Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
Repository Index
69,734 visible repositories in the index
25–46 of 46 · Most stars
Generates permutations, alterations and mutations of subdomains and then resolves them
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
无状态子域名爆破工具
- subdomain
- enumeration
- pentesting
- hacking-tool
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
A flexible web framework that promotes stability, safety, security and speed.
- rust
- webframework
- webdevelopment
- gotham
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
- bypass-cloudflare
- bypass-hostname
- bypass-waf
- dnssec
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
Reconnaissance Swiss Army Knife
- recon
- information-gathering
- honeypot-detector
- subdomain-enumeration
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
- security
- yara
- serverless
- terraform
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Game Boy ROM disassembler with RGBDS compatible output
- rgbds
- disassembler
- reverse-engineering
- game-boy
The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
- domain-scanner
- subdomain
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Website to Scrapping all writeup from http://ctftime.org/ and you can organize which to read first!
Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
A standalone fast word generator in the spirit of hashcat's mask generator with unicode support
- hashcat
- hashcat-masks
- password-cracking
- word-generator
Package to set up autonomous agents to trade on TBD
- agents
- agents-md
- ai-agents
- autonomous-agents