1.sherlock-project / sherlockHunt down social media accounts by username across social networksosintreconnaissancelinuxclisherlockpython3+10 morePythonMIT95K total11K forks+474 starsfrom 94,913 · score 6.16
2.soxoj / maigret🕵️♂️ Collect a dossier on a person by username from 6K websitesosintsocial-networkidentificationsocmintsherlockinvestigation+14 morePythonMIT40K total3.2K forks+245 starsfrom 39,361 · score 5.51
3.swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFpentestpayloadbypassweb-applicationhackingvulnerability+11 morePythonMIT82K total18K forks+220 starsfrom 82,064 · score 5.40
4.laramies / theHarvesterE-mails, subdomains and names Harvester - OSINT osintsubdomain-enumerationredteamreconblueteamdiscovery+4 morePythonGPL-2.018K total2.7K forks+157 starsfrom 18,052 · score 5.06
5.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+25 starsfrom 15,008 · score 3.26
6.PlumHound / PlumHoundBloodhound Reporting for Blue and Purple Teamsactivedirectoryblueteampurpleteambloodhoundbloodhoundad+14 morePythonGPL-3.01.3K total130 forks+3 starsfrom 1,331 · score 1.39
7.nil0x42 / phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoorpost-exploitationhackingbackdoorstealthhacktoolblackhat+12 morePythonGPL-3.02.5K total464 forks+1 starsfrom 2,501 · score 0.69