1161 Open source projects that are alternatives of or similar to Yar

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

List of Awesome Asset Discovery Resources

A tool to hunt for publicly accessible DigitalOcean Spaces

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

This script will automatically set up an OSINT workstation starting from a Ubuntu OS.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Related subdomains finder

A Tool for Domain Flyovers

Maryam: Open-source Intelligence(OSINT) Framework

Intelligence tool but without API key

A Tool for Domain Flyovers

Extract subdomains from SSL certificates in HTTPS sites.

OSINT

PhoneInfoga is one of the most advanced tools to scan international phone numbers using only free resources. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. Then search for footprints on search engines to try to find the VoIP provider or identify the owner.

Links for the OSINT Team

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 3000+ other hashes ☄ Comes with a neat web app 🔥

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

👀 Some of my favorite OSINT tools.

Making Favicon.ico based Recon Great again !

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

E-mails, subdomains and names Harvester - OSINT

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

A high performance offensive security tool for reconnaissance and vulnerability scanning

Find leaked emails with your passwords

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com

Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.

Fully automated offensive security framework for reconnaissance and vulnerability scanning

OSINT Swiss Army Knife

An advanced tool for email reconnaissance

secretz, minimizing the large attack surface of Travis CI

Information gathering tool - OSINT

Automated network asset, email, and social media profile discovery and cataloguing.

🔎 Hunt down social media accounts by username across social networks

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

A curated list of awesome social engineering resources.

Weaponizing Live CT logs for automated monitoring of assets

The Offensive Manual Web Application Penetration Testing Framework.

Maintained collection of OSINT related resources. (All Free & Actionable)

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

Discover Your Attack Surface!

API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

An OSINT tool to gather information about the real owner of a phone number

An OSINT Metadata analyzing tool that filters through tags and creates reports

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Snoop — инструмент разведки на основе открытых данных (OSINT world)

OSINT tool - gets data from services like shodan, censys etc. in one app

Search people on the Internet.

ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight

A toolkit for Security Researchers

internet monitoring osint telegram bot for windows

Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.

PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems. It is now in the beta stage, possibly perpetually. There are bugs still present in the framework, feel free to contribute or help me out with this project its still under active development >_>

Selenium powered Python script to automate searching for vulnerable web apps.

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.