GitHub stars · StarDay

1smicallef / spiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface.PythonMIT · PermissiveInactive24,392

2laramies / theHarvesterE-mails, subdomains and names Harvester - OSINTPythonGPL-2.0 · Share derivative source18,247

3owasp-amass / amassIn-depth attack surface mapping and asset discoveryGoLicense not declared15,475

4blacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative source10,999

5shmilylty / OneForAllOneForAll is a powerful subdomain collection toolPythonGPL-3.0 · Share derivative source10,136

6reconurge / flowsintA modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.TypeScriptApache-2.0 · Permissive10,066

7yogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative source8,922

8six2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · Permissive8,338

9urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInactive6,989

10s0md3v / ArjunA suite for discovering HTTP parameters.PythonAGPL-3.0 · Share derivative sourceInactive6,436

11GhostTroops / scan4allOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...GoBSD-3-Clause · PermissiveInactive6,193

12OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · Permissive5,715

13awarexone / Agentic-Bug-HunterAI-powered bug bounty hunting toolkit that works with or without subscription.PythonMIT · Permissive5,644

14khast3x / h8mailEmail OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related emailPythonLicense not declaredInactive5,367

15hakluke / hakrawlerSimple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationGoGPL-3.0 · Share derivative source5,161

16Astrosp / Awesome-OSINT-List📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.ShellGPL-3.0 · Share derivative source4,637

17leebaird / discoverCustom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.ShellMIT · Permissive3,945

18edoardottt / cariddiTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and moreGoGPL-3.0 · Share derivative source3,806

19rawfilejson / awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.ShellMIT · Permissive3,760

20S3cur3Th1sSh1t / WinPwnAutomation for internal Windows Penetrationtest / AD-SecurityPowerShellBSD-3-Clause · PermissiveInactive3,707