blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
blacklanternsecurity / bbot
Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
maurosoria / dirsearch
Web path scanner
yyhuni / lunafox
Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.
peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
WebBreacher / WhatsMyName
Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.
TermuxHackz / X-osint
This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux
projectdiscovery / naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
epi052 / feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
Chocapikk / wpprobe
A fast WordPress plugin enumeration tool
itm4n / PrivescCheck
Privilege Escalation Enumeration Script for Windows
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
61106960 / adPEAS
Powershell tool to automate Active Directory enumeration.
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
yingfff123 / AtlasX
企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。
glask1d / WebHawk
The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.
darkoperator / dnsrecon
DNS Enumeration Script
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
jonluca / anubis
Subdomain enumeration tool
edoardottt / scilla
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
RevoltSecurities / Subdominator
SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
chadi0x / TheBigBrother
The Big Brother is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.
vflame6 / leaker
Passive leak enumeration tool.
morpheuslord / GPT_Vuln-analyzer
Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent
Leo4j / Invoke-ADEnum
Active Directory Auditing and Enumeration
CompassSecurity / EntraFalcon
A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.
Whispergate / SCADAVER
SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled validation, simulators, and CLI, TUI, and web interfaces. Discover validate, and try not to cut off the water supply.
crypt0p3g / adnullenum
One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.
fawadqureshi007 / OSINT-Beginner-Field-Guide
A practical beginner-friendly OSINT field guide covering username enumeration, social media, search engines, reverse-image search, metadata, GEOINT, public documents, pivoting, correlation, and verification through a real self-OSINT case study.
armourinfosec / Offensive-Windows-Privilege-Escalation
Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
armourinfosec / Offensive-Linux-Privilege-Escalation
Offensive Linux Privilege Escalation — hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.
brooklynkray / in-the-dark
A guided cybersecurity reconnaissance and enumeration tool that helps learners understand what they discover and decide what to investigate next.
leebaird / discover
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
franc-pentest / ldeep
In-depth ldap enumeration utility
blechschmidt / massdns
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
vmfunc / sif
the blazing-fast pentesting suite.
carlospolop / legion
Automatic Enumeration Tool based in Open Source tools
ARCANGEL0 / Mitsu
Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠)