terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

API-SPY-API-PROBE

API-SPY 🕵️👻 A powerful directory brute-force tool designed for API reconnaissance and penetration testing. Automatically discovers hidden API endpoints, performs recursive subscanning, and probes HTTP methods for deeper API enumeration. Features ✨ Core Capabilities: 🎯 Fast endpoint discovery using...

BitLeak

BitLeak BitLeak is a Python tool that check and display torrent downloads linked to a given IP address. root@kitploit: git clone https://github.com/AnkhCorp/BitLeak.git root@kitploit: pip3 install -r requirements.txt root@kitploit: python bitleak.py...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

AzureHound

AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

ADCollector

ADCollector ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point. Notes: ADCollector is not an alternative to the powerf...

HawkScan

HawkScan Security Tool for Reconnaissance and Information Gathering on a website. python 3.x News Installation Special features TODO Usage Exemples Thanks Donations Tools used Wiki News v2.x root@kitploit: - Add proxy function - Redefining priorities/tasks - Let's debug certificate subdomains...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

goblob

Goblob 🫐 Goblob is a lightweight and fast enumeration tool designed to aid in the discovery of sensitive information exposed publicy in Azure blobs, which can be useful for various research purposes such as vulnerability assessments, penetration testing, and reconnaissance. Warning. Goblob will...

CloudPulse

CloudPulse - AWS Cloud Landscape Search Engine During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. CloudPulse is a powerful tool that simplifies and enhances th...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

NTLMRecon

NTLMRecon An NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an entire CID...

Gemini-api-key-hunter

Gemini API Key Toolkit A toolkit for discovering, validating, and testing exposed Google Gemini API keys. It consists of two components: Gemisc.py – A high-speed Python scanner that discovers exposed Google API keys from websites and JavaScript files, verifies them against the Gemini API, and...

ADRecon

Download from https://github.com/adrecon/ADRecon ADRecon: Active Directory Recon ADRecon is a tool which extracts and combines various artefacts as highlighted below out of an AD environment. The information can be presented in a specially formatted Microsoft Excel report that includes summary...

casper-shell

🦇 Casper@shell: - Advanced PHP Web Shell Casper@shell: is an enhanced, more user-friendly version of p0wny shell with many new features. This version aims to be more helpful for quickly performing reconnaissance, exfiltration, or deploying persistence mechanisms. ✨ Features 🖥️ Advanced Terminal...

ROADtools

ROADtools R ogue O ffice 365 and A zure active D irectory tools ROADtools is a framework to interact with Azure AD. It consists of a library roadlib with common components, the ROADrecon Azure AD exploration tool and the ROADtools Token eXchange roadtx tool. ROADlib ROADlib is a library that can ...

SXDork

SXDork v1.0 SXDork is a powerful tool that utilizes the technique of google dorking to search for specific information on the internet. Google dorking is a method of using advanced search operators and keywords to uncover sensitive information that is publicly available on the internet. SXDork...

SearchOrg

SearchOrg By entering a company's email domain, information is obtained using DNS, NMAP and Shodan Keep in mind NMAP must be installed on the machine to use the command You must have a Shodan account and load the APIKey where the script indicates Configure the required libraries listed in the...

Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...