1565 Open source projects that are alternatives of or similar to AttackSurfaceManagement

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

🔎 Hunt down social media accounts by username across social networks

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

Extract API keys from file or url using by magic of python and regex.

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

apkizer is a mass downloader for android applications for all available versions.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

One way to continuously monitor sensitive information that could be exposed on Github

Get All Registered Wifi Passwords from Target Computer.

E-mails, subdomains and names Harvester - OSINT

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

Tools used for Penetration testing / Red Teaming

备考 OSCP 的各种干货资料/渗透测试干货资料

PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems. It is now in the beta stage, possibly perpetually. There are bugs still present in the framework, feel free to contribute or help me out with this project its still under active development >_>

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

🎯 XML External Entity (XXE) Injection Payload List

Nuubi Tools (Information-ghatering|Scanner|Recon.)

🔎 Find usernames across social networks

Probe_Spider is a Open Source Intelligence Tool made complete out of Python.

a recon tool that allows searching on URLs that are exposed via shortener services

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

List of Awesome Asset Discovery Resources

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

An OSINT tool to gather information about the real owner of a phone number

swiss army knife for hackers

PhoneInfoga is one of the most advanced tools to scan international phone numbers using only free resources. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. Then search for footprints on search engines to try to find the VoIP provider or identify the owner.

OneForAll是一款功能强大的子域收集工具

my oscp prep collection

A toolkit for Security Researchers

📝 urlRecon - Info Gathering or Recon tool for Urls -> Retrieves * Whois information of the domain * DNS Details of the domain * Server Fingerprint * IP geolocation of the server

Information gathering tool - OSINT

⚡️An awesome list of the best Termux hacking tools

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

A tool to hunt for publicly accessible DigitalOcean Spaces

internet monitoring osint telegram bot for windows

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

OSINT Tool: Generate username lists for companies on LinkedIn

Semi-automatic OSINT framework and package manager

Mining parameters from dark corners of Web Archives

Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Authors

The Simplistic Information Gathering Engine | Find Advanced Information on a Username, Website, Phone Number, etc.

This script will automatically set up an OSINT workstation starting from a Ubuntu OS.

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Automated network asset, email, and social media profile discovery and cataloguing.

Framework для сбора данных из открытых источников. В Framework используется большое количество API, их необходимо зарегистрировать самому.​

OSINT tool - gets data from services like shodan, censys etc. in one app

The Offensive Manual Web Application Penetration Testing Framework.

Intelligence and Reconnaissance Package/Bundle installer.

The Simplistic Information Gathering Engine | Find Advanced Information on a Username, Website, Phone Number, etc.

Yar is a tool for plunderin' organizations, users and/or repositories.

Discover internet-wide misconfigurations while drinking coffee

A Github organization reconnaissance tool.