L00king for a tool / link / command? Find it here ... by {THUGS}

Tool name Tags Description

OSINT Framework

The OSINT Framework is a collection of ways to gather information on specific topics

LINK

Raccoon

Offensive Security Tool for Reconnaissance and Information Gathering

LINK

Hunter.io

Email enumeration tool

LINK

Crt.sh

Certificate enumeration tool

LINK

Haveibeenpwned

Useful for breach enumeraton

LINK

Sublist3r

Python tool designed to enumerate subdomains of websites using OSINT

LINK

Searchcode

Find real life code examples

LINK

Unfurl

Unfurl takes a URL and expands ("unfurls") it into a directed graph, extracting every bit of information from the URL and exposing the obscured

LINK

SigintOS

SigintOS as the name suggests, SIGINT is an improved Linux distribution for Signal Intelligence. (HackRF, BladeRF, USRP, RTL-SDR)

LINK

Recon-cheatsheet

A okay nice cheatsheet for doing recon, found on DEF CON - 9221 twitter now hosted locally for keepsake :)

LINK

Recon-ct

CTRECON - Certificate Transparency Reconnaissance

LINK

Recon-ntoo

NTOORECON - Number To Operator Reconnaissance

LINK

Recon

Small little RCON suite by me!

LINK

Maltego CE

Comprehensive tool for graphical link analyses (OSINT) that offers real-time data mining and information gathering, as well as the representation of this information on a node-based graph

LINK

GHDB

Google Hacking Database (GHDB) is a compendium of Google hacking search terms that have been found to reveal sensitive data exposed by vulnerable servers and web applications

LINK

VirusTotal

Analyze suspicious files and URLs to detect types of malware, automatically share them with the security community

LINK

TheHarvester

Tool designed to be used in the early stages of penetration test or red team engagement. Use it for open source intelligence (OSINT) gathering (email/asn/dns/users/poeple/services)

LINK

Social-analyzer

API, CLI & Web App for analysing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)

LINK

Spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

LINK

WhatWeb

Next generation web scanner. WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices

LINK

Etherblob-explorer

Search and extract blob files on the Ethereum Blockchain network

LINK

Go-ethereum

Official Go implementation of the Ethereum protocol. Quick way to download block data via geth.

LINK

ETH-block-by-date

Get Ethereum block number by a given date. Or blocks by a given period duration. Works well with Web3 node js.

LINK

Web3.js

Ethereum JavaScript API.

LINK

Web3.py

A python interface for interacting with the Ethereum blockchain and ecosystem. Based on Web3.js

LINK

Sherlock

Hunt down social media accounts by username and email across social networks

LINK