EnumaElish123 / ReproLLM

—

laramies / theHarvester

E-mails, subdomains and names Harvester - OSINT

maurosoria / dirsearch

Web path scanner

OWASP / mastg

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

blacklanternsecurity / bbot

The recursive internet scanner for hackers. 🧡

WebBreacher / WhatsMyName

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

glask1d / WebHawk

The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.

suitenumerique / docs

Docs is an open-source text editor: web-native, made for real-time collaboration, cleanly structured documents and sub-documents with full ownership of your data. Built to scale with Django and React.

daviddrysdale / python-phonenumbers

Python port of Google's libphonenumber

codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

gwen001 / pentest-tools

A collection of custom security tools for quick needs.

darkoperator / dnsrecon

DNS Enumeration Script

TermuxHackz / X-osint

This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux

suitenumerique / meet

Open source video conferencing app powered by LiveKit. Built with Django and React.

initstring / cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

django-phonenumber-field / django-phonenumber-field

Django model and form fields for normalized phone numbers using python-phonenumbers

jonluca / anubis

Subdomain enumeration tool

RevoltSecurities / Subdominator

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

ADScanPro / adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

chadi0x / TheBigBrother

The Big Brother is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.

franc-pentest / ldeep

In-depth ldap enumeration utility

morpheuslord / GPT_Vuln-analyzer

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

crypt0p3g / adnullenum

One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

mlcsec / ResetSpy

Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal

brooklynkray / in-the-dark

A guided cybersecurity reconnaissance and enumeration tool that helps learners understand what they discover and decide what to investigate next.

jazzband / django-user-sessions

Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions.