Hunt down social media accounts by username across social networks

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Information gathering framework for phone numbers

E-mails, subdomains and names Harvester - OSINT

Fast passive subdomain enumeration tool.

OSINT Framework

Accurately Locate Smartphones using Social Engineering

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

All about bug bounty (bypasses, payloads, and etc)

A Modern Orchestration Engine for Security

A Tool for Domain Flyovers

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

一个攻防知识库。A knowledge base for red teaming and offensive security.

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

A high performance offensive security tool for reconnaissance and vulnerability scanning

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

The Ultimate Information Gathering Toolkit

Quickly discover exposed hosts on the internet using multiple search engines.

All In One Web Recon

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

Semi-automatic OSINT framework and package manager

List of Awesome Asset Discovery Resources

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

A container repository for my public web hacks!