🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
47,133 repositories indexed
1–24 of 38 · Most stars
🕵️♂️ Collect a dossier on a person by username from 6K websites
🕵️♂️ All-in-one OSINT tool for analysing any website
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
w3af: web application attack and audit framework, the open source web vulnerability scanner.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
A collection of postmortem templates
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
Small package to allow adding security headers to ASP.NET Core websites
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
The Ultimate Boilerplate for Products.
Integrated certification via Let's encrypt for Elixir-powered sites
:hammer: Manage your website via terminal
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
Things we learned from Capture The Flag hacking competitions we participated in.
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.