GitFive GitFive is an OSINT tool to investigate GitHub profiles. Main features : Usernames / names history Usernames / names variations Email address to GitHub account Find GitHub’s accounts from a list of email...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published December 18, 2022 · Last modified July 17, 2023
Vesta Vesta is a static analysis of vulnerabilities, Docker, and Kubernetes cluster configuration detect toolkit. It inspects Kubernetes and Docker configures cluster pods and containers with safe practices. It also analyses image or container...
Octosuite Octosuite is an open-source lightweight yet advanced osint framework that targets GitHub users and organizations. With over 20+ features, Octosuite only runs on 2 external dependencies. And returns the gathered intelligence in a...
ExchangeFinder ExchangeFinder is a simple and open-source tool that tries to find Microsoft Exchange instance for a given domain based on the top common DNS names for Microsoft Exchange. ExchangeFinder can identify the exact...
HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages, and “loot” secrets out of the client-facing code of sites. Usage You will need two json files (lootdb.json and regexes.json) along with the...
Information Gathering / Web Information Gathering
by do son · Published October 4, 2022 · Last modified November 1, 2023
GooFuzz GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. GooFuzz performs fuzzing with an OSINT...
BEE·bot OSINT automation for hackers. BBOT is a recursive, modular OSINT framework written in Python. It is capable of executing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with its gowitness module),...
Information Gathering / Web Information Gathering
by do son · Published September 8, 2022 · Last modified February 26, 2024
wtfis Passive host and domain name lookup tool for non-robots WTF is it? wtfis is a commandline tool that gathers information about a domain or FQDN using various OSINT services. Unlike other tools of its...
xnLinkFinder This is a tool used to discover endpoints for a given target. It can find them by: crawling a target (pass a domain/URL) crawling multiple targets (pass a file of domains/URLs) searching files...
Information Gathering / Machine Learning / Web Information Gathering
by do son · Published August 23, 2022
ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right...
JSubFinder JSubFinder is a tool written in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go’s amazing...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published August 2, 2022 · Last modified March 31, 2023
Apache Tomcat Scanner A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache tomcat servers. Multiple target sources accepted: Retrieving list of computers from a Windows domain...
fuzzuli fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. Motivation In my application security testing journey that I have been doing...
waymore The idea behind waymore is to find even more links from the Wayback Machine than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on...
awsEnum awsEnum is a python script that enumerates AWS services through the provided credential. It is coded and published to be used in particular circumstances: Engaging in penetration testing activity. Carry on a Bug...
Secure Your Connection
