998 Open source projects that are alternatives of or similar to Intrigue Core

Do some quick reconnaissance on a domain-based web-application

Advanced and easy to use penetration testing framework 💣🔎

🔎 Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

Web Recon & Exploitation Tool.

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

List of Awesome Asset Discovery Resources

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

my oscp prep collection

The Offensive Manual Web Application Penetration Testing Framework.

A MongoDB importer and API for Project Sonars DNS datasets

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Yar is a tool for plunderin' organizations, users and/or repositories.

Querytool is an OSINT framework based on Google Spreadsheets. With this tool you can perform complex search of terms, people, email addresses, files and many more.

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

Weaponizing Live CT logs for automated monitoring of assets

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥

Pentest: Subdomains enumeration tool for penetration testers.

API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)

Sifter aims to be a fully loaded Op Centre for Pentesters

PhoneInfoga is one of the most advanced tools to scan international phone numbers using only free resources. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. Then search for footprints on search engines to try to find the VoIP provider or identify the owner.

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

recon-ng modules for Censys

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

A Tool for Domain Flyovers

Automated network asset, email, and social media profile discovery and cataloguing.

OSINT Tool: Generate username lists for companies on LinkedIn

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

DaProfiler allows you to create a profile on your target based in France only. The particularity of this program is its ability to find the e-mail addresses your target.

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Information gathering tool - OSINT

Open-Source Security Architecture | 开源安全架构

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Automated Penetration Testing Framework

XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.

An advanced tool for email reconnaissance

Maryam: Open-source Intelligence(OSINT) Framework

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Kali Intelligence Suite (KIS) shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by executing standard penetration testing tools. The collected data is internally stored in a structured manner to allow the fast identification and visualisation of the collected information.

OSINT

⚡️An awesome list of the best Termux hacking tools

🔎 Hunt down social media accounts by username across social networks

Random IPv6 - circumvents restrictive IP address-based filter and blocking rules

Directory Services Internals (DSInternals) PowerShell Module and Framework

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

😱 A curated list of amazingly awesome OSINT

Burp extension to passively scan for applications revealing software version numbers

Ruby API client for the Censys internet-wide network-scan search engine

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架