Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Repository Index
80,339 visible repositories in the index
769–792 of 1,819 · Most stars
Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点
- identification
- security-tools
- webscan
- golang-tools
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
- osint
- python
- searchphone
- api-scraping
A standalone, specification-compliant, OAuth2 server written in Golang.
- go
- golang
- oauth2-server
- oauth2
New ways of breaking app-integrated LLMs
Python Social Auth - Application - Django
- authentication
- django
- hacktoberfest
- oauth2
This tool gives information about the phone number that you entered.
- osint
- osint-tool
- advanced-osint-tool
- advanced
Tool for advanced mining for content on Github
- gitminer
- information-gathering-tool
- git-mining-tool
:new: The Multi-Tool Web Vulnerability Scanner.
- scanner
- vulnerability-scanners
- scanner-web
- web-vulnerabilities-scanner
Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
- certificate-transparency
- certificate-transparency-logs
- information-gathering
- pentesting
Reconnaissance Swiss Army Knife
- recon
- information-gathering
- honeypot-detector
- subdomain-enumeration
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
DNS Takeover tool written in Go
- go
- golang
- hostile
- subdomain
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
- hacktoberfest
- authentication
- auth
- authorization
Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
Minimalistic web app designed for sending private and secure notes.
- end-to-end-encryption
- minimalist
- note
- pastebin
A suite of tools to automate software compliance checks.
- package-manager
- dependencies
- dependency-graph
- license
Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:
- pwnbox
- rogueap
- wifi-hacking
- wifi-security
A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
- browser-automation
- debugging
- deobfuscation
- js-reverse
Complete token authentication system for react + redux that supports isomorphic rendering.
Command line utility for inserting a dylib load command into a Mach-O binary
All-in-One malware analysis tool.
- linux
- malware-analysis
- python3
- static-analysis
Notes about attacking Jenkins servers
Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.
- git-hooks
- scans
- secret
- husky