Repository Index

In-depth attack surface mapping and asset discovery

• go
• dns
• subdomain
• enumeration

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

• security-tools
• osint
• recon
• recon-engine

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

• python
• penetration-testing
• penetration-testing-framework
• owasp

The Ultimate Information Gathering Toolkit

• cms-detection
• directory-finder
• dns-lookup
• information-gathering

Like nmap for mapping wifi networks you're not connected to, plus device tracking

• hacking
• wireless
• python
• scapy

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

• information-gathering
• reverse-phone-lookup
• mx-lookup
• whois-lookup

Striker is an offensive information and vulnerability scanner.

• cloudflare
• information-gathering
• recon
• theharvester

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

• oscp
• penetration-testing
• scanner
• security

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

• asn
• asn-lookup
• autonomous-systems
• ip-lookup

IP Address Collection and Management Service with multiple output formats: mikrotik, json, text, ipset, nfset, clashx, keenetic, switchy, amnezia

• cidr-list
• clashx
• homeproxy
• ip

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

• nmap
• nmap-scripts
• port-scanner
• network-scanner

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Smart IP camera stream finder. Tests 102K+ URL patterns in 30 seconds. Supports 67K camera models. Generates ready Frigate/go2rtc configs.

• camera-discovery
• cctv
• docker
• frigate