🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
- osint
- python
- recon
- framework
Repository Index
71,372 visible repositories in the index
73–96 of 143 · Most stars
Security Scanner for Agent Skills
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
- cloudflare
- tor
- ip
- database
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
- cms
- content-management-system
- cms-framework
- wordpress
Semi-automatic OSINT framework and package manager
- osint
- intelligence
- osint-framework
- certificate-transparency
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
📜 Yet another collection of wordlists
- wordlists
- information
- information-gathering
- password
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
- poc
- vulnerability-scanner
- poc-bomber
- cve
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
- bypass-cloudflare
- bypass-hostname
- bypass-waf
- dnssec
More than a ReClass port to the .NET platform.
- reclass
- class
- structure
- remote
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
- oscp
- penetration-testing
- scanner
- security
Hacker tools on Go (Golang)
- go
- golang
- hack
- tools
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点
- identification
- security-tools
- webscan
- golang-tools
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin