Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

OSINT

OSINT is defined in the United States of America by Public Law 109-163 as cited by both the U.S. Director of National Intelligence and the U.S. Department of Defense (DoD), as intelligence “produced from publicly available information that is collected, exploited, and disseminated in a timely manner to an appropriate audience for the purpose of addressing a specific intelligence requirement.” As defined by NATO, OSINT is intelligence “derived from publicly available information, as well as other unclassified information that has limited public distribution or access.”

https://github.com/chrismaddalena/odin

Automated network asset, email, and social media profile discovery and cataloguing.

asset-discovery neo4j osint recon reconnaissance

Last synced: 25 Jan 2025

https://github.com/chrismaddalena/ODIN

Automated network asset, email, and social media profile discovery and cataloguing.

asset-discovery neo4j osint recon reconnaissance

Last synced: 25 Oct 2024

https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

bugcrowd censys certificate-transparency crtsh dns dnssec domains enumeration levelup nsec nsec3 osint pentesting subdomain

Last synced: 03 Nov 2024

https://github.com/t4d/StalkPhish

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

fraud-detection infosec investigation osint phishing phishing-kit phishing-sites scammers threat-hunting threat-intelligence threatintel

Last synced: 02 Dec 2024

https://github.com/lord-alfred/ipranges

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

amazon-aws azure bing bingbot bug-bounty bugbounty cidr cidr-ranges digitalocean facebook google-cloud googlebot ip-ranges iplist microsoft network-security oracle osint pentesting twitter

Last synced: 07 Nov 2024

https://github.com/rndinfosecguy/Scavenger

Crawler (Bot) searching for credential leaks on paste sites.

bot crawler credentials leaks osint paste pastebin python

Last synced: 27 Oct 2024

https://github.com/anasfik/flutter-spy

Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.

bugbounty flutter osint recon reconnaissance reverse-engineering security-tools

Last synced: 25 Jan 2025

https://github.com/webbreacher/obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should allow you to make some connections (see what I did there?) between how you record your data during an investigation and some of what the tool can offer FOR FREE!

obsidian obsidian-md osint

Last synced: 25 Jan 2025

https://github.com/anyeduke/enterprise-security-skill

用于记录企业安全规划,建设,运营,攻防的相关资源

enterprise enterprise-security-skill osint security

Last synced: 03 Nov 2024

https://github.com/GONZOsint/Namechk

Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.

namecheck osint social-networks username-checker usernames

Last synced: 30 Oct 2024

https://github.com/urbanadventurer/urlcrazy

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

domainname hacking infosec kali-linux osint phishing ruby security typo-domains typosquatting

Last synced: 26 Jan 2025

https://github.com/AnyeDuke/Enterprise-Security-Skill

用于记录企业安全规划,建设,运营,攻防的相关资源

enterprise enterprise-security-skill osint security

Last synced: 25 Oct 2024

https://github.com/BushidoUK/Open-source-tools-for-CTI

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

cti cybersecurity infosec malware osint threatintel

Last synced: 19 Nov 2024

https://github.com/z0m31en7/uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.

darkweb darkweb-crawler information-extraction information-gathering osint osint-python osint-tool python reconnaissance selenium selenium-webscraper tor web-scraping webcra webcrawler webscraping website-scraper websites

Last synced: 25 Jan 2025

https://github.com/s0md3v/zen

Find emails of Github users

github github-recon information-gathering osint recon

Last synced: 26 Jan 2025

https://github.com/s0md3v/Zen

Find emails of Github users

github github-recon information-gathering osint recon

Last synced: 11 Nov 2024

https://github.com/MetaOSINT/MetaOSINT.github.io

A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.

cryptocurrency cybersecurity disinformation email facebook geoint geolocation instagram intelligence investigation news opsec osint search search-engine security social-media social-network twitter username

Last synced: 09 Dec 2024

https://github.com/s0md3v/orbit

Blockchain Transactions Investigation Tool

bitcoin blockchain osint

Last synced: 26 Jan 2025

https://github.com/sharsil/mailcat

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

cat email email-api email-checker email-enum email-enumeration email-validation osint osint-python osint-reconnaissance osint-resources osint-tool probiv recon reconnaissance smtp smtp-checker tor user-check user-checker

Last synced: 31 Oct 2024

https://github.com/WebBreacher/obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should allow you to make some connections (see what I did there?) between how you record your data during an investigation and some of what the tool can offer FOR FREE!

obsidian obsidian-md osint

Last synced: 08 Nov 2024

https://github.com/infobyte/emploleaks

An OSINT tool that helps detect members of a company with leaked credentials

bugbounty cybersecurity leaked-secrets osint pentesting redteam

Last synced: 26 Jan 2025

https://github.com/aancw/Belati

The Traditional Swiss Army Knife for OSINT

document-scrapper email-harvesting osint

Last synced: 07 Nov 2024

https://github.com/hueristiq/xurlfind3r

A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.

bug-bounty bug-bounty-tools contentdiscovery ethical-hacking ethical-hacking-tools go golang osint osint-tools penetration-testing penetration-testing-tools reconnaissance red-teaming red-teaming-tools web-security

Last synced: 25 Jan 2025

https://github.com/s0md3v/Orbit

Blockchain Transactions Investigation Tool

bitcoin blockchain osint

Last synced: 28 Oct 2024

https://github.com/aancw/belati

The Traditional Swiss Army Knife for OSINT

document-scrapper email-harvesting osint

Last synced: 03 Nov 2024

https://github.com/jakecreps/poastal

Poastal - the Email OSINT tool

email osint python recon

Last synced: 09 Nov 2024

https://github.com/v4d1/Dome

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

bugbounty enumeration hacking-tool osint penetration-testing pentesting recon reconnaissance redteam redteam-tools subdomain subdomain-brute subdomain-enumeration subdomain-finder subdomain-scanner

Last synced: 21 Nov 2024

https://github.com/z0m31en7/Uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.

darkweb darkweb-crawler information-extraction information-gathering osint osint-python osint-tool python reconnaissance selenium selenium-webscraper tor web-scraping webcra webcrawler webscraping website-scraper websites

Last synced: 13 Nov 2024

https://github.com/komomon/Komo

🚀Komo, a comprehensive asset collection and vulnerability scanning tool. Komo 一个综合资产收集和漏洞扫描工具,集成了20余款工具,通过多种方式对子域进行获取,收集域名邮箱,进行存活探测,域名指纹识别,域名反查ip,ip端口扫描,web服务链接爬取并发送给xray,对web服务进行POC漏洞扫描,对主机进行主机漏洞扫描。

amass bugbounty crawlergo ctfr emailall gospider hacking httpx information-gathering infosec ksubdomain naabu nuclei oneforall osint pentesting poc rad subfinder xray

Last synced: 21 Nov 2024

https://github.com/HackShiv/OneDorkForAll

An insane list of all dorks taken from everywhere from various different sources.

alldorks bugbounty darkweb dorking dorking-target dorking-tool dorks dorks-dumper googledork googledorks intel osint red-team research shodandorks

Last synced: 18 Jan 2025

https://github.com/soxoj/osint-namecheckers-list

A list of tools to search accounts by username

osint social-networks username username-checker username-search

Last synced: 25 Jan 2025

https://github.com/cipher387/linux-for-osint-21-day

In this repository you will find sample commands and test files for each day of the course "Linux for OSINT. A 21-day course for beginners".

bash cybersecurity linux osint shell

Last synced: 26 Jan 2025

https://github.com/pwnfoo/ntlmrecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

blackarch cybersecurity enumeration hacking hacking-tools ntlm ntlmssp osint recon reconnaissance redteam security tools

Last synced: 22 Jan 2025

https://github.com/jkctech/Flipper-Zero-Scripts

Collection of Flipper Zero scripts dumps and tools

flipper flipper-zero flipperzero osint

Last synced: 09 Nov 2024

https://github.com/pwnfoo/NTLMRecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

blackarch cybersecurity enumeration hacking hacking-tools ntlm ntlmssp osint recon reconnaissance redteam security tools

Last synced: 21 Nov 2024

https://github.com/chiasmod0n/chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

asn attack-surface bugbounty bugbounty-tool chiasmodon cidr credentials email-enumeration emails information-gathering intelligence intelligence-analysis osint reconnaissance reconnaissance-framework subdomain-enumeration subdomains

Last synced: 09 Nov 2024

https://github.com/hackshiv/onedorkforall

An insane list of all dorks taken from everywhere from various different sources.

alldorks bugbounty darkweb dorking dorking-target dorking-tool dorks dorks-dumper googledork googledorks intel osint red-team research shodandorks

Last synced: 11 Jan 2025

https://github.com/wotschofsky/domain-digger

Full Toolkit for Next-Level Domain Analysis

cloud dns domains osint security

Last synced: 04 Dec 2024

https://github.com/0x0be/yesitsme

Simple OSINT script to find Instagram profiles by name and e-mail/phone

instagram open-source-intelligence osint osint-tools python social-media-analysis social-media-intelligence socmint

Last synced: 22 Jan 2025

https://github.com/n0kovo/n0kovo_subdomains

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

bugbounty enumeration osint pentesting reconnaissance redteam subdomain-brute subdomain-bruteforcing subdomain-enumeration subdomain-scanner subdomain-wordlist subdomains wordlist wordlists

Last synced: 30 Dec 2024

https://github.com/Malfrats/OSINT-Map

🗺 A map of OSINT tools.

cheatsheet guide malfrats map osint tools

Last synced: 08 Nov 2024

https://github.com/hakluke/hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

bugbounty hacking osint recon

Last synced: 20 Jan 2025

https://github.com/opsdisk/metagoofil

Search Google and download specific file types

dork google information-leakage metagoofil osint penetration-testing python

Last synced: 26 Jan 2025

https://github.com/aydinnyunus/exiflooter

ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap

bug-bounty bugbounty cyber-security exif exif-metadata exiftool golang hack hacking image metadata metadata-extraction osint redteam security

Last synced: 14 Jan 2025

https://github.com/klezvirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

osint osint-python password-guessing password-spraying user-enumeration

Last synced: 20 Jan 2025

https://github.com/cscorza/osintanonymous

Creazione d'identità Fake - Impostazione Privacy Profili Social - Creazione Ambiente di Lavoro

email fake osint phone privacy profile protection sms social-network telgram virtualization whatsapp

Last synced: 20 Jan 2025

https://github.com/klezVirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

osint osint-python password-guessing password-spraying user-enumeration

Last synced: 21 Nov 2024

https://github.com/Jieyab89/OSINT-Cheat-sheet

OSINT cheat sheet, list OSINT tools, dataset, article, book and OSINT tips

cheatsheet hacking information-gathering information-security osint reconnaissance socmint

Last synced: 02 Dec 2024

https://github.com/aydinnyunus/exifLooter

ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap

bug-bounty bugbounty cyber-security exif exif-metadata exiftool golang hack hacking image metadata metadata-extraction osint redteam security

Last synced: 05 Nov 2024

https://github.com/1in9e/gosint

Gosint is a distributed asset information collection and vulnerability scanning platform

bugbounty information-gathering information-security osint security-tools

Last synced: 05 Nov 2024

https://github.com/CScorza/OSINTAnonymous

Creazione d'identità Fake - Impostazione Privacy Profili Social - Creazione Ambiente di Lavoro

email fake osint phone privacy profile protection sms social-network telgram virtualization whatsapp

Last synced: 09 Nov 2024

https://github.com/michenriksen/birdwatcher

Data analysis and OSINT framework for Twitter

framework osint ruby security twitter-api

Last synced: 22 Jan 2025

https://github.com/0x0FB0/pulsar

Network footprint scanner platform. Discover domains and run your custom checks periodically.

collaboration cusomization dns integration osint paas recon scanner security

Last synced: 01 Nov 2024

https://github.com/l4rm4nd/linkedindumper

Python 3 script to dump/scrape/extract company employees from LinkedIn API

crawling employees extracting linkedin osint python3 scraping spider

Last synced: 26 Jan 2025

https://github.com/pwnwriter/haylxon

⚡ Blazing-fast tool to grab screenshots of your domain list right from terminal.

bug-hunting-tools hactoberfest osint pwnwriter rust rustlang screenshot-utility

Last synced: 24 Jan 2025

https://github.com/acceis/leakscraper

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

credentials credentials-gathering leak osint pentesting python3 redteam redteaming

Last synced: 21 Jan 2025

https://github.com/redhuntlabs/bucketloot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning

Last synced: 26 Jan 2025

https://github.com/soxoj/counter-osint-guide-ru

Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺

cis counter-osint guide osint privacy runet security

Last synced: 25 Jan 2025

https://github.com/ANG13T/skytrack

skytrack is a planespotting and aircraft OSINT tool made using Python 🛩🔍

aerospace aircraft aviation cybersecurity cybersecurity-tools osint planes planespotting python reconnaissance

Last synced: 18 Nov 2024

https://github.com/spectralops/netz

Discover internet-wide misconfigurations while drinking coffee

cybersecurity go golang osint scanner

Last synced: 21 Jan 2025

https://github.com/SpectralOps/netz

Discover internet-wide misconfigurations while drinking coffee

cybersecurity go golang osint scanner

Last synced: 30 Nov 2024

https://github.com/cve-search/git-vuln-finder

Finding potential software vulnerabilities from git commit messages

cve-scanning cve-search git-security osint software-vulnerabilities software-vulnerability

Last synced: 03 Nov 2024

https://github.com/netstalking-core/netstalking-osint

Коллекция материалов по OSINT для нетсталкинга

netstalking osint

Last synced: 31 Oct 2024

https://github.com/mandconsultinggroup/porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

devsecops osint postman recon scanning secrets security

Last synced: 22 Jan 2025

https://github.com/MandConsultingGroup/porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

devsecops osint postman recon scanning secrets security

Last synced: 09 Nov 2024

https://github.com/mattwright324/youtube-metadata

A quick way to gather all the metadata about a video, playlist, or channel from the YouTube API.

javascript osint osint-tool website youtube youtube-api-v3 youtube-data youtube-data-analysis youtube-data-scraping youtube-metadata

Last synced: 26 Jan 2025

https://github.com/DenizShabani/telegramscraper

Scraper and adder for Telegram supporting multiple accounts at the same time. Adds via Telegram API and only by username. For adding via ID and not needing Telgram API contact me.

adder osint programming python scraper script telegram

Last synced: 20 Nov 2024

https://github.com/MISP/misp-training

MISP trainings, threat intel and information sharing training materials with source code

information-exchange information-sharing misp-training osint threat-intelligence threatintel

Last synced: 24 Oct 2024

https://github.com/misp/misp-training

MISP trainings, threat intel and information sharing training materials with source code

information-exchange information-sharing misp-training osint threat-intelligence threatintel

Last synced: 18 Nov 2024

https://github.com/redhuntlabs/BucketLoot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning

Last synced: 02 Jan 2025

https://github.com/Josue87/EmailFinder

Search emails from a domain through search engines

crawler osint

Last synced: 13 Nov 2024

https://github.com/nullarray/dorknet

Selenium powered Python script to automate searching for vulnerable web apps.

dork geckodriver infosec osint pentest pentesting proxy selenium web-app web-app-sec

Last synced: 21 Jan 2025