tool for researching domain lists using Google Dorking. You can automatically load fresh dorks from GHDB and customize the maximum number of results
Catalogue d’outils OSINT
3 050 outils
Very fast #go tool, that sorts the list of IP addresses into two lists: CDN and no CDN.
A simple command line tool with a Google Dorks list to find vulnerable CCTV cameras
Enter the domain name and get quick links to Google Dorks, Github dorks, Shodan dorks and quick links to get info about domain in Codepad, Codepen, Codeshare and other sites ("vend
15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzzing and many many more
Online tool for finding code injections, malware, unrecognized code and suspicious artifacts in: Files (up to 150 mb), URL, Memory dumps, Endpoints
Simple #python tool for step-by-step collection of domain information using HackerTarget and whoisxmlapi APIs.
A very fast script written in #go that queries the ViewDNSInfo API (free, 500 results limit) and gets a list of domains related to target domain (which could theoretically belong t
python script generates Google Dorks for SQL Injections for sites from the list.
A simple script to analyze domain using Google Dorks. It saves in file the results of checking the following categories Backup files, Database files, Exposed documents, Sub-subdoma
Tool for discover endpoints for a given target. One of the most versatile tools of this type, with dozens of different settings.
A tool for extracting various sensitive data from text files and web pages. For example: - emails - phone numbers - API keys - URLs - MAC addresses - Hashes - Bitcoin wallets and m
Extreme fast #Go tool to find secrets (emails, API keys etc), paths, links in the source code during domain recon.
Url fuzzing tool written on #go that aims to find critical backup files by creating a dynamic wordlist based on the domain. It's using 7 different methods for creating wordlists: "
AI tool that generates "dorks" to find vulnerable sites and sensitive information for Google, Bing and DuckDuckGo based on their descriptions. It doesn't work perfectly, but it's a
Find domain's known URLs from: AlienVault's, Open Threat Exchange, Common Crawl, Github, Intelligence X, URLScan, Wayback Machine
#Python tool to discover login panels, and POST Form SQLi Scanning. Support multiple hosts scanning, targeted SQLi form scanning and proxies.
User-friendly web tool for quickly scanning ports, detecting services, and performing OSINT on target systems over the internet, with customizable scan options and a recent scan hi
Chrome Extension for quick: IP/Domain Reputation Lookup IP/ Domain Info Lookup Hash Reputation Lookup (Decoding of Base64 & HEX using CyberChef File Extension & Filename Lookup and
Tool for automation collecting Google, Bing, DuckDuckGo, Baidu and Yahoo Japan search results (images search and suggestions). Note the huge(!) number of options for customizing se
#Python tool to find known vulnerabilities in software, using data from the NVD), list of CVEs, Redhat, OSV and GAD. 200+ checkers in one tool
Simple #go command line tool for getting information about CVEs: by ID, by vendor, by product, by severity, by cvss score and much more.
Free URL inspection online tool: ip, location, desktop/mobile screenshots, number of links, javascript files and stylesheets, technology profile, number of request and bytes transf
Alternative to Cvetrends (stopped working due to Twitter API restrictions). Shows the most popular CVEs in Fidverse for the last 24 h.
A tool to convert NMAP scan results into different formats: html, csv, Markdown, json, svg (Graphviz), sqlite
A simple tool written in #Go that allows you to generate a wordlist from any text (from a file or link).
A very fast and simple tool that allows to generate wordlists for different CMS and frameworks (using Github repos).
A simple #go tool that generates multi-level subdomain names based on wordlists. Used in combination with subdomain brute-force tools (Sublist3r, Amass, Gobuster etc).
A simple #go tool that generates multi-level file paths based on wordlists. Used in combination with brute-force tools (GoBuster, Dirbuster etc) to find files with sensitive inform
One of the easiest to learn web scrapers I've seen (and quite fast at that). It allows you to extract all URLs, table fields, lists and any elements matching the given criteria fro
Regex Find-in-Page Tool
Search and highlight (in webpage): Emails, Phone numbers, Dates, Prices, Addresses
addon which check all links on the webpage and show list of non-secure links
Proxy API for Web Scraping
online version of HTML pasrer http://github.com/jhy/jsoup
A very simple and fast (written in #go) tool that searches for active links to social network accounts by username (or multiple usernames)
This extreme simple tool extracts the strings corresponding to a certain #regex from the html code of the list of URLs.
Free contact details scraper to extract and download emails, phone numbers, Facebook, Twitter, LinkedIn, and Instagram profiles from any website.
The easiest extension to collect links from an open web page: - select links with Ctrl/Command key or download all; - filter links by extension or using Regular Expressions; - down
An extension that allows to collect all the data from a website into a table, quickly filter out the excess, and export the result to Excel/Google Sheet.
A tool to collect emails registered on a certain domain from search results (google, bing, yahoo, ask) and save the results to a text file. Proxy support.
Another tool to collect emails registered on a certain domain from search results (google, bing, baidu, yandex). Can be used in combination with EmailHarvester as the two tools pro
Simple #python tool for extracting different information from web pages: - email addresses - social media links - phone numbers
A simple extension for Chrome that automatically scrolls a web page until a certain word or phrase appears on it (or until the stop button is pressed).
Search and download archived web pages and files from Common Crawl and Wayback Machine.
URL inspection toolkit: live web requests monitor, subdomains/connected domains, scam, phishing, malware detection, WHOIS, Geo IP, SafeFrame view and more.
tool that allows you to do a full trace of a URL Redirect