gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

github-search

A collection of tools to perform searches on GitHub.

gophish

Open-Source Phishing Toolkit

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

graphql-introspection-analyzer

Graphql introspection query analyzer.

guiadecybersecurity

Esse guia contém todas as informações necessárias para se introduzir na área de segurança da informação, dessa maneira, você encontrará, cursos, indicações de livros, roadmaps, playlists, certificações e demais outras coisas.

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

hackingtool

ALL IN ONE Hacking Tool For Hackers

hacks

A collection of hacks and one-off scripts

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

hash-buster

Crack hashes in seconds.

hawk

Network, recon and offensive-security tool for Linux.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

infoga

Infoga - Email OSINT

interactsh

An OOB interaction gathering server and client library (COLABORATOR)

jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

js2pdfinjector

Inject a JS file into a PDF file.

jslinkfinder

Finder Paths and dot JS on webpages — For endpoint and path analysis

karma

API pwndb

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Rconnaissance (framework)

king-phisher

Phishing Campaign Toolkit

kingofbugbountytips

kubestroyer

Kubernetes exploitation tool

kxss

This a adaption of tomnomnom's kxss tool with a different output format

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

magicrecon

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.