All repos — GH Trending Explorer

E-mails, subdomains and names Harvester - OSINT

Web path scanner

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

blacklanternsecurity / bbot

The recursive internet scanner for hackers. 🧡

codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

gwen001 / pentest-tools

A collection of custom security tools for quick needs.

darkoperator / dnsrecon

DNS Enumeration Script

WebBreacher / WhatsMyName

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

TermuxHackz / X-osint

This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux

jonluca / anubis

Subdomain enumeration tool

RevoltSecurities / Subdominator

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

ADScanPro / adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

chadi0x / TheBigBrother

The Big Brother is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.

franc-pentest / ldeep

In-depth ldap enumeration utility

morpheuslord / GPT_Vuln-analyzer

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

crypt0p3g / adnullenum

One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

glask1d / WebHawk

The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.

brooklynkray / in-the-dark

A guided cybersecurity reconnaissance and enumeration tool that helps learners understand what they discover and decide what to investigate next.