1.sherlock-project / sherlockHunt down social media accounts by username across social networksosintreconnaissancelinuxclisherlockpython3+10 morePythonMIT95K total11K forks+7,658 starsfrom 87,729 · score 8.94
2.soxoj / maigret🕵️♂️ Collect a dossier on a person by username from 6K websitesosintsocial-networkidentificationsocmintsherlockinvestigation+14 morePythonMIT40K total3.2K forks+3,741 starsfrom 35,865 · score 8.23
3.swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFpentestpayloadbypassweb-applicationhackingvulnerability+11 morePythonMIT82K total18K forks+2,888 starsfrom 79,396 · score 7.97
4.laramies / theHarvesterE-mails, subdomains and names Harvester - OSINT osintsubdomain-enumerationredteamreconblueteamdiscovery+4 morePythonGPL-2.018K total2.7K forks+1,331 starsfrom 16,878 · score 7.19
5.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+529 starsfrom 14,504 · score 6.27
6.PlumHound / PlumHoundBloodhound Reporting for Blue and Purple Teamsactivedirectoryblueteampurpleteambloodhoundbloodhoundad+14 morePythonGPL-3.01.3K total130 forks+30 starsfrom 1,304 · score 3.43
7.nil0x42 / phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoorpost-exploitationhackingbackdoorstealthhacktoolblackhat+12 morePythonGPL-3.02.5K total464 forks+27 starsfrom 2,475 · score 3.33