✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend
L0p4 Toolkit is a powerful hacking toolset designed for hacker's. It includes advanced tools for web hacking (SQLi, XSS), network scanning, …
🕵️ Track down social media profiles using a specific username across multiple social network platforms
LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs
Passive leak enumeration tool.
A simple way to check if your data has been compromised in major security breaches affecting Iran — similar to "Have I Been Pwned" but focus…
Compromised SSH servers and scraped mirror sites leaked scripts intended for malicious use.
An all-in-one Shodan & ZoomEye supported tool to search, browse, preview and dump data leakage across 20+ services. Pulls real exposure stra…
A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc.…
A resource full of Crypto/OSINT tools, techniques and training courses for CTI, AML, and forensic investigations.
A list of OSINT tools & resources for (fraud-)investigators, CTI-analysts, KYC, AML and more.
A Linkedin Activity date Finder
Python 3 script to dump/scrape/extract company employees from LinkedIn API
🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.
In this repository you will find sample commands and test files for each day of the course "Linux for OSINT. A 21-day course for beginners".
Reveals invisible links within JavaScript files
LLM OSINT is a proof-of-concept method of using LLMs to gather information from the internet and then perform a task with this information.
Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indicat…
Command Line Sock Puppet Creator for Investigators.
🔎 The cyber swiss army knife of lookup tools. Research information on domains, IPs, email addresses, and more!
Information Gatherer & Webapps Exploiter
Mach is a fast, reliable, and extensible web fuzzing tool built for security researchers, bug bounty hunters, and penetration testers. Desig…
MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, …