autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

dorks_hunter

Simple Google Dorks search tool

dvna

Damn Vulnerable NodeJS Application

fast-google-dorks-scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ffuf

Fast web fuzzer written in Go

finalrecon

The Last Web Recon Tool You'll Need

gap-burp-extension

Burp Extensions

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

hostresolver

Resolve bulk host file list to IP addresses, ASN, and validate DNS.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

iprobe

Take a list of IP addresses and probe for working HTTP and HTTPS servers

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

kiterunner

Contextual Content Discovery Tool

nodejs-goof

Super vulnerable todo list application

nuclei-burp-plugin

Nuclei plugin for BurpSuite

owasp-web-checklist

OWASP Web Application Security Testing Checklist

pwnfox

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

s3kler

s3kler---regresshion

This tool checks the version of OpenSSH running on specified hosts and ports and determines if they are potentially vulnerable.

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

waymore

Find way more from the Wayback Machine!

xnlinkfinder

A python tool used to discover endpoints (and potential parameters) for a given target