1.sherlock-project / sherlockHunt down social media accounts by username across social networksosintreconnaissancelinuxclisherlockpython3+10 morePythonMIT95K total11K forks+2,376 starsfrom 93,011 · score 7.77
2.soxoj / maigret🕵️♂️ Collect a dossier on a person by username from 6K websitesosintsocial-networkidentificationsocmintsherlockinvestigation+14 morePythonMIT40K total3.2K forks+1,474 starsfrom 38,132 · score 7.30
3.swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFpentestpayloadbypassweb-applicationhackingvulnerability+11 morePythonMIT82K total18K forks+946 starsfrom 81,338 · score 6.85
4.laramies / theHarvesterE-mails, subdomains and names Harvester - OSINT osintsubdomain-enumerationredteamreconblueteamdiscovery+4 morePythonGPL-2.018K total2.7K forks+461 starsfrom 17,748 · score 6.14
5.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+133 starsfrom 14,900 · score 4.90
6.PlumHound / PlumHoundBloodhound Reporting for Blue and Purple Teamsactivedirectoryblueteampurpleteambloodhoundbloodhoundad+14 morePythonGPL-3.01.3K total130 forks+12 starsfrom 1,322 · score 2.56
7.nil0x42 / phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoorpost-exploitationhackingbackdoorstealthhacktoolblackhat+12 morePythonGPL-3.02.5K total464 forks+11 starsfrom 2,491 · score 2.48