go-dork v1.0.2 releases: fastest dork scanner written in Go
go-dork go-dork is the fastest dork scanner is written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Usage Basic...
Category: Web Information Gathering
commit-stream v0.3.1 releases: drinks commit logs from the Github event
Commit Stream commit-stream drinks commit logs from the Github event firehose exposing the author details (name and email address) associated with Github repositories in real-time. OSINT / Recon uses for...
HawkScan v2.6 releases: Security Tool for Reconnaissance and Information Gathering on a website
HawkScan Security Tool for Reconnaissance and Information Gathering on a website. (python 2.x & 3.x) This script uses “WafW00f” to detect the WAF in the first step. This script uses...
sitedorks: Search Google/Bing/DuckDuckGo/Yandex/Yahoo for a search term with different websites
sitedorks Search Google, Bing, Yahoo, or Yandex for a search term with different websites. A default list is already provided, which contains Github, Gitlab, Surveymonkey, Trello, etc. Currently, a default...
Intel Owl v5.2.2 releases: analyze files, domains, IPs in multiple ways
Intel Owl Do you want to get threat intelligence data about a file, an IP, or a domain? Do you want to get this kind of data from multiple sources at...
Recox: Master script for web reconnaissance
Recox v1.0 The script aims to help in classifying vulnerabilities in web applications. The methodology RecoX is arising can spot weaknesses other than OWASP top ten. The script presents information...
Gotanda: browser Web Extension for OSINT
Gotanda is OSINT extension Gotanda is OSINT(Open Source Intelligence) Web Extension for Firefox/Chrome. This Web Extension could search OSINT information from some IOC in a web page.(IP,Domain,URL,SNS…etc) This Repository partly...
SourceLeakHacker: multi threads web application source leak scanner
SourceLeakHacker SourceLeakHacker is a multi-threads web directories scanner. Feature Arguments parser. Store scan result into csv file. Support for multiple urls (from file). Add help comments for every params. Update...
SecretFinder: discover sensitive data in JavaScript files
SecretFinder SecretFinder is a python script based on LinkFinder (version for burpsuite here), written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using a jsbeautifier...
InstaLocTrack: Instagram OSINT tool that allows you to collect all the location data
Insta LocTrack The goal of the project The goal of this project is to collect all the locations linked to the photos of an Instagram profile in order to place...
Shodanfy.py: gather information for any IP with Shodan without apikey, no rate-limit
Shodanfy.py Get ports, vulnerabilities, information, banners,..etc for any IP with Shodan (no apikey! no rate limit!) Download git clone https://github.com/m4ll0k/Shodanfy.py.git Use python3 shodanfy.py Usage: python3 shodanfy.py <ip> [OPTIONS] –stdin Get...
AWS_Loot: Pull secrets from an AWS environment
AWS_Loot Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services. How it...
fprobe v1.5.1 releases: Fast HTTP Probe
FProbe FProbe – Fast HTTP Probe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose...
Osintgram v1.3 releases: tool for OSINT on Instagram
Osintgram Osintgram is an OSINT tool on Instagram to collect, analyze, and run reconnaissance. Osintgram offers an interactive shell to perform analysis on the Instagram account of any user by its...
ReconNess v1.8 releases: Web App Tool
ReconNess Web App Tool A Web App Tool to Run and Keep all your #recon in the same place. Why ReconNess? Well, we have seen a lot of #bugbounty hackers...
