2043 Open source projects that are alternatives of or similar to Rengine

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

OSINT

OneForAll是一款功能强大的子域收集工具

Python 3.5+ DNS asynchronous brute force utility

Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.

An advanced tool for email reconnaissance

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

PhoneInfoga is one of the most advanced tools to scan international phone numbers using only free resources. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. Then search for footprints on search engines to try to find the VoIP provider or identify the owner.

Intelligence tool but without API key

The Swiss Army knife for automated Web Application Testing

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term with a default set of websites, bug bounty programs or a custom collection.

🔎 Hunt down social media accounts by username across social networks

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

In-depth Attack Surface Mapping and Asset Discovery

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

A web front-end for password cracking and analytics

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

Phonia Toolkit is one of the most advanced toolkits to scan phone numbers using only free resources. The goal is to first gather standard information such as country, area, carrier and line type on any international phone numbers with a very good accuracy.

Information gathering tool - OSINT

A tool to test security of json web token

🚀 Fast Port Scanner 🚀

Hacking Toolkit

A Powerful Subdomain Takeover Tool

A cross-platform note-taking & target-tracking app for penetration testers.

Gorsair hacks its way into remote docker containers that expose their APIs

A collection of awesome one-liner scripts especially for bug bounty tips.

Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

An OSINT tool to find contacts in order to report security vulnerabilities.

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

A default credential scanner.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

a recon tool that allows searching on URLs that are exposed via shortener services

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Discover Your Attack Surface!

GitHub Recon — and what you can achieve with it!

This challenge is Inon Shkedy's 31 days API Security Tips.

OSINT Tool: Generate username lists for companies on LinkedIn

被动式漏洞扫描系统

Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

A Fast Broken Link Hijacker Tool written in Python

Micro-framework for rapid development of reusable security tools

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

Python library and CLI for the Bug Bounty Recon API

An OSINT Metadata analyzing tool that filters through tags and creates reports

A list to discover work of red team tooling and methodology for penetration testing and security assessment

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Change monitoring app that checks the content of web pages in different periods.

Find cloud assets that no one wants exposed 🔎 ☁️

🔐 Docker Container for Penetration Testing & Security

Yar is a tool for plunderin' organizations, users and/or repositories.