Repository Index

E-mails, subdomains and names Harvester - OSINT

• osint
• subdomain-enumeration
• redteam
• recon

The recursive internet scanner for hackers. 🧡

• hacking
• neo4j
• osint
• osint-framework

Fast subdomains enumeration tool for penetration testers

TranslatedOneForAll is a powerful subdomain collection tool

• subdomain
• subdomain-scanner
• subdomain-enumeration
• subdomain-bruteforcing

Knock Subdomain Scan

• bugbounty
• knockpy
• penetration-testing
• security

A fast sub domain brute tool for pentesters

A DNS meta-query spider that enumerates DNS records, and subdomains.

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

• file-infector
• bdf
• python
• capstone

All In One Web Recon

• python3
• pentesting
• pentest-tool
• pentesting-tools

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux

• email-osint
• ip-osint
• osint
• phone-info

Generates permutations, alterations and mutations of subdomains and then resolves them

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

• bypass-cloudflare
• bypass-hostname
• bypass-waf
• dnssec

Reconnaissance Swiss Army Knife

• recon
• information-gathering
• honeypot-detector
• subdomain-enumeration

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

• finder
• graphql
• security
• spider

TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency

• domain-scanner
• subdomain

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

Website to Scrapping all writeup from http://ctftime.org/ and you can organize which to read first!

Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert