autoOSINT #osint
A silly CLI tool to save a few seconds during triage.

https://github.com/isaacward1/autoOSINT

My-Recon #osint #recon #scanner #web
My Recon is an automated web reconnaissance tool that performs subdomain enumeration, Wayback URL extraction, live host detection, header analysis, JS discovery, CORS checks, and GF-based vulnerabi...

https://github.com/prabhalpuneet/My-Recon

Metadatainfo #osint
A CLI tool for OSINT image analysis: extracting EXIF ​​data, GPS coordinates (with map links), and camera specifications. Results are saved automatically.

https://github.com/Cronston/Metadatainfo

Sentinel-Vulnerability-Scanner #scanner #web
Automated Python-based HTTP security header analysis tool.

https://github.com/sarthakmatlotia/Sentinel-Vulnerability-Scanner

ades #pentest
Find dangerous uses of GitHub Actions Workflow expressions.

https://github.com/ericcornelissen/ades

pii-search #pentest
Personally Identifiable Information detection system with advanced parallel processing.

https://github.com/zafrem/pii-search

Artemis #scanner
A modular vulnerability scanner with automatic report generation capabilities.

https://github.com/CERT-Polska/Artemis

Safe-Token-Design-Guide #pentest
A comprehensive guide to designing economically safe ERC-20 tokens using formal invariants and strict permission boundaries. Covers supply caps, fee ceilings, liquidity guarantees, transfer safety,...

https://github.com/AmirhosseinHonardoust/Safe-Token-Design-Guide

AzurePolicyAssessment #cloud
PowerShell script to assess Azure Policy assignments across Management Groups with impact analysis, Landing Zone coverage validation, and security recommendations. Provides detailed reports on cost...

https://github.com/ripom/AzurePolicyAssessment

Epic-OSINT-Toolkit #osint #web
🔍 Comprehensive CLI-based OSINT toolkit combining features from Scilla, creepyCrawler, urlhunter, TorBot, EmploLeaks, and more. Domain intelligence, social media search, web crawling, URL hunting, ...

https://github.com/N0L0g1c/Epic-OSINT-Toolkit

domain-analyzer #osint
Production-ready OSINT tool for comprehensive domain infrastructure analysis and risk assessment using only public protocols - no API keys required.

https://github.com/SakuraSquirrelLab/domain-analyzer

IntelTrace #osint
OSINT Intelligence Tool for Cyber Investigations

https://github.com/Gowtham-Darkseid/IntelTrace

BlackBird-OSINT-Toolkit #osint #recon
A lightweight, terminal-based Offensive OSINT Toolkit for Kali Linux. Features IP geolocation, phone number OSINT, username reconnaissance, EXIF metadata extraction, domain WHOIS, and email MX look...

https://github.com/ritikkalmeghe9-cpu/BlackBird-OSINT-Toolkit

security-scanner-app #scanner
bash

https://github.com/bibindasb/security-scanner-app

Spectre #scanner #web
Security Scanner for websites

https://github.com/Prateek1771/Spectre

EchoXSS #scanner #web
🕵️♂️ Test for XSS vulnerabilities instantly using a GUI tool that scans URL parameters and forms against thousands of payloads with ease.

https://github.com/wesam00/EchoXSS

LeFI-Map #ad #exploit #scanner
LeFiMap adalah scanner dan exploitation tool untuk kerentanan Local File Inclusion (LFI) yang dibangun untuk membantu proses pentesting modern, lengkap dengan deteksi otomatis, payload fuzzing, WAF...

https://github.com/AdliXSec/LeFI-Map

linux-buddy #pentest
Interactive Linux command tutorial with 100+ hands-on lessons for beginners, ethical hackers, and DevOps learners. Each command opens in a new terminal with auto-generated practice labs. Learn ls, ...

https://github.com/jo4dan/linux-buddy

vin4y-k #web
Cybersecurity & Ethical Hacking enthusiast shaping real skills through Python security tools, Linux exploration, networking labs, and web-pentesting projects. Passionate about breaking and securing...

https://github.com/vin4y-k/vin4y-k

awesome-bugbounty-tools #bugbounty
A curated list of various bug bounty tools

https://github.com/vavkamil/awesome-bugbounty-tools