A fast sub domain brute tool for pentesters
Repository Index
81,588 visible repositories in the index
49–72 of 119 · Most stars
A DNS meta-query spider that enumerates DNS records, and subdomains.
OnionScan is a free and open source tool for investigating the Dark Web.
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
- parameter-finder
- parameter
- bugbounty
- content-discovery
Python terminal multitool — OSINT, network utilities, Rich TUI dashboard. Educational use only.
- multitool
- discord-joiner
- discord-multi-tool
- discord-multitool
Simple OSINT script to find Instagram profiles by name and e-mail/phone
- osint
- open-source-intelligence
- socmint
Quickly discover exposed hosts on the internet using multiple search engines.
- asm
- attack-surface
- bugbounty
- cli
All In One Web Recon
- python3
- pentesting
- pentest-tool
- pentesting-tools
8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
- cloudflare
- pentest-tool
- pentest
- censys
This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux
- email-osint
- ip-osint
- osint
- phone-info
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
- osint
- python
- recon
- framework
A OSINT tool to obtain a target's phone number just by having his email address
Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
- cloudflare
- tor
- ip
- database
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
OSINT Tool for Finding Passwords of Compromised Email Addresses
- haveibeenpwned
- api
- pwnedornot
- passwords
OSINT tool for finding profiles by username
- osint
- username
- python
- fast
WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence 📡
Generates permutations, alterations and mutations of subdomains and then resolves them
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
- security-tools
- monitor
- bugbounty
- security-automation
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration