selimsur

deep-tempest

Restoration for TEMPEST images using deep-learning

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

TorBot

Dark Web OSINT Tool

OSINTko

OSINTk.o is a customized Kali Linux-based ISO image with pre-installed packages and scripts

GhostBeacon

CLI-based 802.11 Rogue (Fake) AP & Hidden AP Spotter

ScoutSuite

Multi-Cloud Security Auditing Tool

Domain_checker

Domain_checker application is the trial/demo version for the new EASM (External Attack Surface Management) system called HydrAttack (hydrattack.com), the main idea of which is, based only on the domain name, find almost all of the subdomains and their top 100 open ports

telegram-monitor

TRC20 Wallet Listen Events

HackMeIfYouCan

A Deliberately Insecure Web Application

cvemap

Navigate the CVE jungle with ease.

flashlight

Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.

copilot-gpt4-service

Convert Github Copilot to ChatGPT

bine

Go library for accessing and embedding Tor clients and servers

shotlooter

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

SarlackLab

gopass

The slightly more awesome standard unix password manager for teams

OSTE-Meta-Scan

The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, ZAP, Nuclei, SkipFish, and Wapiti.

badflare

OSINT tool for discovering the real IP addresses of services which are behind Cloudflare but not properly locked down

promptmap

automatically tests prompt injection attacks on ChatGPT instances

telegram-similar-channels

Telegram similar channels search tool (CLI + Maltego)

365

BlueTeam, RedTeam, Bug bounty, OSINT, Threat Hunting, Network and Web Recon, Discovery, Enumeration, Vulnerability Mapping, Exploitation, Reporting, Darkweb, Deepweb, Research

EasyEASM

Zero-dollar attack surface management tool

Monitorizer

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

awesome-attack-surface-monitoring

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

faraday

Open Source Vulnerability Management Platform

AttackSurfaceMapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

sn0int

Semi-automatic OSINT framework and package manager

repolist

Generate wordlists from Github repositories

GlobalAntiScamOrg-blocklist

Machine-readable .txt blocklist of scam URLs and IP Addresses from the Global Anti Scam Organization (https://www.globalantiscam.org) website, updated once a day.