concurrent processing using Go routines, and optional integration with various API keys to enhance results. Designed for swift and effective attack surface identification, urlX requires minimal setup and is built for real-world reconnaissance workflows.

VexiumCTF is an intentionally vulnerable web application framework designed for security training and education. It facilitates hands-on practice with security vulnerabilities through Docker or XAMPP setups, featuring a web interface and a database management system via phpMyAdmin for effective experimentation. Key functionalities include easy configuration for SQL initialization and comprehensive logs to aid analysis during testing sessions.

WebAnalyzer v3.6.2 is a professional-grade cybersecurity platform designed for advanced domain analysis, vulnerability assessment, and intelligence gathering. It features enterprise bulk processing capabilities, allowing users to analyze thousands of domains efficiently with a MySQL-backed queue system, AI-powered analysis modules, and enhanced stealth techniques. Notable features include real-time metrics, comprehensive reporting, and scalable architecture that supports dynamic resource management and concurrent processing.

WifiForge is a tool designed to provide a safe and legal environment for learning WiFi hacking, built on the Mininet-WiFi framework. It automates the setup of networks and necessary tools to conduct various WiFi exploitation labs, eliminating the need for extensive hardware and overhead. Key features include easy installation, detailed documentation, and a focus on educational use for cybersecurity professionals.

AgentHound is an open-source offensive security framework designed for AI agent infrastructures, capable of conducting comprehensive reconnaissance, asset fingerprinting, credential harvesting, model inventorying, and active exploitation. It integrates findings into a Neo4j graph to visualize attack paths, addressing every layer of the agentic stack, including model gateways and inference servers. Notable features include credential inventorying, model inversion capabilities, and the ability to perform active exploitation through tool and instruction poisoning.

AL-ANQA-FIRMWARE is an offensive security firmware designed for the LilyGo T-Deck, transforming it into a portable pentesting terminal equipped with over 60 integrated WiFi, Bluetooth, network, and radio tools. Key features include on-device WiFi attack capabilities, a comprehensive Bluetooth LE security audit suite, an interactive SSH client, and tools for wardriving and device monitoring—all operational without the need for additional PCs or GUIs, ensuring a self-contained and efficient testing environment.

Argos is a passive Wi-Fi tracking tool designed to capture probe request frames from Wi-Fi enabled devices, allowing users to extract SSID information and acquire geographic data through Wigle, subsequently visualizing this on a Google Maps interface. The tool features a web interface, dynamic data filtering options, and parameters for controlling the scanning environment, while emphasizing strict ethical usage guidelines to prevent privacy violations. Notable functionalities include the ability to limit signal strength, support for multiple network interfaces, and compatibility with various Wi-Fi adapters for optimal performance.

AutoAR is an automated security reconnaissance and vulnerability hunting platform designed for bug bounty hunters and penetration testers, built in Go. It facilitates the entire recon-to-report pipeline by offering features such as subdomain enumeration, DNS takeover detection, automated vulnerability scanning with Nuclei templates, and multi-platform mobile app analysis. Notable functionalities include automatic result uploads to Cloudflare R2 storage, comprehensive monitoring for subdomain and URL changes, as well as integrated AI capabilities for enhanced searching and vulnerability detection.

Awesome AI Pentesting is a curated repository of AI-powered tools, frameworks, and resources designed for penetration testing, bug bounty hunting, and cybersecurity operations. It features a wide range of autonomous agents capable of executing end-to-end security assessments, leveraging large language models and machine learning to identify and exploit vulnerabilities in various environments. Notable tools include fully autonomous agents with high success rates, integrated AI tools for real-time testing, and robust frameworks for orchestrating comprehensive security evaluations.

Awesome Cyber AI Arsenal is a comprehensive collection of over 250 battle-tested offensive, defensive, and AI-powered security tools, organized into distinct categories for Red Team, Blue Team, and AI security applications. This repository facilitates quick access and deployment of security tools, emphasizing responsible usage for authorized testing and education purposes only. Notable features include extensive subcategories tailored for specific security functions, making it an invaluable resource for security professionals.

BOFA is an open execution fabric designed for authorized security workflows, enabling the seamless movement of authorization from local environments to ephemeral cloud workers. Its primary use case revolves around enhancing security analysis by integrating memory retention, public intelligence, and local notes while facilitating a structured review process for findings. Notable features include built-in AI copilot support, a comprehensive bounty workspace setup, and robust authorization management, ensuring that evidence and artifacts are securely tied to each workflow.

Bug-Bounty-Tampermonkey-Scripts is a collection of user scripts designed for use with the Tampermonkey browser extension, aimed specifically at enhancing the bug bounty hunting process. The primary use case includes automating the extraction of URLs, titles, domains, and specific URL counts from Google search results, facilitating more efficient data gathering for security researchers. Notable features include customizable script functions that streamline the workflow for gathering and analyzing relevant information during bounty hunting activities.

Cascavel is an autonomous Continuous Threat Exposure Management (CTEM) engine designed to streamline Red Team operations and validate adversarial exposures. It automates the process of scoping and discovery, prioritizes vulnerabilities with real-time threat intelligence, and employs a robust validation engine to minimize false positives while generating actionable remediation recommendations. Notable features include dynamic mapping of infrastructure, integration with threat databases, and support for various output formats, all engineered to enhance operational efficiency in cybersecurity.

CVE-MCP is a centralized vulnerability intelligence platform that unifies data from multiple sources, including NVD, EPSS, CISA KEV, and GitHub Advisory, to provide real-time intelligence tailored for AI agents. It streamlines the process of accessing critical vulnerability information on-demand, eliminating the need for cumbersome manual searches across disparate databases. Notable features include an extensive array of integrated tools, seamless API access, and compatibility with established frameworks like MITRE ATT&CK, significantly enhancing efficiency in vulnerability assessment and response.

Digital Forensics Tools is a comprehensive repository that curates essential utilities for digital investigations, including tools for disk forensics, memory analysis, malware detection, and network monitoring. Key features include disk imaging, file recovery, and memory acquisition tools, alongside advanced utilities like Volatility for memory analysis and Autopsy for user-friendly disk examination. This toolkit serves as a valuable resource for cybersecurity professionals conducting forensic investigations and data recovery tasks.

EndpointHunter is a bug bounty tool that efficiently extracts various sensitive information, including API endpoints, LFI paths, secrets, and cloud storage URLs, from JavaScript, CSS, and HTML files. Its multi-threaded scanning capability enhances speed, while seamless integration with other recon tools and automated filtering of static assets optimize the reconnaissance process for security researchers. Notable features include smart recon for linked files, noise reduction, and support for output saving and batch processing of multiple URLs.

favirecon is a reconnaissance tool that utilizes favicon.ico files to enhance the target information gathering phase. It allows users to quickly identify technologies, web application firewalls, exposed panels, and known services associated with a given domain or list of domains. Notable features include configurable output options, support for concurrency, and the ability to filter results based on favicon hashes.

The Hardware Hacking Tools repository serves as a comprehensive catalog of various tools utilized for hardware hacking, focusing on areas such as firmware analysis, hardware debugging, and physical attack strategies. It includes specific tools for JTAG/SWD debugging, firmware dumping, reverse engineering, and side-channel attacks, making it invaluable for security researchers and penetration testers. Notable features include categorized tool listings by attack methods and links to both open-source and commercial hardware hacking tools.

PassLLM is an advanced framework for targeted password guessing that leverages Personally Identifiable Information (PII) to predict likely passwords, achieving 15% to 45% higher accuracy than existing models. Its notable features include the use of a fine-tuning technique called LoRA for efficient resource management, advanced inference algorithms for optimized guessing, and the capability to harness millions of leaked PII records for training. Designed for high accuracy on consumer hardware, it is straightforward to deploy using Google Colab.

PentestingEverything is an open-source, comprehensive knowledge base for penetration testing, encompassing methodologies and resources across 23 security domains including web, API, mobile, and cloud. The tool offers a fully searchable interface with over 108 documentation pages, a filterable PDF library, and structured learning paths, enhancing the efficiency and effectiveness of security assessments. Its integration with an Agent Skill allows practitioners to apply this knowledge interactively during engagements, ensuring safe and authorized testing practices.

The Physical Penetration Testing Tools repository provides a comprehensive set of methods and tools for conducting physical security assessments by simulating real-world attacks. Notable techniques include badge cloning using devices like Proxmark and Flipper Zero, tailgating with various access tools, and social engineering tactics aimed at exploiting human factors. This collection aids security professionals in identifying vulnerabilities in physical security controls through practical tools and methodologies.

ReconNess is a web application designed to streamline the reconnaissance process for cybersecurity professionals, enabling them to efficiently organize and manage their recon data without requiring extensive scripting skills. Its primary use case is providing continuous recon capabilities through a customizable pipeline of reconnaissance tools that can be triggered based on schedules or events. Notable features include a user-friendly interface, the ability to aggregate data from various agents, and a focus on helping users concentrate on identifying potentially vulnerable targets.

Rekono automates the penetration testing process by integrating multiple hacking tools to streamline tasks such as OSINT, host discovery, and vulnerability scanning. Its notable features include email and Telegram notifications for findings, integration with Defect-Dojo for advanced vulnerability management, and a dedicated Telegram bot to execute tests from any device. This tool aims to enhance a pentester's efficiency by allowing them to focus on analysis rather than repetitive testing tasks.

secator is a comprehensive task and workflow runner tailored for security assessments, enhancing the efficiency of penetration testers and security researchers. It features a curated list of commands with unified input and output options, CLI and library support, and the ability to run distributed tasks via Celery, making it suitable for both simple and complex security workflows. Notably, secator integrates numerous well-established security tools to streamline the assessment process.

Spectre is an Android application designed for monitoring and interacting with various wireless signals, including Bluetooth, Wi-Fi, cellular, and GNSS. Its primary use case revolves around RF exposure measurement and pen-testing, featuring tools for detailed analysis of signal strength, local network discovery, and BLE device interaction. Notable features include comprehensive support for multiple network technologies, advanced filtering capabilities, and a GATT inspector for Bluetooth devices, all while adhering to Android's security restrictions.

The Big Brother V5.0 is an advanced Open Source Intelligence (OSINT) framework designed for comprehensive reconnaissance on individuals, organizations, or groups. It features a highly interactive holographic dashboard supported by 21 distinct intelligence modules that facilitate deep investigative analysis. The tool allows users to conduct detailed searches and surveillance, enhancing the capabilities for gathering critical data while also offering an exclusive service for more intensive intelligence requirements.

WEBFANG v2.0 is a command-line reconnaissance toolkit specifically designed for ethical hacking, enabling users to perform both passive and active reconnaissance through features such as web spidering, subdomain scanning, WHOIS checks, DNS queries, and header fingerprinting. It supports integration with Shodan and URLScan, and is modular in design, allowing for extensions and enhanced output options. Intended for authorized penetration testing and OSINT research, the tool ensures that users maintain compliance with ethical guidelines during usage.

The website-passive-reconnaissance tool automates passive reconnaissance on websites to aid cybersecurity assessments without directly engaging with the target. Its primary use case is to streamline the reconnaissance phase by defining and executing necessary steps using various integrated API services. Notable features include customizable API key integration, configurable options for domain analysis, and a user-friendly command-line interface.

5Ghost WiFi Lab is a dual-band Wi-Fi research and security testing tool designed for the Flipper Zero, utilizing the Realtek RTL8720DN chipset to enable comprehensive 2.4 and 5 GHz scanning. It features capabilities such as WPA/WPA2 handshake capture, clientless PMKID capture, and BLE reconnaissance, making it suitable for advanced security testing and educational purposes. The tool operates through a user-friendly app with multiple firmware support and connects seamlessly to the Flipper Zero without the need for additional wiring or flashing.

The cvemapping tool aggregates CVE exploit data from GitHub, allowing users to clone repositories or export CVE information in JSON format for web use. It features options for pagination and year-specific searches, making it versatile for both developers and security researchers aiming to analyze or present CVE-related data efficiently. Notable features include the ability to authenticate using a GitHub token and the straightforward export functionality for integration with web applications.

Cywise is a cybersecurity solution designed for both on-premises and SaaS environments, enabling users to scan and secure their web-facing and internal infrastructures. It features a robust vulnerability scanner that monitors for over 50,000 vulnerabilities with automated remediation, alongside active data leak monitoring and intelligent honeypots to detect and analyze potential threats. This tool is particularly suitable for small to medium-sized enterprises looking to enforce comprehensive security measures while maintaining control over their data and infrastructure.

DPULSE is an advanced desktop application designed for domain OSINT and reconnaissance, streamlining the process to gather intelligence from open sources with minimal setup. Key features include automated WHOIS and subdomain enumeration, interactive network graph visualizations, real-time security analysis, and integrated API support, all presented in an easily navigable HTML report. This tool serves OSINT professionals looking to enhance their domain reconnaissance workflows while maintaining a user-friendly interface across Windows and Linux platforms.

Information Security Tasks is a collaborative repository that serves as a comprehensive resource for cybersecurity professionals, offering real-world infosec notes and methodologies. It features extensive directories covering offensive and defensive security topics such as penetration testing, incident response, and vulnerability analysis, alongside daily auto-updates of news and tools. Notable elements include an organized structure for various cybersecurity domains, community submission options for resources, and insights into emerging threats like AI and cloud security.

Nerva is a high-performance command-line interface (CLI) tool for fast service fingerprinting, capable of identifying over 170 network protocols across various transport layers including TCP, UDP, and SCTP. It is designed for use in network reconnaissance, providing features such as rich metadata extraction, security misconfiguration detection, and support for various output formats. Notably, Nerva integrates seamlessly with other security tools like Naabu, enabling automated workflows and robust scanning capabilities.

OpenDoor is an open-source CLI platform designed for authorized web reconnaissance, focusing on directory discovery and subdomain enumeration. It includes features such as WAF detection, bypass probing, and detailed reporting tools, making it ideal for security researchers and penetration testers to identify exposed resources and vulnerabilities on web servers. The tool emphasizes ethical usage, requiring explicit permission for testing.

PRISM is a self-hosted Open Source Intelligence (OSINT) platform that provides comprehensive scanning of domains, IPs, emails, phone numbers, and usernames across over 22 modules, delivering insights such as WHOIS data, threat intelligence, and OPSEC scoring. Notable features include real-time web dashboards, AI-driven summary analyses, and detailed report generation in HTML/PDF formats, making it an effective tool for risk assessment and threat investigation.

S3DNS is a specialized DNS server designed for identifying exposed cloud storage buckets across various platforms such as AWS S3, Google Cloud Storage, and Azure Blob. Key features include recursive CNAME resolution, detection of potential subdomain takeovers, caching and rate limiting capabilities, and support for IPv6 checks against known cloud IP ranges. This tool is particularly beneficial for penetration testers and cloud security analysts engaged in reconnaissance activities.

SecTools is a comprehensive repository of curated open-source and public tools designed for various cybersecurity applications, including OSINT, vulnerability analysis, and application security testing (SAST/DAST). It offers a user-friendly table that categorizes tools with their descriptions, licenses, and activity indicators, facilitating streamlined access to resources for security workflows. Notable features include a focus on UNIX compatibility and an organized structure that enhances usability across multiple security domains.

Hunt down social media accounts by username across social networks

VSCodium-Rust is a high-performance, agentic integrated development environment (IDE) tailored for AI engineers, enabling local machine learning model training and software development with enhanced data sovereignty. Key features include a multi-agent orchestration architecture for simultaneous task management, a native PyTorch ML studio for streamlined machine learning workflows, and robust Git integration, all while ensuring that user data remains secure and private. The IDE is built upon a lightweight Rust, Tauri, and TypeScript stack, promoting efficiency and autonomy in development processes.

The "CIDR IP Ranges By Country" repository provides a comprehensive directory of CIDR IP ranges for both IPv4 and IPv6, organized by country. This tool is primarily used for network management and geolocation services, with the notable feature of being updated every hour to ensure accuracy and relevancy. Users can easily access IP range files for specific countries to facilitate their networking needs.

EMBA is a comprehensive security analyzer specifically designed for the firmware of embedded devices, catering to penetration testers, product security teams, and developers. The tool facilitates the entire security analysis workflow, including firmware extraction, static and dynamic analysis through emulation, SBOM generation, and the creation of web-based vulnerability reports, effectively identifying potential weaknesses such as insecure components or hard-coded passwords. Its command-line interface and ability to present findings in an accessible web format enhance usability and streamline the security assessment process.

The rix4uni/medium-writeups repository aggregates recent articles and write-ups focused on cybersecurity, penetration testing, and security awareness from Medium. Its primary use case is to provide users with timely content related to various security topics, including the OWASP Top 10 vulnerabilities and advanced pentesting techniques. Notable features include categorization by tags such as "security," "hacking," and "infosec," allowing for easy navigation and discovery of relevant materials.

OpenEASD is an open-source external attack surface discovery (EASD) tool designed for red teamers and defenders, enabling users to rapidly map and assess external surfaces of authorized targets without the expense of commercial solutions. It integrates multiple recon tools—such as `subfinder`, `amass`, and `nmap`—into a single web interface, offering features like scheduling, alerts, and findings tracking, while ensuring results remain local to the user's infrastructure. This self-hosted platform emphasizes transparency and security through careful sourcing of its components and is aimed at small security teams, consultancies, and individual security learners.

The "resolvers" tool provides a regularly updated list of DNS resolvers, with updates executed every hour. Its primary use case is to supply reliable and fresh DNS resolver information, categorized into three distinct files based on the recency of updates: resolvers updated within the last hour, stable resolvers from the past 24 hours, and all available resolvers. Notable features include automated saving of fresh resolvers using `dnsvalidator` and systematic organization for user accessibility.

scope is a CLI tool that provides a curated dataset for querying bug bounty program scopes across various platforms, including Bugcrowd and HackerOne. It enables security researchers to efficiently identify in-scope domains and assets through regular automated updates and a command-line interface for targeted searches. Notable features include categorized files for wildcards, domains, and GitHub repositories, along with a comprehensive list of in-scope and out-of-scope targets for enhanced usability in bug bounty activities.

Shodan Dorks is a specialized query catalog for Shodan that enhances the search experience by providing categorized and frequently updated dork lists, specifically for discovering various internet-connected devices such as cameras, industrial control systems, and network infrastructure. It features real-time updates every six hours to reflect current results and automatically purges queries that return zero results, making it a valuable tool for security professionals and researchers. The repository includes a wide array of search filters and exploitation details, enabling users to efficiently locate and assess vulnerable devices.

The wordpress-plugins repository is an automated monitoring tool that continuously aggregates and updates data from the official WordPress Plugin Directory, providing actionable insights for developers and security researchers. It utilizes GitHub Actions to refresh the metadata every six hours, allowing easy access to essential plugin information such as installation statistics, updates, and compatibility details in structured JSON format. Notable features include a custom data mining tool, JSON processing capabilities, and comprehensive analytics for tracking the overall health of the WordPress plugin ecosystem.

The Android Security & Reverse Engineering YouTube Curriculum is a comprehensive educational resource focused on various aspects of Android security, including exploits, reverse engineering, and vulnerabilities in mobile applications. It features a curated collection of talks and demonstrations from prominent security conferences, addressing topics like heap exploitation, mobile permissions, and countermeasures against mobile threats. Notably, it educates on advanced concepts such as Bluetooth security, malware analysis, and attack vectors affecting the Android ecosystem, making it essential for cybersecurity practitioners and researchers.

C2 Tracker is a community-driven IOC feed that aggregates IP addresses related to known malware, botnets, and command-and-control (C2) infrastructures by leveraging searches from platforms like Shodan. Its primary use case is to facilitate threat intelligence by providing a regularly updated feed that can be ingested by various SIEM and EDR systems, enhancing detection and investigation capabilities. Notable features include version-controlled historical data, weekly updates, and compatibility with tools like OpenCTI and FortinetSIEM for streamlined integration and alerting.

The Cyber Detective Cheatsheets repository provides a comprehensive collection of cheat sheets focused on various aspects of Open Source Intelligence (OSINT) gathering techniques. Notable features include easily accessible text versions of cheat sheets on topics such as username, email, and reverse image OSINT, as well as guides for information gathering from companies and geolocation data. This tool serves as a practical resource for security professionals and investigators looking to streamline their OSINT processes.

The ctf-skills repository provides an extensive collection of agent skills designed to facilitate the solving of Capture The Flag (CTF) challenges across various domains, including web exploitation, binary pwn, reverse engineering, and more. Notable features include support for multiple installation methods, a comprehensive tool installer script, and detailed skill documentation for on-demand use, allowing users to efficiently integrate the necessary tools as challenges arise. It is compatible with any tool adhering to the Agent Skills specification, enhancing its versatility in competitive cybersecurity contexts.

EmailAll is a powerful email collection tool designed to aggregate email addresses from various online sources, including search engines and datasets. Its primary use case is to support cybersecurity professionals in gathering emails for domain reconnaissance, and it features integration with multiple API services for data retrieval along with modular results storage in JSON format. The tool allows easy configuration for proxies and APIs, enhancing its flexibility for various deployment environments.

GooHak is an automated tool designed for launching Google hacking queries against specified target domains to uncover vulnerabilities and facilitate enumeration. Its primary use case is to streamline the process of gathering information through tailored search queries, leveraging Google’s search capabilities. Notable features include straightforward command-line usage and dependencies tailored for Linux environments.

InstagramPrivSniffer is a digital investigation tool designed for accessing and analyzing posts from private Instagram accounts that are made visible through collaborations with public accounts. Notable features include the ability to download and view media from these private accounts, serving primarily as an OSINT resource for cybersecurity professionals. The tool is intended strictly for educational and research purposes, and its use should be approached with legal considerations in mind.

Legendary OSINT is a comprehensive curated repository of open-source intelligence (OSINT) tools and resources designed to aid users in various investigative scenarios. It encompasses a diverse range of categories, including social media searches, geospatial analysis, malware investigation, and dark web monitoring, facilitating enhanced data collection and analysis for cybersecurity professionals and researchers. Notable features include categorized documentation, contributions from multiple sources, and a focus on responsible usage of third-party tools.

o365recon is a PowerShell script designed for retrieving information from Office 365 and Azure AD using valid credentials. Its primary use case is to facilitate information gathering for security assessments, with a notable feature allowing optional Azure querying through a simple command-line interface. The tool requires the installation of MSOnline and AzureAD modules and includes support for multi-factor authentication.

The Obsidian OSINT Templates provide structures and frameworks for organizing data during Open Source Intelligence (OSINT) investigations using the Obsidian notetaking tool. Notable features include customizable templates designed to enhance data recording and connection-making, which facilitate efficient analysis and documentation of investigative findings. This resource aims to support both new and experienced users in effectively leveraging Obsidian for their OSINT needs.

onedrive_user_enum is a tool designed for enumerating valid OneDrive users by leveraging the HTTP response codes from file share URLs. Its primary use case is passive user enumeration, which avoids direct login attempts, making it less detectable by the target organization. Notable features include options for remote logging to MySQL, local SQLite database support, user list truncation, and mechanisms for de-duplication and user list management.

Operative Framework is a digital investigation tool designed for interacting with multiple targets, executing a variety of modules, and managing links with these targets. Its notable features include the ability to export reports in PDF format, support for crafting custom modules, and a RESTful API for integration, all underpinned by a redesigned architecture in Rust for enhanced performance and functionality.

OSINT-Tools is a curated collection of open-source intelligence (OSINT) tools aimed at facilitating the gathering and analysis of publicly available information. It includes a variety of tools for data extraction, reconnaissance, metadata analysis, and geolocation, with notable options like Maltego for link analysis, Recon-ng for web-based reconnaissance, and SpiderFoot for footprinting. The repository encourages contributions through pull requests, providing a collaborative platform for enhancing OSINT resources.

The Pentest Book is a comprehensive resource for penetration testers, offering a collection of information, scripts, and methodologies gathered during various pentests. It serves as a practical guide for conducting recon, exploring vulnerabilities in web and cloud services, and utilizing tools like Burp Suite, complemented by cheat sheets and checklists. Key features include easy navigation, a searchable interface, and continuous updates to ensure relevance and accuracy in the fast-evolving cybersecurity landscape.

ReconPi is a lightweight reconnaissance tool designed for extensive domain analysis and asset discovery using a Raspberry Pi or a VPS. Its primary functionality includes resolving domain names, subdomain enumeration, vulnerability scanning using Nmap, and integrating tools like Nuclei for template-based security assessments. Notable features include automated reporting, Slack notifications, and easy installation through a straightforward script, making it accessible for cyber reconnaissance tasks.

Seekr is a multi-purpose toolkit designed for gathering and managing Open Source Intelligence (OSINT) data, featuring a streamlined web interface for data collection, organization, and analysis. Key functionalities include integration with popular OSINT tools, account discovery, customizable themes, and the absence of API keys for any features, making it suitable for researchers and investigators seeking to enhance their OSINT workflows. It is currently in beta development and allows for easy setup on various platforms including Windows, Linux, and Docker.

The Telegram Channel Scraper is a Python-based tool that enables users to scrape messages and media from Telegram channels using the Telethon library. Key features include real-time scraping, enhanced metadata capture such as message statistics and reactions, smart filtering for channel management, and data export capabilities in CSV and JSON formats. With automatic database migration and a user-friendly interactive menu, it supports efficient channel monitoring and data retrieval.

Web Hacking is a comprehensive repository of notes focused on bug bounty hunting and penetration testing, collating various techniques for vulnerability discovery and exploitation. The tool features extensive reconnaissance and OSINT methods, a detailed list of common vulnerabilities, and bypass techniques, making it a valuable resource for security professionals seeking to enhance their skills and methodologies in web application security. Additionally, it encourages community contributions, fostering continuous improvement and updates of its content.

WitnessMe is a versatile web inventory tool designed for efficient scanning and data gathering, primarily utilizing headless Chromium via the Pyppeteer library. It excels in processing large Nessus and NMap XML files, generates CSV and HTML reports, and features a RESTful API for remote scanning and extensibility to accommodate custom functionalities. With additional capabilities like HTTP proxy support, signature scanning through YAML files, and terminal screenshot previews, WitnessMe stands out for providing a comprehensive workflow without significant installation challenges.

Network Security Sniffer

Search and browse documents and data; find the people and companies you look for.

734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI & 20+ platforms · Penetration testing, DFIR, threat intel, cloud security & more · Apache 2.0

The Ultimate Information Gathering Toolkit

ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

基于ARL-V2.6.2修改后的版本

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

Go CLI and Library for quickly mapping organization network ranges using ASN information.

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

A curated list of tools officially presented at Black Hat events

A collection of fascinating and bizarre Censys Search Queries

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Defund the Police.

A collection of awesome one-liner scripts especially for bug bounty tips.

:scream: A curated list of amazingly awesome OSINT

OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.

一个攻防知识库。A knowledge base for red teaming and offensive security.

A curated list of awesome social engineering resources.

📚 A Curated List of Awesome Telegram OSINT Tools, Sites & Resources

⚡️An awesome list of the best Termux hacking tools

The recursive internet scanner for hackers. 🧡

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

An OSINT tool to search for accounts by username and email in social networks.

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

An intelligence gathering tool for hacking Bluetooth

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

An advanced tool for email reconnaissance

Cybersecurity AI (CAI), the framework for AI Security

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

ClatScope Info Tool – The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (70+ features). Perfect for investigators, pentesters, or anyone looking for an effective reconnaissance / OSINT tool.

Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.

The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

Unofficial DedSec Project GitHub Repository

Real-time phishing & scam domain blocklist — 99,000+ curated threats, 828K+ community, free API, multiple formats

DetectDee: Hunt down social media accounts by username, email or phone across social networks.

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discovery and security assessments.

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Full Toolkit for Next-Level Domain Analysis

List of Github repositories and articles with list of dorks for different search engines

An OSINT tool that helps detect members of a company with leaked credentials

IP lookup by favicon using Shodan

Making Favicon.ico based Recon Great again !

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

All In One Web Recon

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.

A Modular Penetration Testing Framework

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

Information gathering tool - OSINT

信息收集 OR 信息搜集

GeoIntel using Google's Gemini API to uncover the location where photos were taken through AI-powered geo-location analysis.

Search WiFi geolocation data by BSSID and SSID on different public databases.

A tool to fastly get all javascript sources/files

Useful tool to track location or mobile number

🕵️‍♂️ Offensive Google framework.

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

🐙 Track down GitHub users.

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Global threat map. Learn wars, conflicts, military bases and history of nations.

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

🔍 Search anyone's digital footprint across 300+ websites

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

A container repository for my public web hacks!

CLI tool for open source and threat intelligence

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

HostHunter a recon tool for discovering hostnames using OSINT techniques.

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.

ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.

OSINT Project. Collect information from a mail. Gather. Profile. Timeline.

A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

Track Instagram users' activities, profile changes and capture content with beautiful dashboards and instant notifications

Download pictures (or videos) along with their captions and other metadata from Instagram.

Asset inventory of over 800 public bug bounty programs.

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

OSINT Tool: Generate username lists for companies on LinkedIn

🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

Malcom - Malware Communications Analyzer

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

Matkap - hunt down malicious Telegram bots

OSINT tools and more but without API key

A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.

A query aggregator for OSINT based threat hunting

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A browser extension for OSINT search

An automated e-mail OSINT tool

A Complete Osint Tool :mag:

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

OffSec OSINT Pentest/RedTeam Tools

So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed.

Here we discuss how one can investigate crypto hacks and security incidents, and collect all the possible tools and manuals! PRs are welcome! If any tool is missing - please open PR!

An insane list of all dorks taken from everywhere from various different sources.

OneForAll是一款功能强大的子域收集工具

OnionSearch is a script that scrapes urls on different .onion search engines.

Open Source research tool to search, browse, analyze and explore large document collections by Semantic Search Engine and Open Source Text Mining & Text Analytics platform (Integrates ETL for document processing, OCR for images & PDF, named entity recognition for persons, organizations & locations, metadata management by thesaurus & ontologies, search user interface & search apps for fulltext search, faceted search & knowledge graph)

Vulnerability Intelligence Platform

The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.

Information Gathering Instagram.

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.

OSINT Framework

OSINT open-source tools catalog

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

A Modern Orchestration Engine for Security

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Work in progress...

A collection of custom security tools for quick needs.

Phishing catcher using Certstream

Information gathering framework for phone numbers

Phunter is an osint tool allowing you to find various information via a phone number 🔎📞

An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents

Powerful plugins and add-ons for hackers

OSINT Tool for Finding Passwords of Compromised Email Addresses

A high performance offensive security tool for reconnaissance and vulnerability scanning

A resource containing all the tools each ransomware gangs uses

:new: The Multi-Tool Web Vulnerability Scanner.

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

AI-Powered Dark Web OSINT Tool

SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Crawler (Bot) searching for credential leaks on paste sites.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. The knowledge is available to all but rarely aggregated in the open, until now.

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

The useful exploit finder

SIGIT - Simple Information Gathering Toolkit

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

Dangerously fast DNS/network/port scanner

Semi-automatic OSINT framework and package manager

Attack Surface Management Platform

Snoop — инструмент разведки на основе открытых данных (OSINT world)

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Social Media OSINT collection containing - tools, techniques & tradecraft.

A collection of most useful osint tools for SOCINT.

⛏️ Extract accounts info from personal pages on various sites for OSINT purpose

SpiderSuite releases, wiki and roadmap

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Subdomain and target enumeration tool built for offensive security testing

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.

In-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.

E-mails, subdomains and names Harvester - OSINT

The Offensive Manual Web Application Penetration Testing Framework.

The most complete open-source tool for Twitter intelligence analysis

Trace Labs OSINT Linux Distribution based on Kali.

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

Dark Web OSINT Tool

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Advanced Search for Twitter.

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

a recon tool that allows searching on URLs that are exposed via shortener services

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.

🕵️🫆 (2-in-1) Emaill and Username OSINT tool that analyzes username and email presence across multiple platforms, intended for security research, investigations, legitimate analysis

OSINT tool for finding profiles by username

Username tools for penetration testing

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

OSINT tool to find breached emails, databases, pastes, and relevant information

WhatsApp spy - logs online/offline events from ANYONE in the world

This repository has the JSON file required to perform user enumeration on various websites.

a file-sharing tool that allows you to find the responsible person in case of a leakage

Automation for internal Windows Penetrationtest / AD-Security

Real-world infosec wordlists, updated regularly

Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

A fast WordPress plugin enumeration tool

This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux

Fetch information about a public Google document.

Xteam All in one Instagram,Android,phishing osint and wifi hacking tool available

OSINT for YouTube made simple.

Simple OSINT script to find Instagram profiles by name and e-mail/phone

Zehef is an osint tool to track emails