Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
Offensive-OSINT-Tools
OffSec OSINT Pentest/RedTeam Tools
https://github.com/wddadk/Offensive-OSINT-Tools
Last synced: 4 days ago
JSON representation
-
[↑](#-table-of-contents) Email addresses
- findemail.io
- Eyes - Email osint tool
- Infoga
- h8mail - Email OSINT & Password breach hunting tool
- EmailFinder - Search emails from a domain through search engines
- Prospeo.io
- Hunter.io
- Snov.io
- Email-format - Analyses the company's mail format.
- Anymailfinder - Find Verified Emails
- Poastal - Tool that provides valuable information on any email address
- Omail
- Skymem
- Signalhire
- Rocketreach
-
[↑](#-table-of-contents) SubDomain's
-
Tools
- Bbot
- sub.Monitor - Passive subdomain continous monitoring tool
- Sudomy
- subchase - Chase subdomains by parsing the results of Google and Yandex search results
- alterx - Fast and customizable subdomain wordlist generator using DSL.
- Photon - Incredibly fast crawler designed for OSINT.
- subdomain-enum - securitytrails api
- subdomainfinder.c99. - A subdomain finder is a tool used to find the subdomains of a given domain.
- Shrewdeye
- Phonebook
- Subdominator
- SubDomainRadar.io - Discover hidden subdomains with unparalleled accuracy and speed
- subchase - Chase subdomains by parsing the results of Google and Yandex search results
- SubGPT - SubGPT looks at subdomains you have already discovered for a domain and uses BingGPT to find more.
- Amass
-
-
[↑](#-table-of-contents) URLs
-
Tools
- Gau
- Xurlfind3r
- Unja
- urlhunter - a recon tool that allows searching on URLs that are exposed via shortener services
- Waymore
- Spiderfoot
- theHarvester
- Uscrapper - Tool that allows users to extract various personal information from a website.
- Ominis-Osint - The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.
- ronin-recon - Recursive recon engine and framework that can enumerate subdomains, DNS records, port scan, grab TLS certs, spider websites, and collect email addresses.
- GooFuzz - Enumerate directories, files, subdomains or parameters without leaving evidence on the target's serve
- Urlfinder
- Rextracter.streamlit - Gathers links and analyses content
-
-
[](#-table-of-contents) Certifications
-
[↑](#-table-of-contents) Passive Infrastructure scanner
-
Tools
-
-
[↑](#-table-of-contents) Microsoft Exchange
-
Tools
-
-
[↑](#-table-of-contents) Telegram
-
Tools
-
-
[↑](#-table-of-contents) Google Dorks
-
Tools
- Pagodo
- Search - Custom queries in Google
- Recruitin - Compiles Google dorks to search on LinkedIn, Dribbble, GitHub, Xing, StackOverflow, Twitter
- Google hacking database
-
-
[↑](#-table-of-contents) Nickname search
-
[↑](#-table-of-contents) Phone number
-
[↑](#-table-of-contents) Cloud
-
Tools
-
-
[↑](#-table-of-contents) Information gathering tools
-
Tools
-
-
[↑](-table-of-contents) Usefull links
-
Tools
- WhereToGo - list of popular services that might be used in organizations. By having an account of the user - you can try to find entry points to the organization data. #semiosint
- Cloud OSINT - Repository with information related to Cloud Osint
- Information Disclosure Write-Ups And PoCs
-
-
[↑](#-table-of-contents) Search Engines
-
[↑](#-table-of-contents) Intelligence
-
[↑](#-table-of-contents) Dark web
-
Tools
-
-
[↑](#-table-of-contents) Network Info
-
[↑](#-table-of-contents) Wifi
-
Tools
- 3Wifi - free base of access points
-
-
[↑](#-table-of-contents) Source code
-
[↑](#-table-of-contents) SubDomain collector
-
Tools
-
-
[↑](#-table-of-contents) DnsHistory
-
Tools
-
-
[↑](#-table-of-contents) FTP servers
-
Tools
-
Categories
[↑](#-table-of-contents) Email addresses
15
[↑](#-table-of-contents) Search Engines
15
[↑](#-table-of-contents) SubDomain's
15
[↑](#-table-of-contents) Nickname search
14
[↑](#-table-of-contents) URLs
13
[↑](#-table-of-contents) Network Info
7
[↑](#-table-of-contents) Intelligence
6
[↑](#-table-of-contents) Phone number
6
[↑](#-table-of-contents) Source code
4
[↑](#-table-of-contents) Google Dorks
4
[↑](#-table-of-contents) Information gathering tools
3
[↑](-table-of-contents) Usefull links
3
[↑](#-table-of-contents) DnsHistory
3
[↑](#-table-of-contents) Passive Infrastructure scanner
2
[](#-table-of-contents) Certifications
2
[↑](#-table-of-contents) Dark web
1
[↑](#-table-of-contents) Telegram
1
[↑](#-table-of-contents) Wifi
1
[↑](#-table-of-contents) FTP servers
1
[↑](#-table-of-contents) Cloud
1
[↑](#-table-of-contents) Microsoft Exchange
1
[↑](#-table-of-contents) SubDomain collector
1
Sub Categories
Keywords
osint
30
python
15
information-gathering
13
reconnaissance
13
recon
9
subdomain-enumeration
7
username
7
infosec
6
bugbounty
6
osint-python
6
osint-tool
6
pentesting
6
cli
6
subdomain-scanner
5
email
5
security
5
cybersecurity
5
hacking
5
scanner
5
redteam
4
security-tools
4
username-checker
4
linux
3
python3
3
osint-framework
3
subdomain-finder
3
bug-bounty
3
sherlock
3
nickname
3
osint-tools
3
web-scraping
2
discovery
2
blueteam
2
enumeration
2
open-source-intelligence
2
scraping
2
social-media
2
information-security
2
nmap
2
port-scanner
2
pentest
2
scanning
2
penetration-testing
2
google-dorks
2
golang
2
search-engine
2
investigation
2
tools
2
macos
2
username-search
2