Lists (21)
Active Directory
Blockchain and Cryptocurrency
Bug bounty
Certification
Dark Web
DFIR tools
IOCs
Labs
Learning
OSINT tools
Phishing tools
Privacy tools
Red Team tools
Reporting tools
Security tools
Shodan
Threat Intelligence
Tracelabs CTF Writeups
VMs
WiFi
Wordlists
Stars
A little tool to play with Windows security
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
A simple stiller with sending logs to your EMAIL, in case of inactivity, write to me in Discord- R3VENGE#1539
Compilation of Resources from TCM's OSINT Course
A collaboratively curated list of awesome Open-Source Intelligence (OSINT) Resources
RedEye is a visual analytic tool supporting Red & Blue Team operations
Information gathering (OSINT) on a person (EU)
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
Terminal-based toolkit for GitHub data analysis.
In-depth attack surface mapping and asset discovery
Generates millions of keyword-based password mutations in seconds.
Archived Nov 2026. Final dataset of 691 websites for finding accounts by username. No longer maintained.
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Semi-automatic OSINT framework and package manager
Serverless AWS application to upload and hash evidence files.
W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering.
An OSINT tool to search for accounts by username and email in social networks.
This repository contains links to the Global Flood Mapper (GFM). Usage instructions are given here. For more details, please check the journal article titled "Global Flood Mapper: A novel Google Ea…
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
A curated list of Smart Contract Security materials and resources For Researchers
All about bug bounty (bypasses, payloads, and etc)
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation