cloud_enum Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. Currently enumerates the following:...
Web Information Gathering
Fingerprinter This script goal is to try to find the version of the remote application/third party script...
Sputnik OSINT Extension Sputnik is an extension to quickly and easily search IPs, Domains, File Hashes, and...
karma Find leaked emails with your passwords. Install # install dependencies (Debian/Ubuntu) sudo apt install tor python3...
LeakLooker Find open databases with Shodan. With LeakLooker you can find publicly open MongoDB, CouchDB and Elasticsearch...
Frisbee is a small utility to collect email addresses from search engines and other free-form text sources....
Bypass firewalls by abusing DNS history This script will try to find: the direct IP address of...
RecurseBuster rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments Features...
h8mail Email OSINT and password finder. Use h8mail to find passwords through a different breach and reconnaissance services,...
Giggity Get information about an organization, user, or repo on github. Stores all data in a json...
What is a CMS? A content management system (CMS) manages the creation and modification of digital content....
AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and...
HostHunter A tool to efficiently discover and extract hostnames over a large set of target IP addresses....
Repo-supervisor A serverless tool that detects secrets and passwords in your pull requests – one file at...
Machinae Security Intelligence Collector Machinae is a tool for collecting intelligence from public sites/feeds about various security-related...