OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.

A swiss army knife for pentesting networks

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Find emails of Github users

Striker is an offensive information and vulnerability scanner.

Most advanced XSS scanner.

Awesome XSS stuff

Collections of tools and methods created to aid in OSINT collection

Automatic SQL injection and database takeover tool

Username tools for penetration testing

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat…

RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.

Common User Passwords Profiler (CUPP)

PHP Webshell with handy features

Ncrack network authentication tool

Hydra is a game launcher with its own embedded bittorrent client and a self-managed repack scraper.

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Medusa is a speedy, parallel, and modular, login brute-forcer.

Web application fuzzer

Fetch all the URLs that the Wayback Machine knows about for a domain

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

ODAT: Oracle Database Attacking Tool

SMBMap is a handy SMB enumeration tool

802.11 Attack Tool

🦀 | RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Open Cyber Threat Intelligence Platform

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

A state-driven web development framework for Rust with full support for server-side rendering and static generation.