81,588 visible repositories in the index
25–48 of 119 · Most stars
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
An automated e-mail OSINT tool
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
AI powered OSINT engine to discover and map 7,700+ social media identities across the web
Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more
A Complete Osint Tool :mag:
Knock Subdomain Scan
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
A high performance offensive security tool for reconnaissance and vulnerability scanning
Snoop — инструмент разведки на основе открытых данных (OSINT world)
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
🔍 Search anyone's digital footprint across 300+ websites
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
Find domains and subdomains related to a given domain
Tool to find metadata and hidden information in the documents.
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)