🔎 Hunt down social media accounts by username across social networks

SpiderFoot automates OSINT collection so that you can focus on analysis.

A Tool for Domain Flyovers

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Advanced information gathering & OSINT framework for phone numbers

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

OSINT Framework

A high performance offensive security tool for reconnaissance and vulnerability scanning

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

A container repository for my public web hacks!

Accurately Locate Smartphones using Social Engineering

The Offensive Manual Web Application Penetration Testing Framework.

A DNS reconnaissance tool for locating non-contiguous IP space.

Discover Your Attack Surface

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

List of Awesome Asset Discovery Resources

Semi-automatic OSINT framework and package manager

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

🎅 The Multi-Tool Web Vulnerability Scanner.

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

The Last Web Recon Tool You'll Need

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

Automated network asset, email, and social media profile discovery and cataloguing.

Information gathering tool - OSINT

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.