> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

osint-hub

OSINT Hub is a web-based resource that provides a comparative analysis of various OSINT tools and services, categorized into eight functional areas for efficient data collection and analysis. It offers a dataset that users can contribute to, ensuring the tool remains current with industry developments, while also enabling local development through Node.js and Yarn. Notable features include a structured dataset compliant with a strict schema, tools for local validation, and a responsive dev server for easy deployment.

osint-cli-tool-skeleton

The OSINT CLI Tool Skeleton is a versatile framework for developing OSINT tools, enabling users to create functionality with minimal coding effort. It allows developers to implement a single plugin file that can be automatically utilized as a command-line interface (CLI), Python library, HTTP microservice (using FastAPI), and as an MCP server for AI agents, with built-in support for concurrency, proxying, and reporting in various formats. Notable features include auto-discovery of plugins, customizable reporting options, and an easy-to-use library API for synchronous and asynchronous operations.

osint-agent-skills

OSINT Agent Skills is a structured knowledge base that equips autonomous AI agents with the methodologies and operating procedures of a senior open-source intelligence analyst. It provides curated resources including pivotal playbooks, tool registries, and reporting templates, ensuring AI agents conduct informed investigations while adhering to ethical standards and avoiding misinformation. This agent-agnostic framework enhances the rigor of OSINT tasks, automating data collection and enabling detailed, source-cited reports.

OSINT

The OSINT repository by JambaAcademy is a comprehensive resource for enhancing open-source intelligence gathering and analysis, providing templates and tools tailored for a variety of professional applications. Key features include AI-driven methodologies, standardized reporting templates, and extensive coverage of over 100 OSINT tools across multiple investigative categories. This repository aims to streamline investigative processes while ensuring ethical standards and legal compliance.

OnionClaw

OnionClaw is a multifunctional tool designed to provide AI agents with complete access to the Tor network and .onion services, facilitating OSINT, threat intelligence, and security research. Its notable features include automated dark-web crawling, continuous threat monitoring, and advanced credential surveillance with full identity rotation, all capable of operating in both an OpenClaw skill environment and as a standalone application. While intended for legitimate use, the tool's capabilities raise significant concerns regarding the potential for misuse in criminal activities and automated disinformation campaigns.

Ominis-OSINT

Ominis-OSINT is a digital reconnaissance tool designed for gathering and analyzing publicly available information from various online sources. It notably offers features such as Google search filtering, an enhanced user interface, optimized threading for faster performance, and proxy validation for secure, anonymous searches. The tool specializes in username searches, providing detailed insights while mimicking human-like behavior to evade detection by anti-bot mechanisms.

NERD

NERD (Network Entity Reputation Database) is a software tool and service designed to acquire, store, and aggregate data on malicious network entities, primarily focusing on IP addresses. It provides users with an accessible interface to analyze and retrieve information about these threats, facilitating enhanced network security decision-making. Notable features include its comprehensive data aggregation capabilities and a dedicated instance available at nerd.cesnet.cz for user access.

navi-multitool

Navi Multitool is a high-performance terminal application designed for security testing and OSINT exploration, featuring a modern user interface and an extensive suite of specialized modules. Notable functionalities include Discord operations, advanced exploitation tools such as a Discord RAT and SQL scanner, and utilities for network mapping and cryptography. This tool caters to various use cases from automation of Discord tasks to targeted intelligence gathering and exploitation, providing users with a comprehensive arsenal for cybersecurity tasks.

microsoft-ips

The microsoft-ips repository provides systematically compiled text-file lists of Microsoft-owned IP address ranges and service endpoint domain names in multiple formats, tailored for integration with firewalls and DNS categorization. Notable features include categorization by geographic region and service, such as Worldwide, US Gov DoD, and China (21Vianet), alongside various formats like CIDR notation for IPv4/IPv6 and FQDNs with or without wildcards. This tool is essential for organizations needing to configure network security and access control for Microsoft services.

marple

Marple is an open-source tool designed to collect links to online profiles based on usernames across multiple search engines, providing functionality for social media investigations and online presence analysis. Its notable features include support for over ten search engines, proxy integration, CSV export of results, and plugins for enhanced metadata extraction and information gathering. By allowing customization of search parameters and reliability thresholds, Marple enables users to refine their queries for more accurate data retrieval.

LeakIXClient-Python

The LeakIX Python client provides a programmatic interface for interacting with the LeakIX platform, primarily utilized for retrieving and handling data related to internet leaks, subdomains, and other events in a structured manner. It supports both synchronous and asynchronous API calls, with responses encoded in a defined format, allowing users to leverage built-in methods for response handling and data transformation. This client is compatible with Python versions 3.11 through 3.14 and facilitates easy integration into Python applications through its straightforward installation and documentation.

leaker

Leaker is a passive leak enumeration tool that identifies valid credential leaks through various online sources, allowing searches by email, username, domain, keyword, and phone number. Notable features include support for multiple leak databases, deduplication of results, JSONL output for integration with pipelines, and built-in rate limiting with proxy support.

leadminer

Leadminer is a contact management tool designed to extract, clean, enrich, and manage contacts for email and SMS campaigns. Its notable features include extracting contacts from mailboxes, cleaning email lists, enriching contact data with signature extraction, and exporting to formats like CSV and Google Contacts, along with the ability to send email campaigns using the user's email while providing analytics. This tool integrates with third-party services for enhanced functionality, making it suitable for both individual and business use cases.

lastfm_monitor

lastfm_monitor is a real-time tracking tool for Last.fm that facilitates the automated playback of songs in the local Spotify client while providing comprehensive analytics on user listening activity. Notable features include instant notifications for user presence changes, song metrics like duration and skips, persistent status tracking, webhook integrations for alerts, and a wrapped statistics generator that summarizes listening habits. The tool also supports configurable alerts via email and external services, making it a versatile option for music data management and engagement.

IRONSIGHT

IRONSIGHT is a real-time open-source intelligence (OSINT) dashboard designed for monitoring active conflicts, specifically focusing on the Iran/Israel and Russia/Ukraine theaters. It aggregates diverse data sources, including news, Telegram, military tracking, and financial markets, providing features such as live threat mapping, event categorization, and real-time alerts, all without requiring API keys. Built with modern web technologies, this tool offers a comprehensive view of current military activities and regional threats in an interactive format.

intel-codex

Intel Codex is a comprehensive operational manual designed for digital investigators and security analysts, emphasizing OSINT methodologies and security protocols. It features over 40 standard operating procedures (SOPs), guides for various social media platforms, and case studies that illustrate practical applications in real-world investigations. Notable elements include legal and ethical compliance frameworks, detailed investigation techniques, and a focus on malware analysis and penetration testing methods.

horus

Horus is a comprehensive investigative tool designed to assist users with data compilation and API interactions, serving as a pre-operations assistant. It features a modular architecture allowing for API configuration, functionality checks, and integration with services like Shodan, while requiring specific CLI tools for additional capabilities. The tool aims to streamline investigations by providing essential data management and interaction tools in one package.

haylxon

Haylxon is a high-performance, minimalistic screenshot tool designed for capturing web pages using Chrome's headless mode. It supports both local and remote browsers, facilitating features such as tab pooling for efficiency and the ability to execute tasks in parallel. Users can generate flexible outputs, including various image formats and HTML reports containing detailed metadata about the screenshots taken.

Hacking-Social_Media-Accounts

The Hacking-Social_Media-Accounts repository provides templates and configurations for the GoPhish phishing toolkit, facilitating the creation of deceptive landing pages and email templates aimed at capturing user credentials for social media platforms. Notable features include dedicated templates for Instagram login pages and security emails, along with instructions for setting up these tools effectively to simulate phishing attacks. This repository serves as a resource for security professionals and ethical hackers to test and enhance organizational security awareness.

H4X-Tools

H4X-Tools is a modular, terminal-based toolkit designed for open-source intelligence (OSINT) gathering, reconnaissance, and web scraping, developed in Python to operate on both Linux and Windows. Its primary use case includes advanced data extraction and analysis from platforms like Instagram, as well as comprehensive searches for usernames, emails, and phone numbers across various databases and services. Notable features include support for multiple data formats for export, configurable queries with customizable parameters, and integration with external libraries for enhanced functionality.

gods-eye-view

God's Eye View is an open-source spatial intelligence tool that visualizes live data on a photorealistic 3D globe, incorporating public information regarding flights, vessels, and other elements. Its primary use case is to provide an interactive experience that allows users to explore real-time spatial data in an engaging, cockpit-like interface. Notable features include the ability to inspect code, integrate public data sources, and a visualization that enhances user understanding of global activity.

github_monitor

github_monitor is a real-time GitHub OSINT tool designed to track various user activities such as profile updates, repository engagement, and follower changes, with instant notifications via email and webhooks. Its notable features include comprehensive tracking of new GitHub events, detecting when a user blocks or unblocks you, saving all activities with timestamps to CSV files, and support for both public and enterprise GitHub environments. Additionally, it facilitates easy integration with notification services like Discord and ntfy.

GHOST-osint-crm

GHOST is a self-hosted OSINT investigation management system designed for individual investigators and researchers, offering a structured alternative to traditional spreadsheet-based tracking. Notable features include comprehensive people management with role-based categorization, interactive relationship visualization for entity networks, and a global intelligence map for geocoded location tracking. The tool emphasizes ease of use with a modern interface while enabling customizable case management capabilities.

fredirect

Fredirect is a Node.js tool designed to facilitate the development of applications with integrated proxy, Tor, and threat detection capabilities. It leverages the latest version of pnpm for package management and provides a streamlined setup process for developers. Notable features include support for version management through .nvmrc and the use of corepack to enable efficient dependency handling.

focal-harvest

Focal Harvest is a lightweight Python CLI tool designed to automate web research and OSINT collection, streamlining the process of querying, scraping, and synthesizing data from multiple online sources. Its notable features include zero-config local statistical fallbacks for offline operation and a bidirectional mobile bot listener for real-time interaction via Telegram and Discord. The tool significantly enhances efficiency by automating repetitive manual tasks, enabling users to generate structured reports with minimal setup and rapid execution.