Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
Autumn-27 / ScopeSentry
peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
maurosoria / dirsearch
Web path scanner
projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
blacklanternsecurity / bbot
The recursive internet scanner for hackers. ๐งก
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
epi052 / feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
projectdiscovery / naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
itm4n / PrivescCheck
Privilege Escalation Enumeration Script for Windows
leebaird / discover
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
blechschmidt / massdns
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
darkoperator / dnsrecon
DNS Enumeration Script
WebBreacher / WhatsMyName
Community-maintained dataset of 700+ websites for finding accounts by username โ powers OSINT and digital footprint tools.
TermuxHackz / X-osint
This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
jonluca / anubis
Subdomain enumeration tool
61106960 / adPEAS
Powershell tool to automate Active Directory enumeration.
edoardottt / scilla
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
Chocapikk / wpprobe
A fast WordPress plugin enumeration tool
RevoltSecurities / Subdominator
SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
chadi0x / TheBigBrother
The Big Brother is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.
yyhuni / xingrin
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
franc-pentest / ldeep
In-depth ldap enumeration utility
vflame6 / leaker
Passive leak enumeration tool.
morpheuslord / GPT_Vuln-analyzer
Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent
vmfunc / sif
the blazing-fast pentesting suite.
Leo4j / Invoke-ADEnum
Active Directory Auditing and Enumeration
CompassSecurity / EntraFalcon
A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.
Whispergate / SCADAVER
SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled validation, simulators, and CLI, TUI, and web interfaces. Discover validate, and try not to cut off the water supply.
crypt0p3g / adnullenum
One-pass anonymous Active Directory enumeration over SAMR and LSARPC โ null session, no credentials, with structured reusable output.
yingfff123 / AtlasX
ไผไธๆด้ฒ้ขๆถ้ไธๆ็ปญ็ๆง๏ผASM๏ผ่ชๆ็ฎก็ณป็ป๏ผๅคๆบ้้ใๅญๆดปไธๆ็บนๅฏๅใ้ฃ้ฉ็บฟ็ดขไธๅๆดๅฏน็ งใๆฏๆ Linux/Docker ไธ้ฎ้จ็ฝฒใ
glask1d / WebHawk
The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.
fawadqureshi007 / OSINT-Beginner-Field-Guide
A practical beginner-friendly OSINT field guide covering username enumeration, social media, search engines, reverse-image search, metadata, GEOINT, public documents, pivoting, correlation, and verification through a real self-OSINT case study.
armourinfosec / Offensive-Windows-Privilege-Escalation
Offensive Windows Privilege Escalation โ hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
armourinfosec / Offensive-Linux-Privilege-Escalation
Offensive Linux Privilege Escalation โ hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.
brooklynkray / in-the-dark
A guided cybersecurity reconnaissance and enumeration tool that helps learners understand what they discover and decide what to investigate next.