diff --git a/LICENSE b/LICENSE
deleted file mode 100644
index 6829048..0000000
--- a/LICENSE
+++ /dev/null
@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 barni
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
diff --git a/README.md b/README.md
index f543d07..5909677 100644
--- a/README.md
+++ b/README.md
@@ -6,32 +6,73 @@
# 🔍 AWESOME OSINT ARSENAL
-### The Ultimate Open-Source Intelligence Toolkit
+### The Ultimate Open-Source Intelligence + Security Toolkit
-[](https://github.com/rawfilejson/awesome-osint-arsenal)
-[](https://github.com/rawfilejson/awesome-osint-arsenal)
-[](https://github.com/rawfilejson/awesome-osint-arsenal)
-[](https://github.com/rawfilejson/awesome-osint-arsenal)
-[](LICENSE)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
[](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers)
-> **1100+ tools · 50+ categories · One-command Kali installer**
+> **751+ tools · 50 categories · Multi-distro installers · Georgian OSINT · Termux support**
>
-> *The most comprehensive OSINT toolkit on the internet — every tool includes installation instructions*
+> *The most comprehensive OSINT and security toolkit on the internet — every tool with installation instructions or a verified link.*
+
+
-### ⚡ One-Line Kali Linux Installer
+### ⚡ Get everything in one command
```bash
-curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install_osint_arsenal.sh | sudo bash
+git clone https://github.com/rawfilejson/awesome-osint-arsenal
```
-*Or clone and run manually — see [Installation Guide](#%EF%B8%8F-installation-guide) below*
+```bash
+cd awesome-osint-arsenal
+```
+
+```bash
+sudo bash install.sh
+```
+
+### 🎯 Or pick just what you need
+
+```bash
+sudo bash osint.sh # 🔍 OSINT only (Sherlock, Maigret, Amass, …)
+```
+
+```bash
+sudo bash redteam.sh # ⚔️ Red team (Sliver, BloodHound, Mimikatz, Nuclei, …)
+```
+
+```bash
+sudo bash blueteam.sh # 🛡️ Blue team (Wazuh, Sigma, Suricata, Velociraptor, …)
+```
+
+```bash
+sudo bash forensics.sh # 🔬 DFIR + RE (Volatility, Ghidra, radare2, …)
+```
+
+```bash
+sudo bash hardware.sh # 🔌 Hardware + SDR (binwalk, hackrf, openocd, …)
+```
+
+```bash
+sudo bash labs.sh # 🎓 Vulnerable apps for practice (DVWA, Juice Shop, …)
+```
+
+```bash
+bash termux.sh # 📱 Android (Termux subset, no sudo needed)
+```
+
+> Works on **Kali, Debian, Ubuntu, Parrot, Mint, Pop!_OS** (best — `apt`)
+> Partial on **Arch / Manjaro / Fedora / RHEL** (auto-detected, falls back to git/pip/go)
+> Termux subset on **Android**
@@ -39,12 +80,30 @@ curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/mai
---
+> [!IMPORTANT]
+> ## 🙏 A note before you fork
+>
+> This repo has **751 tools across 50 categories**. Keeping that current — links, install commands, new tools every week — is a *lot* for one person.
+>
+> **If nobody helps, parts of this list will go stale.** That's just real talk.
+>
+> **How you can help in 30 seconds:**
+> - ⭐ **Star** the repo (more stars = more contributors find it)
+> - 🐛 **Spotted a dead link?** Open an issue, takes 1 minute
+> - ☕ [**Buy me a coffee**](https://www.buymeacoffee.com/rawfilejson) so weekends keep going to this
+> - 📢 **Share it** — tweet, Discord, wherever the security crowd hangs out
+>
+> If something's broken: **don't just complain — open an issue or PR. That's how this stays useful.**
+
+---
+
> [!WARNING]
> **DISCLAIMER:** This repository is for **educational and authorized security research only**.
> Always obtain written permission before testing systems you do not own.
> The authors are **not responsible** for any misuse of the tools or techniques listed here.
> See the full [Legal Disclaimer](#%EF%B8%8F-legal-disclaimer) at the bottom.
+
---
## 📋 Table of Contents
@@ -156,60 +215,127 @@ curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/mai
+
+
+⚔️ Red Team & Blue Team — click to expand
+
+42. [Red Team & Offensive Security](#42--red-team--offensive-security)
+43. [Blue Team & Defensive Security](#43--blue-team--defensive-security)
+44. [Threat Intel Platforms](#44--threat-intel-platforms)
+
+
+
+
+🔬 Forensics, Hardware & Training — click to expand
+
+45. [Digital Forensics & Reverse Engineering](#45--digital-forensics--reverse-engineering)
+46. [Training, Labs & CTF](#46--training-labs--ctf)
+47. [Bug Bounty Platforms](#47--bug-bounty-platforms)
+
+
+
+
+📚 Knowledge & Curated Additions — click to expand
+
+48. [Learning Resources](#48--learning-resources)
+49. [Extra Tools (curated additions)](#49--extra-tools-curated-additions)
+
+
+
+
+🇬🇪 Country-Specific OSINT — click to expand
+
+50. [Georgian OSINT Arsenal](#50--georgian-osint-arsenal-500-resources)
+
+
+
---
## ⚙️ Installation Guide
-> `install_osint_arsenal.sh` automates the full setup on **Kali Linux** — apt packages, pip tools, Go binaries, Ruby gems, and git-cloned tools all in one run.
-
-### Option A — Direct curl install
+### Quick install — Kali / Debian / Ubuntu / Parrot
```bash
-curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install_osint_arsenal.sh | sudo bash
+git clone https://github.com/rawfilejson/awesome-osint-arsenal
```
-### Option B — Clone and run *(recommended — lets you inspect first)*
-
```bash
-git clone https://github.com/rawfilejson/awesome-osint-arsenal.git
cd awesome-osint-arsenal
-chmod +x install_osint_arsenal.sh
-sudo bash install_osint_arsenal.sh
```
-### What the script installs
+```bash
+sudo bash install.sh
+```
-| Category | Examples |
-|:--------:|---------|
-| 📦 **apt packages** | nmap, masscan, wireshark, hydra, hashcat, aircrack-ng, nikto, sqlmap, binwalk, exiftool… |
-| 🐍 **Python pip** | sherlock, maigret, holehe, h8mail, socialscan, phoneinfoga, deepface, volatility3… |
-| 🐹 **Go binaries** | amass, subfinder, httpx, nuclei, katana, gobuster, onionscan, evilginx2… |
-| 💎 **Ruby gems** | wpscan |
-| 📂 **Git clones** | fsociety, hackingtool, zphisher, Storm-Breaker, Photon, SecLists, Responder, Orbit… |
-| ➕ **Extras added** | trufflehog, dnstwist, waybackpy, EyeWitness, crosslinked, osmedeus, FinalRecon… |
-| 🌐 **Services** | Tor daemon + proxychains4 (for dark web tools) |
+### Pick a single stack
+
+| Script | What it installs | Use when |
+|---|---|---|
+| `osint.sh` | OSINT tools (Sherlock, Maigret, Amass, theHarvester, …) | You only do recon / investigations |
+| `redteam.sh` | Sliver, BloodHound, Impacket, NetExec, Mimikatz, Nuclei, … | Authorized pentesting / red team |
+| `blueteam.sh` | Wazuh, Sigma, Suricata, Velociraptor, Atomic Red Team, MITRE CALDERA | SOC / detection engineering |
+| `forensics.sh` | Volatility 3, Ghidra, radare2, Plaso, CyberChef, … | DFIR / malware analysis |
+| `hardware.sh` | binwalk, hackrf, openocd, GNU Radio, gqrx, … | RF / IoT / firmware research |
+| `labs.sh` | DVWA, Juice Shop, WebGoat (Docker) | Local practice labs |
+| `termux.sh` | Android-compatible subset | Phone-based recon |
+
+### Other Linux distros
+
+The installers auto-detect your package manager:
+
+| Distro | Manager | Status |
+|---|---|---|
+| Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS | `apt` | ✅ Best — primary target |
+| Arch / Manjaro / EndeavourOS | `pacman` | 🟡 Partial (apt-only tools skip cleanly) |
+| Fedora / RHEL / Rocky / Alma | `dnf` | 🟡 Partial (apt-only tools skip cleanly) |
+| Termux (Android) | `pkg` | ✅ Subset only — use `bash termux.sh` |
+| macOS / Windows | — | ❌ Use a Kali VM or WSL2 |
+
+### What every installer does
+
+- Detects your distro and uses the right package manager
+- Skips what's already installed (idempotent — safe to re-run)
+- Color output: 🟢 installed · 🟡 skipped · 🔴 failed
+- Logs failures to `~/osint-install-errors.log`
+- Prints a summary at the end
+- Tools cloned via git go to `/opt/osint-arsenal/` (or `$HOME/osint-arsenal/` on Termux)
+
+### After install — add tools to your PATH
+
+```bash
+echo 'export PATH="$PATH:/opt/osint-arsenal"' >> ~/.bashrc
+```
+
+```bash
+source ~/.bashrc
+```
+
+Tools installed via `apt`/`pip`/`go install` are already on your `$PATH`.
-> All git-cloned tools are saved to `/opt/osint-arsenal/`
-> Full install log saved to `/var/log/osint-arsenal-install.log`
---
-
## 📊 Stats at a Glance
| 🛠️ Total Tools | 💻 CLI Tools | 📁 GitHub Repos | 🌐 Online Platforms | 🤖 AI Tools |
|:-:|:-:|:-:|:-:|:-:|
-| **1100+** | **400+** | **300+** | **250+** | **25+** |
+| **751+** | **165+** | **117+** | **461+** | **25+** |
-| 🕶️ Dark Web Engines | 🖥️ OSINT OSes | 💥 Breach Engines | 🔍 Google Dorks | 📂 Categories |
+| 🕶️ Dark Web | 🇬🇪 Georgian OSINT | 💥 Breach Engines | ⚔️ Red Team | 🛡️ Blue Team |
|:-:|:-:|:-:|:-:|:-:|
-| **17** | **17** | **25+** | **50+** | **41** |
+| **15+** | **500+** | **39+** | **35+** | **24+** |
+
+| 🔬 Forensics | 🔌 Hardware | 🎓 Training | 🎯 Bug Bounty | 📂 Total Categories |
+|:-:|:-:|:-:|:-:|:-:|
+| **16+** | **16+** | **21+** | **12+** | **50** |
+
+
----
+---
## 1. Username & Social Media OSINT
> 🎯 Find accounts, profiles, and digital footprints across hundreds of platforms.
@@ -1212,7 +1338,7 @@ echo "Done! All tools installed."
```bash
# From this repo's installer (recommended — installs everything)
-sudo bash install_osint_arsenal.sh
+sudo bash install.sh
# Or add specific tools manually:
sudo apt update && sudo apt install -y \
@@ -1412,12 +1538,12 @@ python3 cupp.py -i
```bash
# Option 1: Direct from this repo (one command)
-curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install_osint_arsenal.sh | sudo bash
+curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install.sh | sudo bash
# Option 2: Clone first (recommended — inspect before running)
git clone https://github.com/rawfilejson/awesome-osint-arsenal.git
cd awesome-osint-arsenal
-sudo bash install_osint_arsenal.sh
+sudo bash install.sh
```
### 📱 Termux (Android)
@@ -1518,15 +1644,1783 @@ sudo git clone https://github.com/RedSiege/EyeWitness
---
-## 🤝 Contributing
-Contributions are welcome and appreciated! If you know a tool that belongs here:
+
-1. **Fork** this repository
-2. **Add** the tool to the relevant section with an install command if applicable
-3. **Submit a PR** with a short description of why it belongs
+☕ *Liked everything above? Section 42-50 just dropped — fuel the next batch:*
-Please keep all contributions relevant to OSINT, security research, and authorized testing.
+

+
+
+
+---
+
+## 42. ⚔️ Red Team & Offensive Security
+
+> C2 frameworks, AD attacks, exploitation kits, post-exploitation. Authorized testing only.
+>
+> **Pro tip:** Sliver and Havoc are the modern open-source Cobalt Strike alternatives — start there before paying.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **AD Attack & Defense** | Comprehensive Active Directory attack reference | `git clone https://github.com/infosecn1nja/AD-Attack-Defense.git` |
+| **Arjun** | HTTP parameter discovery suite | `pip3 install arjun` |
+| **BloodHound** | AD attack-path graph analysis | `git clone https://github.com/BloodHoundAD/BloodHound.git` |
+| **BloodHound CE** | Community Edition of BloodHound — modernized stack | `docker pull specterops/bloodhound:latest` |
+| **[Brute Ratel C4](https://bruteratel.com)** | Premium C2 with strong AV/EDR evasion | [bruteratel.com](https://bruteratel.com) |
+| **Certipy** | Active Directory Certificate Services enumeration and abuse | `pip3 install certipy-ad` |
+| **[Cobalt Strike](https://www.cobaltstrike.com)** | Premium adversary simulation / red team framework | [cobaltstrike.com](https://www.cobaltstrike.com) |
+| **CrackMapExec** | Post-exploitation tool for AD networks | `pip3 install crackmapexec` |
+| **CRLFuzz** | Fast CRLF-injection scanner in Go | `go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest` |
+| **Dalfox** | Fast, intelligent XSS scanner | `go install github.com/hahwul/dalfox/v2@latest` |
+| **Evil-WinRM** | Ultimate WinRM shell for hacking/pentesting | `apt install evil-winrm` |
+| **Ghauri** | Advanced cross-platform tool to detect/exploit SQLi | `git clone https://github.com/r0oth3x49/ghauri.git` |
+| **Gxss** | Test parameters for cross-site scripting reflection | `go install github.com/KathanP19/Gxss@latest` |
+| **[HackTricks](https://book.hacktricks.xyz)** | Pentesting / hacking knowledge base by carlospolop | [book.hacktricks.xyz](https://book.hacktricks.xyz) |
+| **Havoc** | Modern, malleable post-exploitation C2 framework | `git clone https://github.com/HavocFramework/Havoc.git` |
+| **Impacket** | Python classes for working with network protocols (Windows attacks) | `pip3 install impacket` |
+| **Kerbrute** | Tool for performing Kerberos pre-auth bruteforcing | `go install github.com/ropnop/kerbrute@latest` |
+| **kiterunner** | Contextual content-discovery for modern API endpoints | `go install github.com/assetnote/kiterunner/cmd/kr@latest` |
+| **Merlin** | Cross-platform HTTP/2 post-exploitation server and agent in Go | `go install github.com/Ne0nd0g/merlin@latest` |
+| **Metasploit Framework** | Industry-standard exploitation framework with 2000+ modules | `apt install metasploit-framework` |
+| **Mythic** | Cross-platform, post-exploit, multi-user red team framework | `git clone https://github.com/its-a-feature/Mythic.git` |
+| **NetExec (nxc)** | CrackMapExec maintained successor — AD network exploitation | `pip3 install git+https://github.com/Pennyw0rth/NetExec` |
+| **[Nighthawk](https://www.mdsec.co.uk/nighthawk/)** | Premium evasive C2 by MDSec (Cobalt Strike alt) | [mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/) |
+| **NoSQLMap** | Automated NoSQL database enumeration and exploitation | `git clone https://github.com/codingo/NoSQLMap.git` |
+| **Nuclei Templates** | Community-curated templates for Nuclei | `git clone https://github.com/projectdiscovery/nuclei-templates.git` |
+| **ParamMiner (Burp ext)** | Discover hidden, unlinked HTTP parameters in Burp | `git clone https://github.com/PortSwigger/param-miner.git` |
+| **PayloadsAllTheThings** | Web app pentest payloads, bypasses, and methodology | `git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git` |
+| **PetitPotam** | PoC tool to coerce Windows hosts to authenticate to attacker | `git clone https://github.com/topotam/PetitPotam.git` |
+| **PowerShell Empire** | Post-exploitation framework with PS-based agents | `git clone https://github.com/BC-SECURITY/Empire.git` |
+| **Rubeus** | C# toolset for raw Kerberos interaction and abuse | `git clone https://github.com/GhostPack/Rubeus.git` |
+| **SharpHound** | C# data collector for BloodHound | `git clone https://github.com/BloodHoundAD/SharpHound.git` |
+| **Sliver** | Open-source adversary emulation/red-team framework (Cobalt Strike alt) | `go install github.com/bishopfox/sliver/server@latest` |
+| **SSRFmap** | Automated SSRF detection and exploitation framework | `git clone https://github.com/swisskyrepo/SSRFmap.git` |
+| **Villain** | High-level stage 0/1 C2 framework for handling sibling agents | `git clone https://github.com/t3l3machus/Villain.git` |
+| **XSStrike** | Advanced XSS scanner with crawler and payload generator | `git clone https://github.com/s0md3v/XSStrike.git` |
+
+---
+
+## 43. 🛡️ Blue Team & Defensive Security
+
+> SIEM, EDR, network monitoring, detection engineering, IR.
+>
+> **Pro tip:** Wazuh is your free Splunk replacement. Pair it with Sigma rules + Suricata for a full SOC stack on commodity hardware.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **Atomic Red Team** | Library of small detection-test scripts mapped to MITRE ATT&CK | `git clone https://github.com/redcanaryco/atomic-red-team.git` |
+| **Chainsaw** | Hunt threats in Windows event logs — fast forensics | `git clone https://github.com/WithSecureLabs/chainsaw.git` |
+| **Cortex (TheHive)** | Observable analysis and active response engine | `docker pull thehiveproject/cortex:latest` |
+| **Elastic Stack (ELK)** | Elasticsearch + Logstash + Kibana — log analytics | `docker pull docker.elastic.co/elasticsearch/elasticsearch:latest` |
+| **Falco** | Cloud-native runtime security | `git clone https://github.com/falcosecurity/falco.git` |
+| **Graylog** | Open-source log management / SIEM | `docker pull graylog/graylog:latest` |
+| **Hayabusa** | Windows event log fast forensics timeline generator | `git clone https://github.com/Yamato-Security/hayabusa.git` |
+| **Loki** | Simple IOC and YARA scanner by Florian Roth | `git clone https://github.com/Neo23x0/Loki.git` |
+| **[MITRE ATT&CK](https://attack.mitre.org)** | Adversary tactics, techniques, and procedures knowledge base | [attack.mitre.org](https://attack.mitre.org) |
+| **MITRE CALDERA** | Cyber adversary emulation platform | `git clone https://github.com/mitre/caldera.git` |
+| **[MITRE D3FEND](https://d3fend.mitre.org)** | Defensive countermeasure knowledge graph | [d3fend.mitre.org](https://d3fend.mitre.org) |
+| **osquery** | SQL-powered OS instrumentation/monitoring/analytics | `apt install osquery` |
+| **RITA** | Real Intelligence Threat Analytics — beaconing/long-conn detection | `git clone https://github.com/activecm/rita.git` |
+| **[Security Onion](https://securityonionsolutions.com)** | Linux distro for threat hunting, monitoring, and log management | [securityonionsolutions.com](https://securityonionsolutions.com) |
+| **Sigma** | Generic signature format for SIEM detections | `git clone https://github.com/SigmaHQ/sigma.git` |
+| **sigma-cli** | Convert Sigma rules to native SIEM queries | `pip3 install sigma-cli` |
+| **Snort** | Open-source intrusion-prevention/detection system | `apt install snort` |
+| **Suricata** | High-perf network IDS / IPS / NSM | `apt install suricata` |
+| **TheHive** | Scalable, free, open-source case management for SOCs | `docker pull strangebee/thehive:latest` |
+| **Tracee** | Runtime security and forensics using eBPF (Aqua) | `git clone https://github.com/aquasecurity/tracee.git` |
+| **Velociraptor** | Endpoint visibility and digital forensics — query-driven | `git clone https://github.com/Velocidex/velociraptor.git` |
+| **[Velociraptor Server](https://docs.velociraptor.app)** | Centralized server for Velociraptor agents | [docs.velociraptor.app](https://docs.velociraptor.app) |
+| **Wazuh** | Open-source XDR / SIEM platform | `git clone https://github.com/wazuh/wazuh.git` |
+| **Zeek (Bro)** | Powerful network analysis framework for security monitoring | `apt install zeek` |
+
+---
+
+## 44. 🛰️ Threat Intel Platforms
+
+> CTI platforms — open-source and enterprise.
+>
+> **Pro tip:** MISP is free and powerful. OpenCTI gives you a STIX2-native graph DB. Both run as Docker stacks.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **[Anomali ThreatStream](https://www.anomali.com)** | Enterprise threat intel aggregation platform | [anomali.com](https://www.anomali.com) |
+| **[CrowdStrike Falcon Intelligence](https://www.crowdstrike.com/products/threat-intelligence/)** | Premium adversary intel from CrowdStrike | [crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/) |
+| **[Digital Shadows SearchLight](https://www.reliaquest.com)** | Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP) | [reliaquest.com](https://www.reliaquest.com) |
+| **[EclecticIQ Intelligence Center](https://www.eclecticiq.com)** | STIX/TAXII-native threat intel platform | [eclecticiq.com](https://www.eclecticiq.com) |
+| **[Flashpoint](https://flashpoint.io)** | Business risk intel from criminal forums and dark web | [flashpoint.io](https://flashpoint.io) |
+| **[Intel471](https://intel471.com)** | Premium adversary intelligence and underground monitoring platform | [intel471.com](https://intel471.com) |
+| **[IntSights](https://intsights.com)** | External threat protection and intel (now part of Rapid7) | [intsights.com](https://intsights.com) |
+| **[KELA](https://kelacyber.com)** | Cybercrime intelligence and dark-web monitoring | [kelacyber.com](https://kelacyber.com) |
+| **[Mandiant Advantage](https://www.mandiant.com/advantage)** | Threat intel from Google's Mandiant team | [mandiant.com](https://www.mandiant.com/advantage) |
+| **OpenCTI** | Open-source CTI platform structured around STIX2 | `docker pull opencti/platform` |
+| **[SOCRadar](https://socradar.io)** | Extended threat intel — attack surface + dark web + brand | [socradar.io](https://socradar.io) |
+| **[ThreatConnect](https://threatconnect.com)** | Threat intel platform combining intel and SOAR | [threatconnect.com](https://threatconnect.com) |
+| **[ThreatQ](https://www.threatq.com)** | Threat intel platform for SOCs | [threatq.com](https://www.threatq.com) |
+| **Yeti** | Open distributed threat intelligence platform | `git clone https://github.com/yeti-platform/yeti.git` |
+
+---
+
+## 45. 🔬 Digital Forensics & Reverse Engineering
+
+> Disk/memory forensics, malware reverse engineering, timeline tools, binary analysis.
+>
+> **Pro tip:** Volatility 3 + Plaso (log2timeline) + KAPE = the modern DFIR triage stack. Ghidra > IDA Free for static analysis.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **[Binary Ninja](https://binary.ninja)** | Modern reverse engineering platform with API | [binary.ninja](https://binary.ninja) |
+| **Cutter** | GUI for radare2/rizin reverse-engineering | `git clone https://github.com/rizinorg/cutter.git` |
+| **Dissect** | Fox-IT framework for fast forensic image analysis | `pip3 install dissect` |
+| **[Eric Zimmerman's Tools](https://ericzimmerman.github.io)** | Suite of free Windows DFIR utilities | [ericzimmerman.github.io](https://ericzimmerman.github.io) |
+| **[FTK Imager](https://www.exterro.com/ftk-imager)** | Forensic disk imaging tool by AccessData | [exterro.com](https://www.exterro.com/ftk-imager) |
+| **Ghidra** | NSA's open-source software reverse engineering suite | `git clone https://github.com/NationalSecurityAgency/ghidra.git` |
+| **[IDA Free](https://hex-rays.com/ida-free/)** | Free version of IDA disassembler/decompiler | [hex-rays.com](https://hex-rays.com/ida-free/) |
+| **[KAPE](https://www.kroll.com/kape)** | Kroll Artifact Parser and Extractor — fast triage collection | [kroll.com](https://www.kroll.com/kape) |
+| **PhotoRec** | File data recovery — focuses on multimedia | `apt install testdisk` |
+| **Plaso (log2timeline)** | Super-timeline creation from forensic artifacts | `pip3 install plaso` |
+| **radare2** | Reverse engineering framework | `apt install radare2` |
+| **RegRipper** | Open-source Windows registry parsing tool | `git clone https://github.com/keydet89/RegRipper3.0.git` |
+| **Rekall** | Memory forensics tooling (legacy fork of Volatility) | `pip3 install rekall` |
+| **rizin** | Modern fork of radare2 with cleaner API | `git clone https://github.com/rizinorg/rizin.git` |
+| **The Sleuth Kit** | Library and CLI tools for forensic disk analysis | `apt install sleuthkit` |
+| **Volatility 3** | Memory forensics framework | `pip3 install volatility3` |
+
+---
+
+## 46. 🎓 Training, Labs & CTF
+
+> Hands-on practice — paid platforms and free local labs.
+>
+> **Pro tip:** Free path: TryHackMe → PortSwigger Academy → HackTheBox retired boxes. Paid path: HTB Academy + OffSec PG.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **[BugBountyHunter](https://www.bugbountyhunter.com)** | Web hacking training and labs | [bugbountyhunter.com](https://www.bugbountyhunter.com) |
+| **[CTFtime](https://ctftime.org)** | Calendar of upcoming and past CTF events | [ctftime.org](https://ctftime.org) |
+| **[Cybrary](https://www.cybrary.it)** | Free + paid cybersecurity courses | [cybrary.it](https://www.cybrary.it) |
+| **DVWA** | Damn Vulnerable Web Application — classic appsec lab | `git clone https://github.com/digininja/DVWA.git` |
+| **[Hack The Box](https://www.hackthebox.com)** | Online pentesting labs and CTFs | [hackthebox.com](https://www.hackthebox.com) |
+| **[Hacker101](https://www.hacker101.com)** | Free HackerOne course library and CTF | [hacker101.com](https://www.hacker101.com) |
+| **[Immersive Labs](https://www.immersivelabs.com)** | Cyber skills platform with hands-on exercises | [immersivelabs.com](https://www.immersivelabs.com) |
+| **[Metasploitable](https://docs.rapid7.com/metasploit/metasploitable-2/)** | Intentionally vulnerable Linux VM for Metasploit practice | [docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/) |
+| **[OffSec Proving Grounds](https://www.offsec.com/labs/individual/)** | OSCP-style training labs by Offensive Security | [offsec.com](https://www.offsec.com/labs/individual/) |
+| **[OverTheWire Wargames](https://overthewire.org)** | Free wargames for learning offensive security from scratch | [overthewire.org](https://overthewire.org) |
+| **OWASP Juice Shop** | Modern, intentionally insecure web app — covers OWASP Top 10 | `docker pull bkimminich/juice-shop` |
+| **OWASP WebGoat** | Deliberately insecure Java-based web app for training | `docker pull webgoat/webgoat` |
+| **[PentesterLab](https://pentesterlab.com)** | Hands-on web-app pentesting training | [pentesterlab.com](https://pentesterlab.com) |
+| **[picoCTF](https://picoctf.org)** | Free CTF and learning platform built by CMU | [picoctf.org](https://picoctf.org) |
+| **[PortSwigger Web Security Academy](https://portswigger.net/web-security)** | Free, world-class web security training (by Burp Suite team) | [portswigger.net](https://portswigger.net/web-security) |
+| **[pwn.college](https://pwn.college)** | Free college-level cybersecurity education from ASU | [pwn.college](https://pwn.college) |
+| **PwnedHub** | Intentionally-vulnerable web app for hands-on appsec training | `git clone https://github.com/practisec/pwnedhub.git` |
+| **[Root-Me](https://www.root-me.org)** | 500+ challenges and 100+ virtual labs | [root-me.org](https://www.root-me.org) |
+| **[TryHackMe](https://tryhackme.com)** | Beginner-friendly cybersecurity training platform | [tryhackme.com](https://tryhackme.com) |
+| **[VulnHub](https://www.vulnhub.com)** | Free downloadable vulnerable VMs for offline practice | [vulnhub.com](https://www.vulnhub.com) |
+| **[VulnYX](https://vulnyx.com)** | Online platform with vulnerable boxes (free + premium) | [vulnyx.com](https://vulnyx.com) |
+
+---
+
+## 47. 🎯 Bug Bounty Platforms
+
+> Where to actually earn money from your skills.
+>
+> **Pro tip:** Start on Bugcrowd or YesWeHack public programs — easier triage and lower competition than HackerOne H1.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **[Bugbase](https://bugbase.ai)** | Indian-origin bug-bounty + vulnerability disclosure platform | [bugbase.ai](https://bugbase.ai) |
+| **[Bugcrowd](https://bugcrowd.com)** | Crowdsourced security platform — bug bounty + pentesting | [bugcrowd.com](https://bugcrowd.com) |
+| **[Disclose.io](https://disclose.io)** | Standardized vulnerability-disclosure language and tools | [disclose.io](https://disclose.io) |
+| **[HackerOne](https://hackerone.com)** | Largest bug-bounty platform — public and private programs | [hackerone.com](https://hackerone.com) |
+| **[HackTrophy](https://hacktrophy.com)** | European bug-bounty platform | [hacktrophy.com](https://hacktrophy.com) |
+| **[Immunefi](https://immunefi.com)** | Web3 / crypto-focused bug bounty platform | [immunefi.com](https://immunefi.com) |
+| **[Intigriti](https://www.intigriti.com)** | European bug-bounty platform with fast triage | [intigriti.com](https://www.intigriti.com) |
+| **[Open Bug Bounty](https://www.openbugbounty.org)** | Free coordinated-disclosure platform | [openbugbounty.org](https://www.openbugbounty.org) |
+| **[Public Bug Bounty Programs (chaos)](https://chaos.projectdiscovery.io)** | ProjectDiscovery's free BBH program list | [chaos.projectdiscovery.io](https://chaos.projectdiscovery.io) |
+| **[Synack](https://www.synack.com)** | Crowdsourced + vetted-researcher pentesting platform | [synack.com](https://www.synack.com) |
+| **[YesWeHack](https://www.yeswehack.com)** | European-based bug-bounty and VDP platform | [yeswehack.com](https://www.yeswehack.com) |
+| **[Zerodium](https://zerodium.com)** | Premium 0day acquisition platform | [zerodium.com](https://zerodium.com) |
+
+---
+
+## 48. 📚 Learning Resources
+
+> Books, courses, blogs, YouTube channels, awesome lists.
+>
+> **Pro tip:** IppSec.rocks indexes EVERY HackTheBox walkthrough — search any retired box and watch how a pro solves it.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **[0xdf hacks stuff](https://0xdf.gitlab.io)** | HTB writeups and pentesting writeups | [0xdf.gitlab.io](https://0xdf.gitlab.io) |
+| **[awesome-hacking-resources](https://github.com/vitalysim/Awesome-Hacking-Resources)** | Beginner-friendly hacking learning resources | [github.com](https://github.com/vitalysim/Awesome-Hacking-Resources) |
+| **[awesome-incident-response](https://github.com/meirwah/awesome-incident-response)** | Curated list of IR tools and resources | [github.com](https://github.com/meirwah/awesome-incident-response) |
+| **[awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis)** | Curated list of malware-analysis tools | [github.com](https://github.com/rshipp/awesome-malware-analysis) |
+| **[awesome-pentest](https://github.com/enaqx/awesome-pentest)** | Massive curated list of pentesting tools and resources | [github.com](https://github.com/enaqx/awesome-pentest) |
+| **[Bellingcat's Online Investigations Toolkit](https://www.bellingcat.com/resources/)** | Bellingcat-curated tools and methodology guide | [bellingcat.com](https://www.bellingcat.com/resources/) |
+| **[BTFM: Blue Team Field Manual](https://www.amazon.com/dp/154101636X)** | Concise blue-team incident response reference | [amazon.com](https://www.amazon.com/dp/154101636X) |
+| **[Hacking: The Art of Exploitation (book)](https://nostarch.com/hacking2.htm)** | Classic by Jon Erickson — low-level attack fundamentals | [nostarch.com](https://nostarch.com/hacking2.htm) |
+| **[IppSec.rocks](https://ippsec.rocks)** | Indexed walkthroughs of HackTheBox machines (video) | [ippsec.rocks](https://ippsec.rocks) |
+| **[John Hammond](https://www.youtube.com/@_JohnHammond)** | Cybersecurity YouTube — CTFs, malware, walkthroughs | [youtube.com](https://www.youtube.com/@_JohnHammond) |
+| **Linux for OSINT (cipher387)** | 21-day Linux-for-OSINT course (free) | `git clone https://github.com/cipher387/linux-for-OSINT-21-days.git` |
+| **[LiveOverflow](https://www.youtube.com/@LiveOverflow)** | Hacking and security YouTube — deep technical content | [youtube.com](https://www.youtube.com/@LiveOverflow) |
+| **[NahamSec](https://www.youtube.com/@nahamsec)** | Bug bounty and offensive security YouTube content | [youtube.com](https://www.youtube.com/@nahamsec) |
+| **[Netlas Cookbook](https://academy.netlas.io)** | Free OSINT automation cookbook | [academy.netlas.io](https://academy.netlas.io) |
+| **[OSINT Curious](https://osintcurio.us)** | Community blog, podcast, and learning resources | [osintcurio.us](https://osintcurio.us) |
+| **[OSINT Techniques](https://inteltechniques.com)** | Michael Bazzell's resources, books, and search tools | [inteltechniques.com](https://inteltechniques.com) |
+| **Python for OSINT (cipher387)** | 21-day Python-for-OSINT course (free) | `git clone https://github.com/cipher387/python-for-OSINT-21-days.git` |
+| **[Real-World Bug Hunting (book)](https://nostarch.com/bughunting)** | Peter Yaworski — bug bounty methodology and real reports | [nostarch.com](https://nostarch.com/bughunting) |
+| **[RTFM: Red Team Field Manual](https://www.amazon.com/dp/B07RJG62SJ)** | Concise red-team command reference | [amazon.com](https://www.amazon.com/dp/B07RJG62SJ) |
+| **[The Web Application Hacker's Handbook (book)](https://www.amazon.com/dp/1118026470)** | Stuttard & Pinto — appsec bible | [amazon.com](https://www.amazon.com/dp/1118026470) |
+
+---
+
+## 49. ✨ Extra Tools (curated additions)
+
+> Tools added in v2.x — modern recon, archive lookups, niche services, research-grade pivots.
+>
+> **Pro tip:** This section gets refreshed every release — check before you reach for an older tool.
+
+| Tool | Description | Install / Link |
+|------|-------------|----------------|
+| **[abuse.ch Hunting](https://hunting.abuse.ch)** | Hunt across all abuse.ch malware platforms with one query | [hunting.abuse.ch](https://hunting.abuse.ch) |
+| **[Aleph Open Search](https://open-search.aleph-networks.eu)** | Dark-web search engine by Aleph Networks | [open-search.aleph-networks.eu](https://open-search.aleph-networks.eu) |
+| **[Aletheia (image forensics)](https://www.aletheia.ai)** | Detect manipulated/AI-generated images | [aletheia.ai](https://www.aletheia.ai) |
+| **altdns** | Generates permutations, alterations and mutations of subdomains | `pip3 install py-altdns` |
+| **anew** | Append lines from stdin to a file only if not already there | `go install github.com/tomnomnom/anew@latest` |
+| **[ANY.RUN](https://any.run)** | Interactive online malware sandbox | [any.run](https://any.run) |
+| **[Apollo.io](https://www.apollo.io)** | B2B phone/email finder — 1200 free credits/yr | [apollo.io](https://www.apollo.io) |
+| **[APT Groups and Operations](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml)** | Spreadsheet of threat actors, sponsoring countries, TTPs | [docs.google.com](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml) |
+| **Aquatone** | Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers) | `go install github.com/michenriksen/aquatone@latest` |
+| **[Archive.today](https://archive.ph)** | Web archive — saves snapshots even when robots.txt blocks Wayback | [archive.ph](https://archive.ph) |
+| **Arctic Shift** | Tool for accessing large dumps of Reddit data via API/web | `git clone https://github.com/ArthurHeitmann/arctic_shift.git` |
+| **[Arkham Intelligence](https://www.arkhamintelligence.com)** | On-chain intel — labels, entities, historical flows | [arkhamintelligence.com](https://www.arkhamintelligence.com) |
+| **assetfinder** | Find domains and subdomains related to a given domain | `go install github.com/tomnomnom/assetfinder@latest` |
+| **AutoRecon** | Multi-threaded network reconnaissance and enumeration framework | `pip3 install git+https://github.com/Tib3rius/AutoRecon.git` |
+| **Axiom** | Dynamic infra framework for parallel cloud-based recon | `git clone https://github.com/pry0cc/axiom.git` |
+| **[BackgroundChecks.com](https://www.backgroundchecks.com)** | Background check aggregator (BeenVerified family) | [backgroundchecks.com](https://www.backgroundchecks.com) |
+| **[Baidu](https://www.baidu.com)** | Major Chinese search engine — essential for China-focused OSINT | [baidu.com](https://www.baidu.com) |
+| **[BeVigil](https://bevigil.com/search)** | Search subdomains, URLs, parameters from mobile applications | [bevigil.com](https://bevigil.com/search) |
+| **[BGP.tools](https://bgp.tools)** | Modern BGP toolkit for network reconnaissance | [bgp.tools](https://bgp.tools) |
+| **[BinaryEdge](https://www.binaryedge.io)** | Cyber risk and attack-surface intelligence | [binaryedge.io](https://www.binaryedge.io) |
+| **[Bitquery](https://bitquery.io)** | Blockchain data APIs for on-chain investigation | [bitquery.io](https://bitquery.io) |
+| **[Black Book Online](https://www.blackbookonline.info)** | Free nationwide directory of public-record lookups | [blackbookonline.info](https://www.blackbookonline.info) |
+| **BlackEye** | 32+ phishing template builder for credential capture (lab-only) | `git clone https://github.com/An0nUD4Y/blackeye.git` |
+| **[Brave Browser](https://brave.com)** | Privacy-focused browser with built-in Tor/IPFS support | [brave.com](https://brave.com) |
+| **[Brave Search](https://search.brave.com)** | Independent, transparent, ad-free search engine | [search.brave.com](https://search.brave.com) |
+| **[BreachForums Status](https://www.breachforums.cx)** | Status tracking for the rotating BreachForums mirrors | [breachforums.cx](https://www.breachforums.cx) |
+| **[Breadcrumbs](https://breadcrumbs.app)** | Free crypto investigation platform — visualize transaction flows | [breadcrumbs.app](https://breadcrumbs.app) |
+| **[BrightCloud Threat Intelligence](https://brightcloud.com)** | URL/IP/threat reputation database | [brightcloud.com](https://brightcloud.com) |
+| **[BrightCloud URL/IP Lookup](https://brightcloud.com/tools/url-ip-lookup.php)** | Reputation, category, and threat checks for URLs/IPs | [brightcloud.com](https://brightcloud.com/tools/url-ip-lookup.php) |
+| **[BscScan](https://bscscan.com)** | Binance Smart Chain explorer — same UX as Etherscan | [bscscan.com](https://bscscan.com) |
+| **[CachedView](https://cachedview.com)** | View Google/Bing/Yandex cached versions of any page | [cachedview.com](https://cachedview.com) |
+| **[Castrick](https://castrickclues.com)** | Find social media accounts via email, username, phone | [castrickclues.com](https://castrickclues.com) |
+| **Censys CLI** | Official Python wrapper and CLI for Censys | `pip3 install censys` |
+| **[CertKit Certificate Search](https://www.certkit.io/tools/ct-logs/)** | Fast search for public SSL/TLS certificate records | [certkit.io](https://www.certkit.io/tools/ct-logs/) |
+| **[Chainabuse](https://www.chainabuse.com)** | Public crypto-scam reporting database | [chainabuse.com](https://www.chainabuse.com) |
+| **[Chainalysis Reactor](https://www.chainalysis.com/product/reactor/)** | Premium blockchain investigation platform | [chainalysis.com](https://www.chainalysis.com/product/reactor/) |
+| **[CheckUser](https://checkuser.vercel.app)** | Search username across multiple social networks | [checkuser.vercel.app](https://checkuser.vercel.app) |
+| **[CIRCL Hashlookup](https://www.circl.lu/services/hashlookup)** | Free public hashlookup for known software files | [circl.lu](https://www.circl.lu/services/hashlookup) |
+| **[Cisco Talos Intelligence](https://talosintelligence.com/reputation_center)** | IP and Domain Reputation Center for real-time detection | [talosintelligence.com](https://talosintelligence.com/reputation_center) |
+| **[Clearbit Connect](https://connect.clearbit.com)** | Email finder browser extension with company data | [connect.clearbit.com](https://connect.clearbit.com) |
+| **[Cloudflare Radar](https://radar.cloudflare.com)** | Internet traffic patterns, attacks, technology trends | [radar.cloudflare.com](https://radar.cloudflare.com) |
+| **[Clustrmaps](https://clustrmaps.com)** | Find people and address information | [clustrmaps.com](https://clustrmaps.com) |
+| **[Commander Search](https://www.commandersearch.com)** | Boolean search builder for OSINT investigators | [commandersearch.com](https://www.commandersearch.com) |
+| **[Constella Intelligence](https://constellaintelligence.com)** | Identity threat intel from breaches and dark web | [constellaintelligence.com](https://constellaintelligence.com) |
+| **[ContactOut](https://contactout.com)** | Find emails and phones for 300M+ professionals | [contactout.com](https://contactout.com) |
+| **[CredenShow](https://credenshow.com)** | Identify your compromised credentials before others do | [credenshow.com](https://credenshow.com) |
+| **CrossLinked** | LinkedIn enumeration — generate username lists from LinkedIn profiles | `pip3 install crosslinked` |
+| **[DBpedia](https://www.dbpedia.org)** | Structured Wikipedia data — SPARQL endpoint | [dbpedia.org](https://www.dbpedia.org) |
+| **[Digital Footprint Check](https://www.digitalfootprintcheck.com/free-checker.html)** | Free username check on hundreds of sites | [digitalfootprintcheck.com](https://www.digitalfootprintcheck.com/free-checker.html) |
+| **dirsearch** | Web path scanner — advanced wordlist-based directory bruteforce | `pip3 install dirsearch` |
+| **[Discord Lookup](https://discordlookup.com)** | Look up Discord user info via ID | [discordlookup.com](https://discordlookup.com) |
+| **[DiscordHistory](https://disboard.org)** | Search public Discord servers and messages | [disboard.org](https://disboard.org) |
+| **[DNS History](https://dnshistory.org)** | Historical DNS records lookup | [dnshistory.org](https://dnshistory.org) |
+| **[DocumentCloud](https://www.documentcloud.org)** | Platform for analyzing, annotating, publishing documents | [documentcloud.org](https://www.documentcloud.org) |
+| **[DomainEye Reverse WHOIS](https://domaineye.com/reverse-whois)** | Search domains by registrant data | [domaineye.com](https://domaineye.com/reverse-whois) |
+| **dork-cli** | Run Google dorks from the command line | `git clone https://github.com/jgor/dork-cli.git` |
+| **[DorkGenius](https://dorkgenius.com)** | AI-powered search query generator for Google, Bing, DuckDuckGo | [dorkgenius.com](https://dorkgenius.com) |
+| **[Dorky](https://dorky.io)** | Online dork builder for Google/Bing/DuckDuckGo | [dorky.io](https://dorky.io) |
+| **[Dune Analytics](https://dune.com)** | SQL queries over indexed blockchain data | [dune.com](https://dune.com) |
+| **[Elliptic](https://www.elliptic.co)** | Crypto financial-crime detection and investigation | [elliptic.co](https://www.elliptic.co) |
+| **[EmailRep.io](https://emailrep.io)** | Free email reputation API by Sublime Security | [emailrep.io](https://emailrep.io) |
+| **[Epieos Tools](https://tools.epieos.com)** | Reverse-lookup email/phone for Google profile data | [tools.epieos.com](https://tools.epieos.com) |
+| **[Epstein Exposed](https://epsteinexposed.com)** | Searchable database of 2M+ DOJ Epstein case docs and network graphs | [epsteinexposed.com](https://epsteinexposed.com) |
+| **[ETDA APT Groups](https://apt.etda.or.th/cgi-bin/listgroups.cgi)** | Search threat-actor groups and their tools | [apt.etda.or.th](https://apt.etda.or.th/cgi-bin/listgroups.cgi) |
+| **etherscan-py** | Python wrapper for Etherscan API | `pip3 install etherscan-python` |
+| **[ExportData](https://www.exportdata.io)** | Historical tweet, follower, and trend export tool | [exportdata.io](https://www.exportdata.io) |
+| **[FamilyTreeNow](https://familytreenow.com)** | Free genealogy search — addresses, phones, emails | [familytreenow.com](https://familytreenow.com) |
+| **ffuf** | Fast Go-based web fuzzer — directory, parameter, vhost discovery | `go install github.com/ffuf/ffuf/v2@latest` |
+| **[Filesec.io](https://filesec.io)** | Catalog of malicious file extensions, risks, OS-level mitigations | [filesec.io](https://filesec.io) |
+| **Findomain** | Cross-platform subdomain enumerator with monitoring features | `git clone https://github.com/Findomain/Findomain.git` |
+| **[Flickr](https://www.flickr.com)** | Photo-sharing — geosearch + license + camera EXIF intact | [flickr.com](https://www.flickr.com) |
+| **[Foller.me](https://foller.me)** | Twitter analytics — bio, languages, hashtags, mentions | [foller.me](https://foller.me) |
+| **[Forensically Beta](https://29a.ch/photo-forensics)** | Online image forensics — clone detection, level sweep | [29a.ch](https://29a.ch/photo-forensics) |
+| **[FullContact](https://www.fullcontact.com)** | Identity-resolution API and person enrichment | [fullcontact.com](https://www.fullcontact.com) |
+| **gau (getallurls)** | Fetch URLs from AlienVault OTX, Wayback, Common Crawl, URLScan | `go install github.com/lc/gau/v2/cmd/gau@latest` |
+| **[Geocreepy](http://www.geocreepy.com)** | Geolocation aggregator — pulls geotagged posts across networks | [geocreepy.com](http://www.geocreepy.com) |
+| **[GeoHints](https://geohints.com)** | Browser-based satellite/streetview geolocation training & investigation | [geohints.com](https://geohints.com) |
+| **[GeoSpy Pro](https://geospy.ai/pro)** | Premium AI image geolocation by Graylark | [geospy.ai](https://geospy.ai/pro) |
+| **[Get-Metadata.com](https://www.get-metadata.com)** | Online EXIF extractor — handles .DOCX/.PDF too | [get-metadata.com](https://www.get-metadata.com) |
+| **gf** | Wrapper around grep with patterns for bug-bounty workflow | `go install github.com/tomnomnom/gf@latest` |
+| **[Ghiro](https://www.getghiro.org)** | Automated digital image forensics | [getghiro.org](https://www.getghiro.org) |
+| **git-hound** | Find sensitive data exposed via GitHub code search | `go install github.com/tillson/git-hound@latest` |
+| **github_monitor** | Real-time tracking of GitHub user activity and repo changes | `git clone https://github.com/misiektoja/github_monitor.git` |
+| **gitleaks** | Detect secrets, credentials, and API keys in git repos | `go install github.com/gitleaks/gitleaks/v8@latest` |
+| **[Google Guide Advanced Operators](http://www.googleguide.com/advanced_operators_reference.html)** | Reference for Google search operators | [googleguide.com](http://www.googleguide.com/advanced_operators_reference.html) |
+| **[Google Hacking Database (GHDB)](https://www.exploit-db.com/google-hacking-database)** | Index of dorks for finding publicly exposed info | [exploit-db.com](https://www.exploit-db.com/google-hacking-database) |
+| **GoSpider** | Fast Go web spider for crawling/audit | `go install github.com/jaeles-project/gospider@latest` |
+| **gowitness** | Modern Go-based web screenshot utility (Aquatone successor) | `go install github.com/sensepost/gowitness@latest` |
+| **[GrayhatWarfare](https://grayhatwarfare.com)** | Index of open Amazon S3 buckets — find exposed cloud data | [grayhatwarfare.com](https://grayhatwarfare.com) |
+| **GreyNoise CLI** | Command-line tool for GreyNoise mass-scanner intel | `pip3 install greynoise` |
+| **[GreyNoise Visualizer](https://viz.greynoise.io)** | Tells you which IPs are noise vs targeted threats | [viz.greynoise.io](https://viz.greynoise.io) |
+| **hakrawler** | Fast Go web crawler for endpoint and asset discovery | `go install github.com/hakluke/hakrawler@latest` |
+| **[Hatching Triage](https://tria.ge)** | Modern malware sandbox with kernel-level monitoring | [tria.ge](https://tria.ge) |
+| **[haveibeenzuckered](https://haveibeenzuckered.com)** | Check if a phone number is in the 533M Facebook breach | [haveibeenzuckered.com](https://haveibeenzuckered.com) |
+| **[HIB Ransomed](https://haveibeenransom.com)** | Check if your data has been leaked by ransomware groups | [haveibeenransom.com](https://haveibeenransom.com) |
+| **httprobe** | Take a list of domains and probe for working HTTP/HTTPS | `go install github.com/tomnomnom/httprobe@latest` |
+| **[Hudson Rock](https://www.hudsonrock.com/free-tools)** | Free infostealer-compromise check tools (domain/email/IP) | [hudsonrock.com](https://www.hudsonrock.com/free-tools) |
+| **[Hybrid Analysis](https://www.hybrid-analysis.com)** | Free advanced malware analysis service by CrowdStrike | [hybrid-analysis.com](https://www.hybrid-analysis.com) |
+| **[IKnowYour.Dad](https://iknowyour.dad)** | Data breach search engine | [iknowyour.dad](https://iknowyour.dad) |
+| **[Imgur](https://imgur.com)** | Image hosting — meme tracing and reverse search | [imgur.com](https://imgur.com) |
+| **instagram_monitor** | Real-time tracking of Instagram users with email alerts and CSV logs | `git clone https://github.com/misiektoja/instagram_monitor.git` |
+| **[Intelligence X (intelx.io)](https://intelx.io)** | Selective archive search — emails, leaks, paste sites, dark-web | [intelx.io](https://intelx.io) |
+| **Interlace** | Easily turn single-threaded CLI apps into multi-threaded jobs | `git clone https://github.com/codingo/Interlace.git` |
+| **[Joe Sandbox](https://www.joesandbox.com)** | Deep automated malware analysis (free tier) | [joesandbox.com](https://www.joesandbox.com) |
+| **JSFinder** | Find JS files referenced from a URL — endpoints / API paths | `git clone https://github.com/Threezh1/JSFinder.git` |
+| **[Kagi Search](https://kagi.com)** | Premium privacy-respecting search engine, no ads, no tracking | [kagi.com](https://kagi.com) |
+| **knock** | Domain knock — security testing via DNS | `git clone https://github.com/guelfoweb/knock.git` |
+| **Knockpy** | Subdomain enumeration scan with virtual host discovery | `pip3 install knock-subdomains` |
+| **linkedin2username** | Generate usernames from a target's LinkedIn employees | `git clone https://github.com/initstring/linkedin2username.git` |
+| **LinkedInDumper** | Dump/scrape company employees from LinkedIn API | `git clone https://github.com/l4rm4nd/LinkedInDumper.git` |
+| **[Malpedia](https://malpedia.caad.fkie.fraunhofer.de)** | Threat-actor groups, malware families, and analysis by Fraunhofer | [malpedia.caad.fkie.fraunhofer.de](https://malpedia.caad.fkie.fraunhofer.de) |
+| **[MalShare](https://malshare.com)** | Free malware sample repository for researchers | [malshare.com](https://malshare.com) |
+| **massdns** | High-performance DNS stub resolver for bulk lookups | `git clone https://github.com/blechschmidt/massdns.git` |
+| **meg** | Fetch many paths for many hosts without flooding | `go install github.com/tomnomnom/meg@latest` |
+| **[Memento Time Travel](https://timetravel.mementoweb.org)** | Federated search across multiple web archives | [timetravel.mementoweb.org](https://timetravel.mementoweb.org) |
+| **[Metadata2Go](https://www.metadata2go.com)** | Free online metadata extractor for any file | [metadata2go.com](https://www.metadata2go.com) |
+| **[MetaDefender Cloud](https://metadefender.com)** | Multi-engine file/URL/IP scanning by OPSWAT | [metadefender.com](https://metadefender.com) |
+| **[MetaSleuth](https://metasleuth.io)** | Free + paid crypto transaction tracing tool | [metasleuth.io](https://metasleuth.io) |
+| **[MISP Galaxy](https://www.misp-galaxy.org)** | Adversary group identification used by SOCs/ISACs | [misp-galaxy.org](https://www.misp-galaxy.org) |
+| **Mitaka** | Browser extension for OSINT — extract IoCs from highlighted text | `git clone https://github.com/ninoseki/mitaka.git` |
+| **[Mnemonic Passive DNS](https://passivedns.mnemonic.no)** | Free passive-DNS query tool | [passivedns.mnemonic.no](https://passivedns.mnemonic.no) |
+| **[Mojeek](https://www.mojeek.com)** | Independent search engine that doesn't track users | [mojeek.com](https://www.mojeek.com) |
+| **[Mylnikov Geolocation](https://www.mylnikov.org)** | BSSID/Wi-Fi MAC to coordinates lookup | [mylnikov.org](https://www.mylnikov.org) |
+| **Naabu** | Fast Go-based port scanner from ProjectDiscovery | `go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest` |
+| **[Name Checkr](https://www.namecheckr.com)** | Check domain and username across many platforms | [namecheckr.com](https://www.namecheckr.com) |
+| **[Name Checkup](https://namecheckup.com)** | Check username availability across social media | [namecheckup.com](https://namecheckup.com) |
+| **[NameKetchup](https://nameketchup.com)** | Check domain + username on popular social media | [nameketchup.com](https://nameketchup.com) |
+| **[Naver](https://www.naver.com)** | South Korean search engine — local content not on Google | [naver.com](https://www.naver.com) |
+| **[NerdyData](https://nerdydata.com)** | Search engine for source code across the public web | [nerdydata.com](https://nerdydata.com) |
+| **[Netcraft Site Report](https://sitereport.netcraft.com)** | Web technology, hosting history, takedown service | [sitereport.netcraft.com](https://sitereport.netcraft.com) |
+| **Oblivion** | OSINT framework | `git clone https://github.com/loseys/Oblivion.git` |
+| **[ODIN](https://search.odin.io)** | Search hosts, CVEs, exposed buckets — 10 free searches/day | [search.odin.io](https://search.odin.io) |
+| **[Offshore Leaks Database](https://offshoreleaks.icij.org)** | Panama/Pandora/Paradise Papers searchable database | [offshoreleaks.icij.org](https://offshoreleaks.icij.org) |
+| **[OnionLand Search](https://onionlandsearchengine.com)** | Search engine for dark-web content | [onionlandsearchengine.com](https://onionlandsearchengine.com) |
+| **[Open-Source Intelligence (Reverse Image)](https://oosint.com)** | Yandex/Bing/TinEye combined reverse-image search | [oosint.com](https://oosint.com) |
+| **[OpenCellID](https://opencellid.org)** | Largest public database of cell-tower IDs | [opencellid.org](https://opencellid.org) |
+| **opencorporates-cli** | Command-line client for OpenCorporates API | `pip3 install opencorporates` |
+| **[OpenPhish](https://openphish.com)** | Live phishing URL feed | [openphish.com](https://openphish.com) |
+| **[OpenRailwayMap](https://www.openrailwaymap.org)** | Worldwide rail network map — rolling stock, infrastructure, signals | [openrailwaymap.org](https://www.openrailwaymap.org) |
+| **[OpenSanctions](https://opensanctions.org)** | Consolidated database of sanctioned entities across 200+ sources | [opensanctions.org](https://opensanctions.org) |
+| **[OXT (OpenXt)](https://oxt.me)** | Bitcoin transaction graph explorer with clustering | [oxt.me](https://oxt.me) |
+| **[PassiveTotal (RiskIQ)](https://community.riskiq.com)** | Passive DNS, WHOIS, SSL cert pivots — now Microsoft Defender TI | [community.riskiq.com](https://community.riskiq.com) |
+| **[Peekalink](https://www.peekalink.io)** | Preview any URL — title, description, screenshot via API | [peekalink.io](https://www.peekalink.io) |
+| **[PhishStats](https://phishstats.info)** | Live phishing intelligence feed and search | [phishstats.info](https://phishstats.info) |
+| **[PhishTank](https://phishtank.org)** | Anti-phishing community — verified phishing URLs | [phishtank.org](https://phishtank.org) |
+| **[Picarta.ai](https://picarta.ai)** | AI-powered photo geolocation predictor | [picarta.ai](https://picarta.ai) |
+| **[Pinterest](https://www.pinterest.com)** | Visual search engine — alternate reverse-image source | [pinterest.com](https://www.pinterest.com) |
+| **[PolygonScan](https://polygonscan.com)** | Polygon (Matic) blockchain explorer | [polygonscan.com](https://polygonscan.com) |
+| **[Predicta Search](https://predictasearch.com)** | Search social accounts by email or phone | [predictasearch.com](https://predictasearch.com) |
+| **[Public Transport Maps](https://cipher387.github.io/public_transport_maps/)** | 20+ online public transport maps by country | [cipher387.github.io](https://cipher387.github.io/public_transport_maps/) |
+| **[PublicWWW](https://publicwww.com)** | Search the web's source code (HTML/JS/CSS) for snippets, trackers, scripts | [publicwww.com](https://publicwww.com) |
+| **[PullPush](https://pullpush.io)** | Index/retrieval service for Reddit (incl. deleted content) | [pullpush.io](https://pullpush.io) |
+| **[Pushshift API](https://pushshift.io)** | Historical Reddit data — posts, comments, metadata | [pushshift.io](https://pushshift.io) |
+| **[Quake (360.cn)](https://quake.360.net)** | Chinese internet asset search engine | [quake.360.net](https://quake.360.net) |
+| **[RECAP Archive](https://www.courtlistener.com/recap/)** | Public archive of PACER court documents | [courtlistener.com](https://www.courtlistener.com/recap/) |
+| **reconFTW** | Full-suite domain recon — subdomain enum, port scan, vuln scan in one pipeline | `git clone https://github.com/six2dez/reconftw.git` |
+| **[RedditMetis](https://redditmetis.com)** | Reddit user analysis — summary, top posts, activity stats | [redditmetis.com](https://redditmetis.com) |
+| **[RedditSearch.io](https://redditsearch.io)** | Search archived Reddit content via Pushshift mirror | [redditsearch.io](https://redditsearch.io) |
+| **[Revealer.cc](https://revealer.cc)** | Discord-based account-checker & breach lookup | [revealer.cc](https://revealer.cc) |
+| **[RocketReach](https://rocketreach.co)** | Find professional emails/phones for 700M+ profiles | [rocketreach.co](https://rocketreach.co) |
+| **RustScan** | Modern port scanner — finds open ports, then pipes to Nmap | `git clone https://github.com/RustScan/RustScan.git` |
+| **[ScamAdviser](https://www.scamadviser.com)** | Check website trustworthiness scores | [scamadviser.com](https://www.scamadviser.com) |
+| **[Scribd](https://www.scribd.com)** | Search for documents, presentations, sheet music, ebooks | [scribd.com](https://www.scribd.com) |
+| **[searchcode](https://searchcode.com)** | Search 75+ billion lines of public source code across GitHub/GitLab/Bitbucket | [searchcode.com](https://searchcode.com) |
+| **Seeker** | Geolocation by phishing — collects precise GPS via WebRTC + browser geolocation | `git clone https://github.com/thewhiteh4t/seeker.git` |
+| **[Shadowserver Dashboard](https://dashboard.shadowserver.org/)** | Global statistics on cyber threats by Shadowserver Foundation | [dashboard.shadowserver.org](https://dashboard.shadowserver.org/) |
+| **Sherloq** | Open-source image forensics toolset | `git clone https://github.com/GuidoBartoli/sherloq.git` |
+| **Shodan CLI** | Official Shodan command-line client | `pip3 install shodan` |
+| **[SlideShare](https://www.slideshare.net)** | Search public PowerPoint/PDF presentations | [slideshare.net](https://www.slideshare.net) |
+| **smap** | Drop-in replacement for nmap powered by shodan.io | `go install github.com/s0md3v/smap/cmd/smap@latest` |
+| **[Snusbase API](https://snusbase.com/api)** | API access to breach data (premium) | [snusbase.com](https://snusbase.com/api) |
+| **[SourceGraph](https://sourcegraph.com/search)** | Search code from millions of open-source repos | [sourcegraph.com](https://sourcegraph.com/search) |
+| **[SpyCloud](https://spycloud.com)** | Account-takeover prevention + identity exposure data | [spycloud.com](https://spycloud.com) |
+| **[Startpage](https://www.startpage.com)** | Privacy-focused search — Google results with no tracking | [startpage.com](https://www.startpage.com) |
+| **[StealSeek](https://stealseek.io)** | Search engine for finding and analyzing data breaches | [stealseek.io](https://stealseek.io) |
+| **[SubredditStats](https://subredditstats.com)** | Subreddit user-overlap, growth, top posts | [subredditstats.com](https://subredditstats.com) |
+| **[Telegago](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg)** | Google CSE for finding public/private Telegram channels | [cse.google.com](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg) |
+| **Telegram Nearby Map** | Find positions of nearby Telegram users via OSM | `git clone https://github.com/tejado/telegram-nearby-map.git` |
+| **[Telegram Search (lyzem.com)](https://lyzem.com)** | Search public Telegram messages and channels | [lyzem.com](https://lyzem.com) |
+| **[Telemetr](https://telemetr.io)** | Telegram channel/group analytics | [telemetr.io](https://telemetr.io) |
+| **Telerecon** | Reconnaissance framework for investigating Telegram | `git clone https://github.com/sockysec/Telerecon.git` |
+| **[Teleteg](https://teleteg.com)** | Telegram search engine — 10 free results | [teleteg.com](https://teleteg.com) |
+| **[TGStat](https://tgstat.com)** | Telegram channel analytics — post stats, audience overlap | [tgstat.com](https://tgstat.com) |
+| **[The Hidden Wiki](https://thehiddenwiki.org)** | Curated directory of dark-web sites (mirror-dependent) | [thehiddenwiki.org](https://thehiddenwiki.org) |
+| **the-endorser** | Map LinkedIn endorsements/skills to draw out person relationships | `git clone https://github.com/eth0izzle/the-endorser.git` |
+| **[TikTok Finder Country](https://tiktokfindercountry.xyz)** | Free OSINT lookup for TikTok account country/language | [tiktokfindercountry.xyz](https://tiktokfindercountry.xyz) |
+| **TorghostNG** | Anonymize all OS traffic via Tor (Linux) | `git clone https://github.com/githacktools/TorghostNG.git` |
+| **TOsint** | Extract info from Telegram bots and channels | `git clone https://github.com/drego85/tosint.git` |
+| **[Trace](https://trace.manus.space)** | Search usernames, emails, phones across 600+ platforms with risk scoring | [trace.manus.space](https://trace.manus.space) |
+| **[Transit Visualisation Client](https://tracker.geops.ch)** | Real-time public transport across 700+ cities | [tracker.geops.ch](https://tracker.geops.ch) |
+| **[Trends24](https://trends24.in)** | Twitter trends history per country | [trends24.in](https://trends24.in) |
+| **[TRM Labs](https://www.trmlabs.com)** | Crypto compliance and investigation platform | [trmlabs.com](https://www.trmlabs.com) |
+| **[TweetBinder](https://www.tweetbinder.com)** | Twitter/X analytics dashboards | [tweetbinder.com](https://www.tweetbinder.com) |
+| **[Twitch Search](https://www.twitch.tv/directory)** | Search live streams by category, language, viewer count | [twitch.tv](https://www.twitch.tv/directory) |
+| **[Twiteur](https://twiteur.com)** | Twitter/X advanced search wrapper — geo, date, sentiment | [twiteur.com](https://twiteur.com) |
+| **[U-Find](https://u-find.com)** | Reddit user comment / submission scraper | [u-find.com](https://u-find.com) |
+| **uncover** | ProjectDiscovery — quickly find exposed hosts via Shodan/Censys/Fofa | `go install github.com/projectdiscovery/uncover/cmd/uncover@latest` |
+| **URLCrazy** | Generate domain typos and check availability/registration | `git clone https://github.com/urbanadventurer/urlcrazy.git` |
+| **[URLhaus (abuse.ch)](https://urlhaus.abuse.ch)** | Database of malicious URLs used for malware distribution | [urlhaus.abuse.ch](https://urlhaus.abuse.ch) |
+| **[User-Searcher](https://www.user-searcher.com)** | Search a username across 2000+ websites | [user-searcher.com](https://www.user-searcher.com) |
+| **[Vehicle Number Search Toolbox](https://cipher387.github.io/venicle_number_search_toolbox/)** | Search 14 country license plates from one page | [cipher387.github.io](https://cipher387.github.io/venicle_number_search_toolbox/) |
+| **[Venacus](https://venacus.com)** | Search for your data breaches and get notified when compromised | [venacus.com](https://venacus.com) |
+| **[Vigilante.pw](https://vigilante.pw)** | Index of dumped databases (educational) | [vigilante.pw](https://vigilante.pw) |
+| **[VMRay Analyzer](https://www.vmray.com)** | Malware sandbox analysis platform | [vmray.com](https://www.vmray.com) |
+| **[WalletExplorer](https://walletexplorer.com)** | Smart bitcoin block explorer — clusters addresses by entity | [walletexplorer.com](https://walletexplorer.com) |
+| **waybackurls** | Fetch all URLs the Wayback Machine knows about a domain | `go install github.com/tomnomnom/waybackurls@latest` |
+| **[Whoisology](https://whoisology.com)** | Reverse WHOIS — find domains by registrant | [whoisology.com](https://whoisology.com) |
+| **[Whoxy](https://www.whoxy.com)** | WHOIS lookup with reverse-WHOIS, history, and bulk API | [whoxy.com](https://www.whoxy.com) |
+| **[Wikidata](https://www.wikidata.org)** | Wikipedia's structured-data backbone — query via SPARQL | [wikidata.org](https://www.wikidata.org) |
+| **[Wikipedia](https://en.wikipedia.org)** | Free encyclopedia — start of every people/place investigation | [en.wikipedia.org](https://en.wikipedia.org) |
+| **[WorldLicensePlates](http://www.worldlicenseplates.com)** | Graphic index of license plates by country | [worldlicenseplates.com](http://www.worldlicenseplates.com) |
+| **XeuleDoc** | Fetch info on Google Docs/Sheets/Slides/Drawings without auth | `pip3 install xeuledoc` |
+| **[Yandex](https://www.yandex.com)** | Russian search engine — strong reverse-image and Cyrillic support | [yandex.com](https://www.yandex.com) |
+| **[YARAify](https://yaraify.abuse.ch/scan/)** | Collaborative YARA engine for open threat intel via file pattern matching | [yaraify.abuse.ch](https://yaraify.abuse.ch/scan/) |
+| **[Yumpu](https://www.yumpu.com)** | Document publishing — sometimes leaks via search | [yumpu.com](https://www.yumpu.com) |
+| **[ZeroBounce](https://www.zerobounce.net)** | Email validation and deliverability service | [zerobounce.net](https://www.zerobounce.net) |
+| **ZoomEye CLI** | Command-line interface for ZoomEye internet asset search | `pip3 install zoomeye` |
+
+---
+
+## 50. 🇬🇪 Georgian OSINT Arsenal (500+ resources)
+
+> 🇬🇪 The most comprehensive OSINT resource collection for the country of Georgia (Sakartvelo).
+>
+> **28 sub-sections · 500+ verified resources** — government databases, public registries, investigative tools, open-data portals, Telegram bots & more.
+>
+> **Pro tip:** Pair this with my [Georgian-Wordlist](https://github.com/rawfilejson/Georgian-Wordlist) (760K Georgian words for security research) and [Wordlist-Generator](https://github.com/rawfilejson/Wordlist-Generator).
+
+> [!WARNING]
+> **Educational and lawful investigative use only.** Respect Georgia's *Law on Personal Data Protection* and the GDPR. Authors are not responsible for any misuse.
+
+
+📋 Click to expand the full Georgian OSINT Arsenal (28 sub-sections)
+
+### 50.1 Government Registries & E-Government Portals
+
+The Georgian government has one of the most digitized public service systems in the post-Soviet space. Most services are accessible through centralized portals.
+### Core Government Portals
+
+| Resource | URL | Description |
+|---|---|---|
+| my.gov.ge | [https://my.gov.ge](https://my.gov.ge) | Unified e-government portal -- birth/death certificates, property search, business registry, correspondence with agencies |
+| Government of Georgia | [https://gov.ge](https://gov.ge) | Official government website with news, ministries, and policy documents |
+| Parliament of Georgia | [https://parliament.ge](https://parliament.ge) | Parliamentary records, laws, MP profiles, committee meetings, voting records |
+| President of Georgia | [https://president.gov.ge](https://president.gov.ge) | Presidential decrees, pardons, appointments, official statements |
+| Ministry of Justice | [https://justice.gov.ge](https://justice.gov.ge) | Justice system information, legal aid, notary services |
+| Ministry of Internal Affairs (MIA) | [https://police.ge](https://police.ge) | Police reports, wanted persons, crime statistics, press releases |
+| Ministry of Finance | [https://mof.gov.ge](https://mof.gov.ge) | State budget, fiscal data, financial reports |
+| Ministry of Foreign Affairs | [https://mfa.gov.ge](https://mfa.gov.ge) | Diplomatic information, consular services, international agreements |
+| Ministry of Economy | [https://economy.ge](https://economy.ge) | Economic policy, trade data, investment climate |
+| Ministry of Regional Development | [https://mrdi.gov.ge](https://mrdi.gov.ge) | Infrastructure projects, regional development data |
+
+### Public Registries & Databases
+
+| Resource | URL | Description |
+|---|---|---|
+| National Agency of Public Registry (NAPR) | [https://napr.gov.ge](https://napr.gov.ge) | Central hub for property, business, and civil registry -- 331 services |
+| Entrepreneur Registry | [https://enreg.reestri.gov.ge](https://enreg.reestri.gov.ge) | Search any business entity -- name, ID, registration date, founders, directors |
+| Property Registry | [https://napr.gov.ge/en/service/registers](https://napr.gov.ge/en/service/registers) | Search immovable property records by cadastral code or owner |
+| Civil Registry | [https://napr.gov.ge](https://napr.gov.ge) | Birth, marriage, death, divorce records (restricted access) |
+| Revenue Service (RS) | [https://rs.ge](https://rs.ge) | Tax identification lookup, customs data, VAT portal, business tax status |
+| RS Taxpayer Search | [https://rs.ge/TaxPayer-en](https://rs.ge/TaxPayer-en) | Search taxpayers by name or identification number |
+| RS E-Services | [https://rs.ge/Eservices-en](https://rs.ge/Eservices-en) | Auto/Moto levy calculator, customs duties calculator, property tax calculator |
+| Legislative Herald (Matsne) | [https://matsne.gov.ge](https://matsne.gov.ge) | All Georgian legislation -- laws, decrees, regulations, international treaties (full text) |
+| National Archives | [https://archive.gov.ge](https://archive.gov.ge) | Historical documents, electronic catalogues, digitized archives |
+| Service Development Agency (SDA) | [https://sda.gov.ge](https://sda.gov.ge) | ID cards, passports, residence permits, citizenship, personal data services |
+| Civil Service Bureau | [https://csb.gov.ge](https://csb.gov.ge) | Public servant registry, HR policy, ethics, training programs |
+| State Inspector | [https://dis.gov.ge](https://dis.gov.ge) | Personal data protection authority, surveillance oversight |
+| NSDI Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | National Spatial Data Infrastructure -- land parcels, addresses, cadastral maps |
+| Data Exchange Agency (DEA) | [https://dea.gov.ge](https://dea.gov.ge) | Government interoperability platform, electronic document exchange |
+| National Food Agency | [https://nfa.gov.ge](https://nfa.gov.ge) | Food safety registry, licensed food businesses, inspection results |
+| National Environmental Agency | [https://nea.gov.ge](https://nea.gov.ge) | Environmental monitoring data, weather, seismic data |
+| Competition Agency | [https://competition.ge](https://competition.ge) | Market concentration, merger decisions, anti-trust investigations |
+| Insurance State Supervision | [https://insurance.gov.ge](https://insurance.gov.ge) | Licensed insurance companies, regulatory data |
+| National Wine Agency | [https://wine.gov.ge](https://wine.gov.ge) | Georgian wine registry, appellation data, export statistics |
+
+### Key my.gov.ge Services for OSINT
+
+| Service | What You Can Find |
+|---|---|
+| Property Registry Search | Real estate ownership by cadastral code |
+| Entrepreneur/Legal Entity Search | Business registration status, founders, directors |
+| Birth/Death Certificates | (Restricted) Vital records verification |
+| Correspondence with Agencies | Submit information requests to any government body |
+| Tax Debt Information | Check individual tax debts (limited) |
+| Enforcement Cases | Check for enforcement proceedings against individuals |
+| Notary Registry | Registered notaries and their activities |
+
+---
+### 50.2 Person Search & Identity OSINT
+
+### Phone Number & Identity Lookup
+
+| Resource | URL | Description | Free/Paid |
+|---|---|---|---|
+| GetContact | [https://getcontact.com](https://getcontact.com) | Crowd-sourced caller ID -- see how a number is saved in others' phones | Freemium |
+| TrueCaller | [https://truecaller.com](https://truecaller.com) | Caller ID and spam detection -- Georgian numbers work well | Freemium |
+| Sync.me | [https://sync.me](https://sync.me) | Reverse phone lookup with social profile matching | Free |
+| NumBuster | [https://numbuster.com](https://numbuster.com) | Phone number lookup popular in CIS countries | Free |
+| Pipl | [https://pipl.com](https://pipl.com) | Deep people search engine, works with Georgian data | Paid |
+| Nomrebi (Phone Book) | [https://phonebookoftheworld.com/tbilisi/](https://phonebookoftheworld.com/tbilisi/) | Tbilisi White Pages / Yellow Pages | Free |
+| 114 Directory | Dial 114 from Georgian number | Georgian telephone directory assistance | Free |
+| Eye of God (Глаз Бога) | Telegram: @EyeOfGodBot | CIS-focused person search by phone, name, car plate | Paid |
+| Quick OSINT | Telegram: @QuickOSINT_bot | Person search across CIS databases | Paid |
+| USSearcher | Telegram: @USSearcher_bot | Multi-database person lookup | Paid |
+
+### Email & Username OSINT
+
+| Tool | URL | Description |
+|---|---|---|
+| Hunter.io | [https://hunter.io](https://hunter.io) | Find email addresses associated with Georgian domains |
+| EmailRep | [https://emailrep.io](https://emailrep.io) | Email reputation and breach exposure check |
+| Have I Been Pwned | [https://haveibeenpwned.com](https://haveibeenpwned.com) | Check if Georgian email addresses appear in data breaches |
+| Epieos | [https://epieos.com](https://epieos.com) | Email OSINT -- Google ID, linked accounts, profile pictures |
+| Holehe | [https://github.com/megadose/holehe](https://github.com/megadose/holehe) | Check which platforms an email is registered on |
+| Sherlock | [https://github.com/sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) | Username search across 400+ social platforms |
+| Maigret | [https://github.com/soxoj/maigret](https://github.com/soxoj/maigret) | Advanced username search across 2500+ sites |
+| WhatsMyName | [https://whatsmyname.app](https://whatsmyname.app) | Username enumeration on hundreds of sites |
+
+### Georgian-Specific Person Search
+
+| Method | Details |
+|---|---|
+| Facebook (Georgian users) | ~2.5M Georgian users. Search by name in Georgian script. Many profiles have phone numbers visible |
+| VK.com | Popular among Russian-speaking Georgians and occupied territories |
+| OK.ru (Odnoklassniki) | Popular among older Georgian demographic |
+| Instagram | Very popular in Georgia, especially ages 18-35 |
+| LinkedIn | Professional profiles, especially for business investigations |
+| Google Search | `"name surname" site:facebook.com/` or `"name" "+995"` |
+
+---
+### 50.3 Company & Business Intelligence
+
+### Primary Business Registries
+
+| Resource | URL | Description |
+|---|---|---|
+| Entrepreneur Registry (NAPR) | [https://enreg.reestri.gov.ge](https://enreg.reestri.gov.ge) | Official business entity search -- name, ID number, legal form, status, founders, directors, address |
+| RS Taxpayer Portal | [https://rs.ge/TaxPayer-en](https://rs.ge/TaxPayer-en) | Tax identification lookup, business activity status |
+| OpenCorporates (Georgia) | [https://opencorporates.com/companies/ge](https://opencorporates.com/companies/ge) | International business search with Georgian companies |
+| OpenSanctions (Georgian Registry) | [https://opensanctions.org/datasets/ext_ge_company_registry/](https://opensanctions.org/datasets/ext_ge_company_registry/) | Georgian company data in structured format |
+
+### Financial & Investment Data
+
+| Resource | URL | Description |
+|---|---|---|
+| National Bank of Georgia (NBG) | [https://nbg.gov.ge](https://nbg.gov.ge) | Banking supervision, exchange rates, financial statistics, AML sanctions |
+| NBG AML/CFT Sanctions | [https://nbg.gov.ge/en/supervision/aml-cft](https://nbg.gov.ge/en/supervision/aml-cft) | Fines and sanctions on financial institutions for AML failures |
+| Financial Monitoring Service (FMS) | [https://fms.gov.ge](https://fms.gov.ge) | Georgia's financial intelligence unit -- suspicious transaction reports |
+| Georgian Stock Exchange | [https://gse.ge](https://gse.ge) | Listed companies, stock data, financial disclosures |
+| GITA (Innovation & Tech Agency) | [https://gita.gov.ge](https://gita.gov.ge) | Tech company grants, startup ecosystem data |
+
+### Company Due Diligence
+
+| Data Point | How to Find |
+|---|---|
+| Company Name & ID | enreg.reestri.gov.ge -- search by name or 9/11-digit ID |
+| Directors & Founders | NAPR extract -- shows current and historical directors |
+| Tax Status | rs.ge -- check if company is active taxpayer |
+| Property Owned | NAPR property registry -- search by company name |
+| Procurement Contracts | tenders.procurement.gov.ge -- search by supplier name |
+| Court Cases | ecd.court.ge -- search by company name or ID |
+| Sanctions | opensanctions.org -- cross-reference with international sanctions |
+| International Connections | OpenCorporates -- linked entities across jurisdictions |
+
+---
+### 50.4 Legal & Court Records
+
+### Court Databases
+
+| Resource | URL | Description |
+|---|---|---|
+| Unified Court Decisions Database | [https://ecd.court.ge](https://ecd.court.ge) | Search court decisions from all three instances (note: decisions after April 2020 may not be published) |
+| Court Decisions Search | [https://ecd.court.ge/Decision](https://ecd.court.ge/Decision) | Search by case number, date, court name, category |
+| Court Acts / Final Documents | [https://ecd.court.ge/FinalDocument](https://ecd.court.ge/FinalDocument) | Search by document barcode or case number |
+| Public Notifications | [https://ecd.court.ge/PublicNotification](https://ecd.court.ge/PublicNotification) | Court public notifications -- useful for finding parties |
+| Current Cases & Hearings | [https://ecd.court.ge/CurrentCase](https://ecd.court.ge/CurrentCase) | Ongoing cases with hearing dates and judges |
+| E-Court Portal | [https://ecourt.ge](https://ecourt.ge) | Electronic court filing system (requires registration) |
+| Supreme Court of Georgia | [https://supremecourt.ge](https://supremecourt.ge) | Supreme Court decisions, practice, and cassation rulings |
+| Constitutional Court | [https://constcourt.ge](https://constcourt.ge) | Constitutional Court decisions and petitions |
+| CourtWatch.ge | [https://courtwatch.ge](https://courtwatch.ge) | Independent court monitoring and judicial analysis |
+
+### Key Legal Resources
+
+| Resource | URL | Description |
+|---|---|---|
+| Matsne (Legislative Herald) | [https://matsne.gov.ge](https://matsne.gov.ge) | All Georgian laws in full text -- searchable database |
+| Criminal Code of Georgia | [https://matsne.gov.ge/en/document/view/16426](https://matsne.gov.ge/en/document/view/16426) | Full text of criminal code |
+| Civil Code of Georgia | [https://matsne.gov.ge/en/document/view/31702](https://matsne.gov.ge/en/document/view/31702) | Full text of civil code |
+| Georgian Bar Association | [https://gba.ge](https://gba.ge) | Lawyer directory, disciplinary proceedings |
+| GYLA (Georgian Young Lawyers) | [https://gyla.ge](https://gyla.ge) | Legal analysis, human rights reports, election monitoring |
+| Prosecutor's Office | [https://pog.gov.ge](https://pog.gov.ge) | Prosecution data, high-profile cases, statistics |
+| Probation Bureau | [https://probation.moj.gov.ge](https://probation.moj.gov.ge) | Probation data and offender supervision |
+| Ombudsman (Public Defender) | [https://ombudsman.ge](https://ombudsman.ge) | Human rights reports, complaints, recommendations |
+
+### Searching Court Records -- Tips
+
+```
+1. Go to ecd.court.ge/Decision
+2. Select court instance (First Instance / Appeals / Cassation)
+3. Select court name (e.g., Tbilisi City Court)
+4. Select case category (Civil / Criminal / Administrative)
+### 50.5 Enter case number or date range
+
+### 50.6 Note: Personal data is anonymized in published decisions
+
+### 50.7 For cases after April 2020 -- many are NOT published online
+
+```
+5. Real Estate & Property OSINT
+### Property Registries
+
+| Resource | URL | Description |
+|---|---|---|
+| NAPR Property Registry | [https://napr.gov.ge](https://napr.gov.ge) | Official immovable property registry -- ownership, mortgages, encumbrances |
+| NAPR Extract Service | [https://napr.gov.ge/en/service/information-services/extract-public-register](https://napr.gov.ge/en/service/information-services/extract-public-register) | Order official property extracts (fee-based) |
+| NSDI Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | Interactive map with cadastral boundaries, land parcels, addresses |
+| my.gov.ge Property Search | [https://my.gov.ge](https://my.gov.ge) | Search property registry applications |
+
+### Real Estate Portals (OSINT Gold Mines)
+
+| Portal | URL | Description |
+|---|---|---|
+| SS.GE (Home) | [https://home.ss.ge](https://home.ss.ge) | Georgia's largest classifieds -- apartments, houses, commercial (with photos, prices, owner contacts) |
+| MyHome.ge | [https://myhome.ge](https://myhome.ge) | Major real estate portal with detailed listings and agent contacts |
+| Livo.ge | [https://livo.ge](https://livo.ge) | Real estate with 3D tours, auctions, property evaluation tools |
+| Home.ge | [https://home.ge](https://home.ge) | Real estate portal with buying/selling/renting listings |
+| Korter.ge | [https://korter.ge](https://korter.ge) | New construction and apartment search platform |
+| TbilisiHome.ge | [https://tbilisihome.ge](https://tbilisihome.ge) | Tbilisi-focused real estate listings |
+| HomeSearch.ge | [https://homesearch.ge](https://homesearch.ge) | Multi-language property search platform |
+| Gavel.ge | [https://gavel.ge](https://gavel.ge) | Aggregates real estate auctions from Livo, eAuction.ge, Tbilisi Municipality |
+
+### Property OSINT Workflow
+
+```
+1. Get person's name or company ID
+2. Search NAPR (napr.gov.ge) for registered properties
+3. Cross-reference with ss.ge/myhome.ge for listings (may show photos, addresses)
+4. Check nsdi.gov.ge for cadastral boundaries and neighbors
+5. Search eauction.ge for any auctioned/seized properties
+6. Check ecd.court.ge for property-related litigation
+```
+6. Vehicle & Transport OSINT
+### Vehicle Databases
+
+| Resource | URL | Description |
+|---|---|---|
+| RS Auto/Moto Levy Calculator | [https://rs.ge/Eservices-en](https://rs.ge/Eservices-en) | Calculate vehicle taxes by details |
+| MyAuto.ge | [https://myauto.ge](https://myauto.ge) | Georgia's largest vehicle marketplace -- VIN check, Carfax reports, listing history |
+| MyAuto VIN Check | [https://myauto.ge/en/vin](https://myauto.ge/en/vin) | Check vehicle history by VIN code (Carfax & ClearVin) |
+| AutoPapa.ge | [https://autopapa.ge](https://autopapa.ge) | US auto auction imports -- vehicle history, photos, damage reports |
+| Myparts.ge | [https://myparts.ge](https://myparts.ge) | Auto parts marketplace -- useful for identifying vehicles |
+| SS.GE (Auto) | [https://auto.ss.ge](https://auto.ss.ge) | Vehicle classifieds with detailed specs and owner contacts |
+| EverCar.ge | [https://evercar.ge](https://evercar.ge) | Vehicle marketplace with import history |
+
+### Transport Authority Data
+
+| Resource | URL | Description |
+|---|---|---|
+| Service Development Agency (SDA) | [https://sda.gov.ge](https://sda.gov.ge) | Vehicle registration, driving licenses, technical inspection data |
+| Tbilisi City Hall Transport | [https://tbilisi.gov.ge](https://tbilisi.gov.ge) | City transport data, parking, traffic |
+| Georgian Railway | [https://railway.ge](https://railway.ge) | Rail transport data, schedules |
+
+
+| Georgian Airports | https://tbilisiairport.com | Flight data, passenger statistics |
+|---|---|---|
+| MIA Traffic Police | [https://patrol.gov.ge](https://patrol.gov.ge) | Traffic violation data, accident reports |
+
+### Georgian License Plate Format
+
+```
+### Georgian plates follow these formats:
+
+- Standard: AA-123-AA (two letters, three numbers, two letters)
+- Government: GOV followed by numbers
+- Diplomatic: D followed by numbers
+- Military: GEO followed by numbers
+- Regional codes vary by area
+
+### Note: Georgian plates use Latin letters
+
+```
+7. Financial Intelligence & Banking
+### National Bank & Financial Regulators
+
+| Resource | URL | Description |
+|---|---|---|
+| National Bank of Georgia (NBG) | [https://nbg.gov.ge](https://nbg.gov.ge) | Central bank -- exchange rates, banking statistics, supervisory data |
+| NBG Exchange Rates | [https://nbg.gov.ge/en/monetary-policy/currency](https://nbg.gov.ge/en/monetary-policy/currency) | Official GEL exchange rates (historical data available) |
+| NBG Banking Supervision | [https://nbg.gov.ge/en/supervision](https://nbg.gov.ge/en/supervision) | Bank financial data, supervisory actions, licensed entities |
+| NBG AML Sanctions | [https://nbg.gov.ge/en/supervision/aml-cft](https://nbg.gov.ge/en/supervision/aml-cft) | Fines on banks/entities for AML violations (names, amounts, reasons) |
+| Financial Monitoring Service | [https://fms.gov.ge](https://fms.gov.ge) | Georgia's FIU -- anti-money laundering intelligence |
+| Competition & Consumer Protection | [https://competition.ge](https://competition.ge) | Market concentration, mergers, consumer complaints |
+
+### Banks & Financial Institutions
+
+| Institution | URL | Description |
+|---|---|---|
+| Bank of Georgia | [https://bankofgeorgia.ge](https://bankofgeorgia.ge) | Largest bank -- financial reports, shareholder data |
+| TBC Bank | [https://tbcbank.ge](https://tbcbank.ge) | Second largest bank -- public financial disclosures |
+| Liberty Bank | [https://libertybank.ge](https://libertybank.ge) | Retail-focused bank |
+| Basis Bank | [https://basisbank.ge](https://basisbank.ge) | Investment bank |
+| Credo Bank | [https://credobank.ge](https://credobank.ge) | Regional bank |
+| ProCredit Bank | [https://procreditbank.ge](https://procreditbank.ge) | SME-focused bank |
+| Finca Bank | [https://finca.ge](https://finca.ge) | Microfinance bank |
+| Crystal | [https://crystal.ge](https://crystal.ge) | Microfinance organization |
+
+### Financial OSINT Searches
+
+| Query | What You Find |
+|---|---|
+| Company name + rs.ge | Tax status, registration, debts |
+| Person name + nbg.gov.ge | If they appear in AML sanctions |
+| Company + opensanctions.org | International sanctions cross-reference |
+| Company + offshore leaks | ICIJ Offshore Leaks Database -- Georgian entities |
+| Company + tenders.procurement.gov.ge | Government contracts won |
+
+---
+### 50.8 Election & Political Data
+
+### Central Election Commission (CEC)
+
+| Resource | URL | Description |
+|---|---|---|
+| CEC of Georgia (CESKO) | [https://cesko.ge](https://cesko.ge) | Official election authority -- voter data, results, regulations |
+| CEC Election Results | [https://cesko.ge](https://cesko.ge) (results section) | Detailed results by precinct, district, party -- all elections since 2008 |
+| CEC Voter Information | [https://cesko.ge/en/amomrchevlebi](https://cesko.ge/en/amomrchevlebi) | Voter registration verification portal |
+| CEC Annual Reports | [https://cesko.ge](https://cesko.ge) (publications) | Annual reports with detailed election statistics |
+
+### Political Data Sources
+
+| Resource | URL | Description |
+|---|---|---|
+| Parliament of Georgia | [https://parliament.ge](https://parliament.ge) | MP profiles, voting records, committee membership, bill tracking |
+| Political Party Registry | [https://cesko.ge](https://cesko.ge) (parties section) | Registered political parties, financial disclosures, leadership |
+| ISFED (Election Monitoring) | [https://isfed.ge](https://isfed.ge) | Independent election observation reports, violations database |
+| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Political finance monitoring, corruption investigations |
+| Civil Georgia | [https://civil.ge](https://civil.ge) | Independent news with detailed political analysis |
+| CRRC Georgia | [https://crrc.ge](https://crrc.ge) | Caucasus Research Resource Center -- public opinion surveys, political polling |
+| IPU Georgia | [https://data.ipu.org/parliament/GE](https://data.ipu.org/parliament/GE) | Inter-Parliamentary Union -- Georgian parliament data |
+| NDI Georgia | [https://ndi.org/georgia](https://ndi.org/georgia) | National Democratic Institute -- political program data |
+
+2024 Georgian Parliamentary Election Data
+| Data Point | Source |
+|---|---|
+| Official Results | cesko.ge -- full precinct-level data |
+| Analysis & Claims | civil.ge/archives/631386 |
+| ISFED Reports | isfed.ge -- real-time parallel vote tabulation |
+| International Observers | OSCE/ODIHR reports |
+| Wikipedia Overview | en.wikipedia.org/wiki/2024_Georgian_parliamentary_election |
+
+---
+### 50.9 Maps & Geospatial Intelligence
+
+### Georgian Mapping Services
+
+| Resource | URL | Description |
+|---|---|---|
+| NSDI Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | National Spatial Data Infrastructure -- cadastral maps, land parcels, addresses |
+| Google Maps (Georgia) | [https://maps.google.com](https://maps.google.com) | Street View coverage in Georgia, satellite imagery, business listings |
+| Yandex Maps (Georgia) | [https://yandex.com/maps/?ll=44.78,41.69](https://yandex.com/maps/?ll=44.78,41.69) | Alternative mapping with different satellite imagery and Russian-language data |
+| OpenStreetMap Georgia | [https://www.openstreetmap.org/#map=8/42.0/43.5](https://www.openstreetmap.org/#map=8/42.0/43.5) | Community-maintained map with detailed Georgian mapping |
+| Wikimapia | [https://wikimapia.org/#lang=en&lat=41.7&lon=44.8](https://wikimapia.org/#lang=en&lat=41.7&lon=44.8) | User-annotated satellite imagery -- useful for identifying unmarked buildings |
+| Sentinel Hub (Copernicus) | [https://scihub.copernicus.eu](https://scihub.copernicus.eu) | Free satellite imagery for Georgia (EU Copernicus program) |
+| Google Earth | [https://earth.google.com](https://earth.google.com) | Historical satellite imagery for Georgia dating back to early 2000s |
+| Mapillary | [https://www.mapillary.com](https://www.mapillary.com) | Street-level imagery crowdsourced -- some Georgian coverage |
+
+### GIS Data Sources
+
+| Resource | URL | Description |
+|---|---|---|
+| NAPR GIS | [https://nsdi.gov.ge](https://nsdi.gov.ge) | Cadastral data, administrative boundaries, address registry |
+| NEA (Environmental Agency) | [https://nea.gov.ge](https://nea.gov.ge) | Environmental monitoring stations, seismic data, weather stations |
+| Geostat GIS Data | [https://geostat.ge](https://geostat.ge) | Census maps, demographic distribution by region |
+| Tbilisi Municipality GIS | [https://tbilisi.gov.ge](https://tbilisi.gov.ge) | City planning, zoning, infrastructure maps |
+
+### Geolocation Tips for Georgia
+
+```
+### Key visual identifiers for geolocating imagery in Georgia:
+
+- Georgian script (mkhedruli) on signs -- unique alphabet
+- Mountain terrain (Caucasus) with distinctive tower-houses in Svaneti/Tusheti
+- Soviet-era apartment blocks (khrushchyovka) in cities
+- Distinctive church architecture (Georgian Orthodox cross-dome style)
+- License plates: AA-123-AA format
+- Phone prefix: +995
+- Currency: GEL (Georgian Lari) -- prices on signs
+- Bilingual signs (Georgian + English) in Tbilisi
+- Unique tower-houses in mountainous regions (Svaneti, Tusheti, Khevsureti)
+```
+### 50.10 Media Landscape & News OSINT
+
+### Major Georgian News Sources
+
+| Source | URL | Language | Orientation |
+|---|---|---|---|
+| Civil Georgia | [https://civil.ge](https://civil.ge) | EN/GE | Independent, pro-Western |
+| Interpressnews | [https://interpressnews.ge](https://interpressnews.ge) | GE/EN | News agency |
+| Agenda.ge | [https://agenda.ge](https://agenda.ge) | EN | State-adjacent (government-funded) |
+| Georgia Today | [https://georgiatoday.ge](https://georgiatoday.ge) | EN | Independent English-language |
+| OC Media | [https://oc-media.org](https://oc-media.org) | EN | Independent Caucasus-wide |
+| JAM News | [https://jam-news.net](https://jam-news.net) | EN/GE/RU/AZ/AM | Regional news agency |
+| Netgazeti | [https://netgazeti.ge](https://netgazeti.ge) | GE | Independent digital |
+| Publika | [https://publika.ge](https://publika.ge) | GE | Independent |
+| Tabula | [https://tabula.ge](https://tabula.ge) | GE | Liberal |
+| Liberali | [https://liberali.ge](https://liberali.ge) | GE | Liberal |
+| BMG (Business Media Georgia) | [https://bm.ge](https://bm.ge) | GE/EN | Business news |
+| Forbes Georgia | [https://forbes.ge](https://forbes.ge) | GE/EN | Business |
+| Commersant.ge | [https://commersant.ge](https://commersant.ge) | GE | Business |
+
+### Television & Radio
+
+| Channel | URL | Notes |
+|---|---|---|
+| Georgian Public Broadcaster (GPB) | [https://1tv.ge](https://1tv.ge) | State public broadcaster |
+| Rustavi 2 | [https://rustavi2.ge](https://rustavi2.ge) | Pro-government (ownership changed) |
+| Imedi TV | [https://imedinews.ge](https://imedinews.ge) | Pro-government |
+| Mtavari Arkhi | [https://mtavari.tv](https://mtavari.tv) | Opposition-leaning |
+| TV Pirveli | [https://tvpirveli.ge](https://tvpirveli.ge) | Independent |
+| Formula TV | [https://formulanews.ge](https://formulanews.ge) | Independent |
+| Kavkasia TV | [https://kavkasia.ge](https://kavkasia.ge) | Independent |
+| Radio Tavisupleba (RFE/RL) | [https://radiotavisupleba.ge](https://radiotavisupleba.ge) | Georgian service of Radio Free Europe |
+| Voice of America Georgian | [https://amerikiskhma.com](https://amerikiskhma.com) | VOA Georgian service |
+
+### Investigative Journalism
+
+| Organization | URL | Description |
+|---|---|---|
+| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Anti-corruption investigations, asset monitoring, political finance |
+| IDFI | [https://idfi.ge](https://idfi.ge) | Information freedom, public data access, FOI requests |
+| Studio Monitor | [https://studiomonitori.ge](https://studiomonitori.ge) | Investigative journalism |
+| Batumelebi | [https://batumelebi.netgazeti.ge](https://batumelebi.netgazeti.ge) | Ajara-focused investigations |
+| CATAGI | [https://catagi.ge](https://catagi.ge) | Analytical research, power structure investigations |
+| Who Owned Georgia (TI) | [https://transparency.ge](https://transparency.ge) | Research on business/media ownership |
+
+---
+### 50.11 Data Leaks & Breaches
+
+### Major Georgian Data Breaches
+
+| Incident | Year | Records | Details | Sources |
+|---|---|---|---|---|
+| 4.9 Million Citizens Leak | 2020 | 4,934,863 | Full names, DOB, gender, ID numbers, phone numbers -- posted on a hacking forum in a 1.04GB Microsoft Access file | ZDNet |
+| Ghost Database (Cybernews) | 2025 | ~7 million | Personal records appeared on German cloud provider -- unsecured, then vanished. Full names, DOB, gender, ID numbers, phone numbers | Cybernews |
+| CEC Voter Database | 2020 | ~3.5 million | Voter registration data linked to the 2020 leak | OC Media |
+
+### Breach Search Tools (Check Georgian Data)
+
+| Tool | URL | Description | Free/Paid |
+|---|---|---|---|
+| Have I Been Pwned | [https://haveibeenpwned.com](https://haveibeenpwned.com) | Check email exposure in known breaches | Free |
+| LeakCheck | [https://leakcheck.io](https://leakcheck.io) | Search by email, phone, username -- CIS data included | Freemium |
+| DeHashed | [https://dehashed.com](https://dehashed.com) | Search breached databases by name, email, phone, IP | Paid |
+| IntelX | [https://intelx.io](https://intelx.io) | Intelligence search engine -- pastes, leaks, darknet | Freemium |
+| Snusbase | [https://snusbase.com](https://snusbase.com) | Breach database search | Paid |
+| BreachDirectory | [https://breachdirectory.org](https://breachdirectory.org) | Partial password hash lookup | Free |
+| Hudson Rock Cavalier | [https://cavalier.hudsonrock.com](https://cavalier.hudsonrock.com) | Infostealer data -- compromised credentials | Free tier |
+| CheckLeaked | [https://checkleaked.cc](https://checkleaked.cc) | Breach data search including WhatsApp leaks | Paid |
+| Leak-Lookup | [https://leak-lookup.com](https://leak-lookup.com) | Multi-database breach search | Paid |
+| h8mail | [https://github.com/khast3x/h8mail](https://github.com/khast3x/h8mail) | Email breach hunting command-line tool | Free (OSS) |
+
+### Important Context
+
+```
+The 2020 Georgian data leak is one of the largest per-capita data breaches ever:
+- 4.9 million records from a country of ~3.7 million living citizens
+- Includes deceased citizens' records
+- Originally suspected to be a CEC voter database leak
+- Data was published on a hacking forum over a weekend
+- Georgian authorities investigated but never publicly identified the source
+- The 2025 "ghost database" on a German cloud provider may be related
+
+### Impact: Georgian personal data (name, DOB, ID number, phone)
+
+circulates on multiple forums and breach databases.
+```
+### 50.12 Phone & Telecom OSINT
+
+### Georgian Mobile Operators
+
+| Operator | URL | Market Share | Network |
+|---|---|---|---|
+| MagtiCom | [https://magticom.ge](https://magticom.ge) | ~40% | 2G/3G/4G/5G -- best coverage |
+| Silknet (formerly Geocell) | [https://silknet.com](https://silknet.com) | ~35% | 2G/3G/4G/5G |
+| Cellfie (formerly Beeline) | [https://cellfie.ge](https://cellfie.ge) | ~25% | 2G/3G/4G/5G |
+
+### Georgian Phone Number Format
+
+```
+### Country code: +995
+
+### Format: +995 XXX XXX XXX (9 digits after country code)
+
+
+### Mobile prefixes:
+
+- 5XX: Mobile numbers (all operators)
+ - 555, 557, 558: MagtiCom
+ - 551, 571, 574, 577, 578: Silknet
+ - 568, 591, 592, 593, 595, 596, 597, 598, 599: Various
+
+### Landline prefixes:
+
+- 32: Tbilisi
+- 422: Batumi (Ajara)
+- 431: Kutaisi (Imereti)
+- 352: Rustavi
+- 370: Gori
+- 495: Zugdidi (Samegrelo)
+
+### Emergency: 112 (universal)
+
+### Directory: 114
+
+```
+### Phone OSINT Techniques for Georgian Numbers
+
+| Technique | Tool/Method | Description |
+|---|---|---|
+| Caller ID Lookup | GetContact / TrueCaller | See how the number is saved in other people's phones |
+| WhatsApp Check | WhatsApp app | Check if number has WhatsApp -- profile photo, status, last seen |
+| Telegram Check | Telegram app | Search by phone number -- username, profile photo, bio |
+| Viber Check | Viber app | Very popular in Georgia -- check profile info |
+| Google Search | `"+995XXXXXXXXX"` | Find where the number appears online (ads, forums, social media) |
+| Facebook Reverse | FB search by phone | Find Facebook account linked to phone number |
+| HIBP / LeakCheck | haveibeenpwned.com / leakcheck.io | Check if phone number appears in breach databases |
+
+---
+### 50.13 Social Media & Platform OSINT
+
+### Georgian Social Media Landscape
+
+| Platform | Georgian Users (est.) | OSINT Value | Notes |
+|---|---|---|---|
+| Facebook | ~2.5 million | Very High | THE dominant social platform in Georgia. Many profiles are public with phone numbers visible |
+| Instagram | ~1.5 million | High | Popular for ages 18-35, especially in Tbilisi |
+| TikTok | ~1 million | Medium | Growing rapidly, especially youth |
+| YouTube | ~2 million | High | Georgian content creators, news channels, investigations |
+| Telegram | ~1.5 million | Very High | News channels, political groups, leak channels, bots |
+| Twitter/X | ~200K | Medium | Used by journalists, politicians, NGOs |
+| LinkedIn | ~300K | Medium | Professional profiles, business intelligence |
+| VK.com | ~150K | Medium | Russian-speaking Georgians, Abkhazia/South Ossetia |
+| OK.ru | ~100K | Low | Older demographic |
+| Reddit r/Sakartvelo | ~100K | Low | English-speaking Georgian community |
+
+### Georgian Facebook OSINT
+
+```
+Facebook is the #1 OSINT source for Georgian individuals:
+
+### Search techniques:
+
+1. Search by name in Georgian script: "გიორგი" "ბერიძე"
+2. Search by phone: Enter +995XXXXXXXXX in Facebook search
+3. Search by workplace: "Bank of Georgia" employees
+4. Search by school: "Tbilisi State University" graduates
+5. Search by location: People in "Tbilisi"
+6. Use Facebook Graph Search remnants via Google:
+ site:facebook.com "name" "lives in Tbilisi"
+7. Check "People You May Know" from a Georgian account
+8. Many Georgian users have public profiles with:
+ - Phone numbers in About section
+ - Workplace history
+ - Education history
+ - Family relationships
+ - Check-in locations
+```
+### Platform-Specific Tools
+
+| Tool | URL | Description |
+|---|---|---|
+| Facebook Search | [https://facebook.com/search](https://facebook.com/search) | Native search with filters |
+| Who Posted What | [https://whopostedwhat.com](https://whopostedwhat.com) | Facebook keyword search by date |
+| Social Searcher | [https://social-searcher.com](https://social-searcher.com) | Free social media search engine |
+| SocialBlade | [https://socialblade.com](https://socialblade.com) | Stats for YouTube/Instagram/Twitter accounts |
+| Twint | [https://github.com/twintproject/twint](https://github.com/twintproject/twint) | Twitter scraper (archived) |
+| Instaloader | [https://github.com/instaloader/instaloader](https://github.com/instaloader/instaloader) | Instagram profile and post downloader |
+| TikTok Scraper | [https://github.com/drawrowfly/tiktok-scraper](https://github.com/drawrowfly/tiktok-scraper) | TikTok data extraction |
+
+---
+### 50.14 Open Data & Statistics Portals
+
+### National Statistics
+
+| Resource | URL | Description |
+|---|---|---|
+| GeoStat (National Statistics Office) | [https://geostat.ge](https://geostat.ge) | Official Georgian statistics -- population, economy, trade, crime, health, education |
+| GeoStat Database | [https://geostat.ge/ka/modules/categories/858/monatsemta-baza](https://geostat.ge/ka/modules/categories/858/monatsemta-baza) | Downloadable statistical databases |
+| Census 2024 | [https://census2024.geostat.ge](https://census2024.geostat.ge) | 2024 Population and Agricultural Census data |
+| Census 2014 Results | [https://geostat.ge/en/modules/categories/735/population-census](https://geostat.ge/en/modules/categories/735/population-census) | Previous census results with detailed demographic breakdowns |
+
+### Open Data Portals
+
+| Resource | URL | Description |
+|---|---|---|
+| data.gov.ge | [https://data.gov.ge](https://data.gov.ge) | Georgian open data portal -- government datasets in machine-readable format |
+| OpenData SPA | [https://opendata.spa.ge](https://opendata.spa.ge) | Open procurement data in OCDS format (2011-present) |
+| OGP Georgia | [https://ogpgeorgia.gov.ge](https://ogpgeorgia.gov.ge) | Open Government Partnership -- transparency commitments and progress |
+| IDFI Public Information Database | [https://idfi.ge](https://idfi.ge) | Public information requests and responses database |
+| World Bank Georgia | [https://data.worldbank.org/country/georgia](https://data.worldbank.org/country/georgia) | World Bank development indicators for Georgia |
+| UN Data Georgia | [https://data.un.org](https://data.un.org) | UN statistics on Georgia |
+| OECD Georgia | [https://data.oecd.org](https://data.oecd.org) (search Georgia) | Economic and social indicators |
+| IMF Georgia | [https://imf.org/en/Countries/GEO](https://imf.org/en/Countries/GEO) | IMF economic assessments and data |
+
+### Key Statistical Datasets
+
+| Dataset | URL/Source | Contents |
+|---|---|---|
+| Population by Region | geostat.ge | Population counts by municipality, age, gender |
+| Crime Statistics | geostat.ge | Crimes by type, region, year |
+| Economic Data | geostat.ge | GDP, inflation, trade, employment |
+| Education Statistics | geostat.ge | Schools, students, universities by region |
+| Health Statistics | geostat.ge + ncdc.ge | Disease incidence, mortality, healthcare facilities |
+| Tourism Statistics | gnta.ge | Visitor counts by country, spending data |
+
+---
+### 50.15 Procurement & Government Spending
+
+### Procurement Platforms
+
+| Resource | URL | Description |
+|---|---|---|
+| State Procurement Agency (SPA) | [https://procurement.gov.ge](https://procurement.gov.ge) | Georgia's unified electronic procurement system |
+| Tenders Portal | [https://tenders.procurement.gov.ge](https://tenders.procurement.gov.ge) | Search and browse all government tenders -- live and historical |
+| OpenData SPA (OCDS) | [https://opendata.spa.ge](https://opendata.spa.ge) | All procurement data in Open Contracting Data Standard format since 2011 |
+| OCDS API | [https://odapi.spa.ge](https://odapi.spa.ge) | API access to procurement data |
+| Global Public Procurement (Georgia) | [https://globalpublicprocurementdata.org/gppd/country_profile/GE](https://globalpublicprocurementdata.org/gppd/country_profile/GE) | Georgia's procurement profile in global context |
+
+### What You Can Find
+
+```
+Georgia's procurement system is considered one of the most transparent in Europe/Central Asia:
+
+### Searchable by:
+
+- Contracting organization name
+- Supplier/vendor name
+- Tender number
+- Contract value range
+- Procurement type (electronic tender, simplified, consolidated)
+- Date range
+- CPV code (product/service category)
+
+### Available data:
+
+- Full tender documents
+- Bid submissions and bidder names
+- Contract awards with prices
+- Subcontractor information
+- Procurement plans
+- Complaint/dispute records
+```
+### Budget Transparency
+
+| Resource | URL | Description |
+|---|---|---|
+| Ministry of Finance Budget | [https://mof.gov.ge](https://mof.gov.ge) | State budget documents, execution reports |
+| Budget.ge | [https://budget.ge](https://budget.ge) | Interactive budget visualization tool |
+| BOOST Georgia (World Bank) | [https://boost.worldbank.org](https://boost.worldbank.org) | Detailed budget expenditure data |
+| State Audit Office | [https://sao.ge](https://sao.ge) | Government audit reports, financial compliance |
+
+---
+### 50.16 Domain & IP & Network Intelligence
+
+.GE Domain Intelligence
+| Resource | URL | Description |
+|---|---|---|
+| NIC.GE (Registry) | [https://nic.ge](https://nic.ge) | Georgian domain registry -- .ge TLD management |
+| NIC.GE WHOIS | [https://nic.ge/en/domains/whois](https://nic.ge/en/domains/whois) | Official WHOIS lookup for .ge domains |
+| DomainTools .GE | [https://research.domaintools.com/statistics/tldpedia/ge](https://research.domaintools.com/statistics/tldpedia/ge) | .GE TLD statistics and data |
+| SecurityTrails | [https://securitytrails.com](https://securitytrails.com) | DNS history, subdomains, related domains for .ge sites |
+| crt.sh | [https://crt.sh](https://crt.sh) | Certificate Transparency logs -- find subdomains of .ge sites |
+| DNSDumpster | [https://dnsdumpster.com](https://dnsdumpster.com) | DNS reconnaissance for .ge domains |
+| ViewDNS | [https://viewdns.info](https://viewdns.info) | Reverse IP, WHOIS, DNS records, port scanning |
+| Shodan | [https://shodan.io](https://shodan.io) | Search for internet-connected devices in Georgia |
+
+### Georgian ASN & Network Data
+
+| Resource | URL | Description |
+|---|---|---|
+| BGP.he.net Georgia | [https://bgp.he.net/country/GE](https://bgp.he.net/country/GE) | All Georgian AS Numbers and networks (138 ASNs) |
+| IPinfo.io Georgia | [https://ipinfo.io/countries/ge](https://ipinfo.io/countries/ge) | Georgian IP ranges, ISPs, geolocation data |
+| NirSoft Georgia IPs | [https://nirsoft.net/countryip/ge_total.html](https://nirsoft.net/countryip/ge_total.html) | Complete list of IP blocks allocated to Georgia |
+| IPIP.NET Georgia | [https://whois.ipip.net/iso/GE](https://whois.ipip.net/iso/GE) | Georgian ASN directory |
+
+### Major Georgian ISP ASNs
+
+| ISP | ASN | Description |
+|---|---|---|
+| MagtiCom | AS16010, AS28751 | Largest mobile/ISP |
+| Silknet | AS35805 | Second largest, DSL/fiber/mobile |
+| Caucasus Online | AS20771 | Major fiber backbone |
+| GRENA | AS20545 | Georgian Research and Education Network |
+| SIACOM | AS198150 | Business ISP |
+| Delta Net | AS56844 | Regional ISP |
+| Akhali Kselebi | AS44569 | Regional ISP |
+| Caucasus Digital Network | AS57516 | CDN/hosting provider |
+
+### Useful Shodan/Censys Queries for Georgia
+
+```
+### Shodan:
+
+- country:GE (all devices in Georgia)
+- country:GE port:80 (web servers)
+- country:GE port:22 (SSH servers)
+- country:GE port:3389 (RDP servers)
+- country:GE port:21 (FTP servers)
+- country:GE screenshot.label:webcam (webcams)
+- country:GE org:"Magticom" (MagtiCom devices)
+- country:GE org:"Silknet" (Silknet devices)
+- country:GE has_screenshot:true (devices with screenshots)
+
+### Censys:
+
+- location.country_code:GE
+- location.city:Tbilisi
+```
+### 50.17 Education & Academic Databases
+
+### Education Portals
+
+| Resource | URL | Description |
+|---|---|---|
+| Ministry of Education | [https://mes.gov.ge](https://mes.gov.ge) | Education policy, school data, exam information |
+| EMIS (Education Management) | [https://emis.ge](https://emis.ge) | Education Management Information System -- school data, teacher registry |
+| Schools Portal | [https://skolebi.emis.ge](https://skolebi.emis.ge) | Search Georgian schools by name, region, type -- interactive map |
+| Student Portal | [https://students.emis.ge](https://students.emis.ge) | University student registration portal |
+| E-Library (MES) | [https://elibrary.emis.ge](https://elibrary.emis.ge) | Textbooks and educational materials |
+| EQE (Quality Enhancement) | [https://eqe.ge](https://eqe.ge) | Accredited programs, institutional evaluations, quality standards |
+| National Exam Center | [https://naec.ge](https://naec.ge) | Unified National Exams data, university admission statistics |
+
+### Universities (Major)
+
+| University | URL | OSINT Value |
+|---|---|---|
+| Tbilisi State University (TSU) | [https://tsu.ge](https://tsu.ge) | Faculty directories, research databases, theses |
+| Georgian Technical University (GTU) | [https://gtu.ge](https://gtu.ge) | Faculty, research, publications |
+| Ilia State University | [https://iliauni.edu.ge](https://iliauni.edu.ge) | Research, library databases |
+| Free University of Tbilisi | [https://freeuni.edu.ge](https://freeuni.edu.ge) | Staff directory, programs |
+| Caucasus University | [https://cu.edu.ge](https://cu.edu.ge) | Faculty, publications |
+| University of Georgia (UG) | [https://ug.edu.ge](https://ug.edu.ge) | Programs, staff |
+| Business and Technology University (BTU) | [https://btu.edu.ge](https://btu.edu.ge) | Tech programs, staff |
+| Agricultural University | [https://agruni.edu.ge](https://agruni.edu.ge) | Agricultural research data |
+
+### Academic Search
+
+| Resource | URL | Description |
+|---|---|---|
+| National Library of Georgia | [https://nplg.gov.ge](https://nplg.gov.ge) | Digital library, historical documents, periodicals archive |
+| OpenLibrary.ge | [https://openlibrary.ge](https://openlibrary.ge) | Georgian academic publications, theses, dissertations |
+| Ilia University Library | [https://library.iliauni.edu.ge](https://library.iliauni.edu.ge) | Access to scientific databases |
+| TSU Digital Library | [https://digitallibrary.tsu.ge](https://digitallibrary.tsu.ge) | Academic theses and dissertations |
+
+---
+### 50.18 Health & Medical Databases
+
+### Health Authorities
+
+| Resource | URL | Description |
+|---|---|---|
+| NCDC (Disease Control) | [https://ncdc.ge](https://ncdc.ge) | National Center for Disease Control -- epidemiological data, disease surveillance, statistics |
+| Ministry of Health | [https://moh.gov.ge](https://moh.gov.ge) | Health policy, hospital data, healthcare workforce |
+| Health Regulation Agency | [https://hra.gov.ge](https://hra.gov.ge) | Licensed medical facilities, pharmaceutical registry |
+| Social Service Agency | [https://ssa.gov.ge](https://ssa.gov.ge) | Social assistance data, disability statistics, healthcare coverage |
+
+### Medical OSINT
+
+| Resource | What You Can Find |
+|---|---|
+| ncdc.ge/statistics | Disease incidence by region, mortality data, vaccination rates |
+| Hospital Registry | Licensed hospitals and clinics with addresses and specializations |
+| Pharmacy Registry | Licensed pharmacies across Georgia |
+| Doctor Licensing | Medical professional licensing (through Ministry of Health) |
+| GeoStat Health Data | [https://geostat.ge](https://geostat.ge) -- health statistics section |
+
+---
+### 50.19 NGO & Civil Society & Watchdogs
+
+### Key Georgian NGOs (OSINT Resources)
+
+| Organization | URL | Focus Area | OSINT Value |
+|---|---|---|---|
+| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Anti-corruption, asset monitoring | Asset declarations, political finance, ownership investigations |
+| IDFI | [https://idfi.ge](https://idfi.ge) | Information freedom, open data | Public information requests, government transparency monitoring |
+| GYLA | [https://gyla.ge](https://gyla.ge) | Legal reform, human rights | Court monitoring, legal analysis, election observation |
+| ISFED | [https://isfed.ge](https://isfed.ge) | Election monitoring | Real-time election monitoring, violations database |
+| TI Georgia - Who Owns Georgia | [https://transparency.ge](https://transparency.ge) | Media ownership | Detailed investigations into who controls Georgian media |
+| Social Justice Center | [https://socialjustice.org.ge](https://socialjustice.org.ge) | Social rights, economic justice | Labor, housing, economic data |
+| Media Development Foundation | [https://mdfgeorgia.ge](https://mdfgeorgia.ge) | Media freedom | Media monitoring, financial transparency of media |
+| CRRC Georgia | [https://crrc.ge](https://crrc.ge) | Research, polling | Public opinion surveys, research datasets |
+| Partnership for Human Rights | [https://phr.ge](https://phr.ge) | Human rights monitoring | Human rights reports |
+| Democracy Research Institute | [https://democracyresearch.ge](https://democracyresearch.ge) | Democracy monitoring | Democratic indicators, political analysis |
+| CATAGI | [https://catagi.ge](https://catagi.ge) | Power structure analysis | Investigations into informal power networks |
+
+---
+### 50.20 Fact-Checking & Disinformation Tracking
+
+### Fact-Checking Organizations
+
+| Organization | URL | Description |
+|---|---|---|
+| Myth Detector | [https://mythdetector.com](https://mythdetector.com) | Media Development Foundation's fact-checking portal -- disinformation database |
+| FactCheck.ge | [https://factcheck.ge](https://factcheck.ge) | GRASS initiative -- rates accuracy of public officials' statements |
+| GeoFacts | [https://geofacts.ge](https://geofacts.ge) | Fact-checking platform |
+| MythDetector Database | [https://mythdetector.com/en/factchecker-db/](https://mythdetector.com/en/factchecker-db/) | Searchable database of fact-checked claims |
+
+### Disinformation Monitoring
+
+| Resource | URL | Description |
+|---|---|---|
+| ISFED Social Media Monitoring | [https://isfed.ge](https://isfed.ge) | Monitors Russian information operations in Georgian social media |
+| MDF Annual Reports | [https://mdfgeorgia.ge](https://mdfgeorgia.ge) | Detailed media monitoring and disinformation analysis |
+| DFRLab (Atlantic Council) | [https://atlanticcouncil.org/programs/digital-forensic-research-lab/](https://atlanticcouncil.org/programs/digital-forensic-research-lab/) | Digital forensic analysis including Georgia-related disinformation |
+| EU vs Disinfo | [https://euvsdisinfo.eu](https://euvsdisinfo.eu) | EU database of pro-Kremlin disinformation -- includes Georgia |
+| Hamilton 2.0 (Alliance for Securing Democracy) | [https://securingdemocracy.gmfus.org/hamilton-dashboard/](https://securingdemocracy.gmfus.org/hamilton-dashboard/) | Tracks Russian/Chinese state media narratives on Georgia |
+
+---
+### 50.21 Archives & Historical Databases
+
+### National Archives & Libraries
+
+| Resource | URL | Description |
+|---|---|---|
+| National Archives of Georgia | [https://archive.gov.ge](https://archive.gov.ge) | Historical documents, electronic catalogues, digitized materials, reading room reservation |
+| National Archives Electronic Catalogues | [https://archive.gov.ge](https://archive.gov.ge) (catalogues section) | Searchable index of archived documents |
+| National Library of Georgia | [https://nplg.gov.ge](https://nplg.gov.ge) | National library -- digital collections, rare books, periodicals archive |
+| National Parliamentary Library | [https://nplg.gov.ge](https://nplg.gov.ge) | Legislative history, parliamentary debates archive |
+| Internet Archive (Georgia) | [https://archive.org/details/1989-tbilisi-1_202408](https://archive.org/details/1989-tbilisi-1_202408) | Archive of Sakartvelo collection on Internet Archive |
+| Wayback Machine (.ge sites) | [https://web.archive.org/web/*/*.ge](https://web.archive.org/web/*/*.ge) | Cached versions of Georgian websites -- historical snapshots |
+
+### Historical & Cultural Databases
+
+| Resource | URL | Description |
+|---|---|---|
+| Georgian National Museum | [https://museum.ge](https://museum.ge) | Museum collections, archaeological data, cultural artifacts |
+| National Agency for Cultural Heritage | [https://heritage.gov.ge](https://heritage.gov.ge) | Cultural heritage monuments, protected sites database |
+| Georgian Cinema Database | [https://georgiancinema.ge](https://georgiancinema.ge) | Georgian film history, directors, actors |
+| OpenLibrary.ge | [https://openlibrary.ge](https://openlibrary.ge) | Academic publications, dissertations, historical texts |
+
+### Archival OSINT Tips
+
+```
+### Wayback Machine queries for Georgian sites:
+
+- https://web.archive.org/web/*/napr.gov.ge (old property data)
+- https://web.archive.org/web/*/rs.ge (old tax data)
+- https://web.archive.org/web/*/cesko.ge (old election data)
+- https://web.archive.org/web/*/parliament.ge (old MP profiles)
+
+Use these to find information that may have been removed from current sites.
+```
+### 50.22 Auctions & Seized Property
+
+### Government Auction Platforms
+
+| Resource | URL | Description |
+|---|---|---|
+| eAuction.ge | [https://eauction.ge](https://eauction.ge) | Official state property auction platform -- seized assets, government surplus, real estate, vehicles |
+| Gavel.ge | [https://gavel.ge](https://gavel.ge) | Aggregates auctions from Livo, eAuction.ge, and Tbilisi Municipality (11,000+ lots) |
+| Livo Auctions | [https://livo.ge](https://livo.ge) (auction section) | Real estate auctions with 3D tours |
+| Tbilisi Municipality Auctions | [https://tbilisi.gov.ge](https://tbilisi.gov.ge) | Municipal property sales |
+| LEPL National Bureau of Enforcement | [https://nbe.gov.ge](https://nbe.gov.ge) | Enforcement/seized property auctions |
+
+### What You Can Find in Auction Data
+
+```
+eAuction.ge reveals:
+- Seized properties of individuals/companies (with owner names)
+- Government surplus equipment
+- Bank foreclosure properties
+- Court-ordered asset sales
+- Detailed property descriptions with photos
+- Starting prices and bid history
+- Buyer information (in completed auctions)
+
+### OSINT value: Shows who lost property and why (debt, crime, tax evasion)
+
+```
+### 50.23 Job Markets & Classifieds
+
+### Job Portals
+
+| Portal | URL | Description |
+|---|---|---|
+| Jobs.ge | [https://jobs.ge](https://jobs.ge) | Georgia's largest job board -- employer names, salaries, positions |
+| HR.ge | [https://hr.ge](https://hr.ge) | Professional job portal with CV database |
+| LinkedIn (Georgia) | [https://linkedin.com](https://linkedin.com) (filter by Georgia) | Professional networking, company pages |
+| Myjobs.ge | [https://myjobs.ge](https://myjobs.ge) | Additional job listings |
+| CV.ge | [https://cv.ge](https://cv.ge) | Resume/CV platform |
+
+### Classifieds (Multi-Category)
+
+| Portal | URL | Description |
+|---|---|---|
+| SS.GE | [https://ss.ge](https://ss.ge) | Georgia's BIGGEST classifieds -- real estate, vehicles, electronics, jobs, services (OSINT goldmine) |
+| MyMarket.ge | [https://mymarket.ge](https://mymarket.ge) | Second-hand goods marketplace -- seller profiles, locations, phone numbers |
+| MyAuto.ge | [https://myauto.ge](https://myauto.ge) | Vehicle classifieds |
+| MyHome.ge | [https://myhome.ge](https://myhome.ge) | Real estate classifieds |
+| MyParts.ge | [https://myparts.ge](https://myparts.ge) | Auto parts marketplace |
+| Extra.ge | [https://extra.ge](https://extra.ge) | General classifieds and marketplace |
+| Makler.ge | [https://makler.ge](https://makler.ge) | Service provider marketplace |
+
+### OSINT Value of Classifieds
+
+```
+### Georgian classifieds often reveal:
+
+- Real phone numbers of sellers
+- Physical addresses
+- Photos of properties/vehicles (with metadata)
+- Business names and registration details
+- Price history (for repeated listings)
+- Location data from listings
+
+SS.GE in particular is a treasure trove:
+- Most Georgians have used SS.GE at some point
+- Old listings are often still accessible
+- Google cache: site:ss.ge "phone number" "name"
+```
+### 50.24 Asset Declarations & Anti-Corruption
+
+### Public Official Asset Declarations
+
+| Resource | URL | Description |
+|---|---|---|
+| Civil Service Bureau Declarations | [https://csb.gov.ge](https://csb.gov.ge) | Asset declarations of public officials -- income, property, securities, debts |
+| Anti-Corruption Bureau | [https://acb.gov.ge](https://acb.gov.ge) | Asset declaration monitoring department |
+| OpenSanctions (Georgia Declarations) | [https://opensanctions.org/datasets/ge_declarations/](https://opensanctions.org/datasets/ge_declarations/) | Structured data from Georgian official asset declarations |
+| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Analysis and monitoring of official asset declarations |
+
+### What's in Asset Declarations
+
+```
+### Georgian public officials must declare annually:
+
+- Real estate (addresses, values)
+- Vehicles (make, model, year)
+- Securities (company shares, stock holdings)
+- Bank deposits and cash
+- Income sources (salary, business income, gifts)
+- Debts and liabilities
+- Family members' assets
+- Gifts over 1,000 GEL
+
+### Available for: MPs, ministers, judges, prosecutors, mayors, high-ranking
+
+civil servants, and their family members.
+
+OpenSanctions.org provides this data in machine-readable format.
+```
+### 50.25 Georgian Wordlists & Password Tools
+
+### Georgian Language Wordlists
+
+| Resource | Description | Use Case |
+|---|---|---|
+| Georgian Wordlist (geowordlist.txt) | 11.9 MB dictionary of Georgian words and common passwords | Password cracking, security auditing |
+| make_wordlist.py | Python script for generating custom Georgian wordlists from rules | Custom wordlist generation for Georgian targets |
+| Georgian Keyboard Layout Patterns | Common keyboard patterns in Georgian layout | Password generation |
+| Georgian Name Combinations | First name + last name + year patterns common in Georgia | Targeted password lists |
+
+### Common Georgian Password Patterns
+
+```
+### Most common Georgian password structures:
+
+- Name + birth year: giorgi1990, nino1985
+- Georgian words in Latin: tbilisi, sakartvelo, gamarjoba
+- Phone number as password: 555123456, 577987654
+- ID number as password: 01001012345
+- Georgian words in Georgian script: პაროლი, თბილისი
+- Common substitutions: @ for a, 3 for e, 0 for o
+- Name + 123: giorgi123, nino123
+- Football teams: dinamo, torpedo
+- Georgian places: batumi, kutaisi, borjomi
+
+### Password cracking tools:
+
+- Hashcat: hashcat -m 0 hash.txt geowordlist.txt
+- John the Ripper: john --wordlist=geowordlist.txt hash.txt
+```
+### Generating Georgian Wordlists
+
+```bash
+# Using make_wordlist.py (from uploaded tools)
+python3 make_wordlist.py --language georgian --output geo_custom.txt
+
+# Using crunch for Georgian patterns
+crunch 8 12 abcdefghijklmnopqrstuvwxyz0123456789 -t @@@@%%%% -o patterns.txt
+
+# Combining Georgian names with years
+for name in giorgi nino dato mari luka ana; do
+ for year in $(seq 1980 2005); do
+ echo "${name}${year}"
+ done
+done > georgian_names_years.txt
+```
+### 50.26 Telegram OSINT for Georgia
+
+### Georgian News & Political Channels
+
+| Channel | Handle | Description |
+|---|---|---|
+| Formula News | @formulanewstv | Independent TV news channel |
+| Mtavari Arkhi | @mtavariarkhi | Opposition-leaning TV channel |
+| Netgazeti | @netgazeti | Independent online news |
+| Tabula | @tabormagazine | Liberal news/analysis |
+| Civil Georgia | @CivilGe | Independent English-language news |
+| Radio Tavisupleba | @radiotavisupleba | RFE/RL Georgian service |
+| Various Political Groups | Search "Georgia politics" | Political discussion groups |
+
+### OSINT Telegram Bots (Work with Georgian Data)
+
+| Bot | Handle | Description | Free/Paid |
+|---|---|---|---|
+| Eye of God | @EyeOfGodBot | Person search by phone, name, car -- CIS + Georgia data | Paid |
+| Quick OSINT | @QuickOSINT_bot | Multi-database person lookup | Paid |
+| GetContact Bot | @getcontact_bot | Caller ID lookup | Freemium |
+| Phone Number Search | @PhoneNumber_SearchBot | Phone number OSINT | Freemium |
+| Email Search | @mailsearchbot | Email breach lookup | Freemium |
+| Leak OSINT | @leak_osint_bot | Breach data search | Paid |
+| Search4Faces | @search4aboringface_bot | Facial recognition search | Freemium |
+
+### Russian-Language OSINT Channels (Relevant to Georgia)
+
+| Channel | Handle | Description |
+|---|---|---|
+| overbafer1 | @overbafer1 | OSINT tools and techniques |
+| overlamer1 | @overlamer1 | Hacking and security |
+| Social Engineering | @Social_engineering | Social engineering techniques |
+| Cyberbezopasno | @cyberbezopasno | Cybersecurity news |
+
+### Telegram OSINT Techniques for Georgia
+
+```
+1. Search by phone number: Enter +995XXXXXXXXX in Telegram search
+ - Find if the person has Telegram
+ - See their username, profile photo, bio
+
+2. Search Georgian groups/channels:
+ - Use tgstat.com to search for Georgian channels
+ - Search for Georgian keywords in channel search
+
+3. Forward message analysis:
+ - Check "forwarded from" headers to trace information flow
+
+4. Telegram Scraping Tools:
+ - telegram-scraper (GitHub)
+ - Telethon (Python library)
+ - tg-archive for archiving channels
+```
+### 50.27 Investigation Frameworks & Communities
+
+### OSINT Frameworks with Georgian Coverage
+
+| Framework | URL | Description |
+|---|---|---|
+| OSINT Framework | [https://osintframework.com](https://osintframework.com) | Web-based OSINT tool directory |
+| Bellingcat OSINT Toolkit | [https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ](https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ) | Comprehensive OSINT tool spreadsheet |
+| UNISHKA Georgia OSINT Guide | [https://unishka.substack.com/p/osint-of-georgia](https://unishka.substack.com/p/osint-of-georgia) | Dedicated Georgia OSINT methodology guide |
+| Start.me OSINT Pages | [https://start.me](https://start.me) | Curated OSINT resource collections |
+| Awesome OSINT (GitHub) | [https://github.com/jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) | Curated list of OSINT tools |
+| OSINT Dojo | [https://www.osintdojo.com](https://www.osintdojo.com) | OSINT learning platform |
+
+### Investigative Communities
+
+| Community | Platform | Description |
+|---|---|---|
+| Bellingcat | [https://bellingcat.com](https://bellingcat.com) | Open source investigations -- has covered Georgia-related stories |
+| OCCRP | [https://occrp.org](https://occrp.org) | Organized Crime and Corruption Reporting Project -- Georgia investigations |
+| ICIJ | [https://icij.org](https://icij.org) | International investigative journalism -- Pandora Papers, Panama Papers (Georgian entries) |
+| GIJN | [https://gijn.org](https://gijn.org) | Global Investigative Journalism Network |
+
+### ICIJ Databases (Georgian Entries)
+
+| Database | URL | Description |
+|---|---|---|
+| Offshore Leaks Database | [https://offshoreleaks.icij.org](https://offshoreleaks.icij.org) | Search for Georgian individuals/companies in Panama Papers, Paradise Papers, Pandora Papers |
+| ICIJ Data | [https://icij.org/investigations/](https://icij.org/investigations/) | Full investigation archives with searchable databases |
+
+---
+### 50.28 Google Dorking for Georgia
+
+### Government & Official Sites
+
+```
+site:gov.ge filetype:pdf
+site:gov.ge filetype:xlsx
+site:gov.ge filetype:docx
+site:gov.ge filetype:csv
+site:napr.gov.ge
+site:rs.ge
+site:parliament.ge
+site:cesko.ge
+site:geostat.ge filetype:xlsx
+site:matsne.gov.ge
+```
+### Personal Information Discovery
+
+```
+"+995" site:facebook.com
+"+995" site:linkedin.com
+"@gmail.com" site:gov.ge
+"@yahoo.com" site:.ge
+intext:"+995" filetype:xlsx
+intext:"+995" filetype:csv
+allintext:"tbilisi" "phone" "email" filetype:xlsx
+"პირადი ნომერი" filetype:pdf site:gov.ge
+"საიდენტიფიკაციო" filetype:xlsx
+```
+### Business & Corporate Intelligence
+
+```
+site:enreg.reestri.gov.ge
+site:rs.ge "taxpayer"
+"შპს" filetype:pdf site:gov.ge
+"სს" OR "შპს" "+995" filetype:xlsx
+site:tenders.procurement.gov.ge
+"ხელშეკრულება" filetype:pdf site:gov.ge
+```
+### Credential & Sensitive Data Discovery
+
+```
+allintext:"@gmail.com" "password" filetype:xlsx site:.ge
+allintext:"username" "password" filetype:csv site:.ge
+inurl:admin site:.ge
+inurl:login site:.ge
+inurl:wp-admin site:.ge
+inurl:cpanel site:.ge
+intitle:"index of" site:.ge
+intitle:"index of" "parent directory" site:.ge
+inurl:".env" site:.ge
+inurl:"wp-config.php" site:.ge
+site:.ge filetype:sql
+site:.ge filetype:log
+site:.ge filetype:bak
+```
+### Educational & Academic
+
+```
+site:tsu.ge filetype:pdf
+site:gtu.ge filetype:pdf
+site:iliauni.edu.ge filetype:pdf
+site:emis.ge
+"student" OR "სტუდენტი" filetype:xlsx site:.ge
+"dissertation" OR "სადისერტაციო" site:.ge filetype:pdf
+```
+### Media & Social
+
+```
+site:civil.ge "investigation"
+site:transparency.ge "report"
+site:idfi.ge "public information"
+site:interpressnews.ge
+"tbilisi" OR "თბილისი" site:instagram.com
+"sakartvelo" site:youtube.com
+```
+### Camera & IoT Discovery
+
+```
+inurl:/view/index.shtml site:.ge
+inurl:/live/cam.html site:.ge
+intitle:"webcam" site:.ge
+inurl:"view/viewer_index.shtml" country:ge
+inurl:/mjpg/video.mjpg site:.ge
+"Server: yawcam" site:.ge
+```
+### Infrastructure & Network
+
+```
+site:.ge inurl:phpMyAdmin
+site:.ge intitle:"Apache2 Ubuntu Default Page"
+site:.ge intitle:"Welcome to nginx"
+site:.ge "powered by WordPress"
+site:.ge "Joomla"
+"*.ge" site:crt.sh
+"*.gov.ge" site:shodan.io
+```
+### Advanced Combinations
+
+```
+# Find exposed databases
+site:.ge filetype:sql "INSERT INTO" "VALUES"
+
+# Find configuration files
+site:.ge filetype:xml "password"
+site:.ge filetype:ini "password"
+site:.ge filetype:conf "server"
+
+# Find exposed directories
+intitle:"index of" "parent directory" site:.ge filetype:pdf
+
+# Find email lists
+"@" filetype:csv site:.ge
+"email" "phone" filetype:xlsx site:.ge
+
+# Find Georgian government reports with data
+site:gov.ge "report" "2024" filetype:pdf
+site:gov.ge "statistics" filetype:xlsx
+```
+### Appendix A: Georgian Alphabet Quick Reference
+
+```
+### Georgian script (Mkhedruli) -- 33 letters:
+
+
+ა ბ გ დ ე ვ ზ თ ი კ ლ მ ნ ო პ ჟ რ ს ტ უ ფ ქ ღ ყ შ ჩ ც ძ წ ჭ ხ ჯ ჰ
+
+### Transliteration:
+
+a b g d e v z t' i k l m n o p zh r s t u p' k' gh q' sh ch ts dz ts' ch' kh j h
+
+### Useful for searching Georgian names in Latin script when researching
+
+Georgian individuals in international databases.
+```
+### Appendix B: OSINT Investigation Workflow for Georgia
+
+```
+STEP 1: IDENTIFY THE TARGET
+ - Name (Georgian + Latin spelling)
+ - Personal ID number (11 digits)
+ - Phone number (+995 XXX XXX XXX)
+ - Email address
+ - Date of birth
+ - Company name/ID
+
+### STEP 2: GOVERNMENT DATABASES
+
+ [ ] NAPR (napr.gov.ge) -- property, business, civil registry
+ [ ] RS (rs.ge) -- tax status, business activity
+ [ ] Entrepreneur Registry -- company details, directors
+ [ ] ecd.court.ge -- court cases
+ [ ] cesko.ge -- voter registration
+ [ ] csb.gov.ge -- if public official, check asset declarations
+
+### STEP 3: SOCIAL MEDIA & ONLINE PRESENCE
+
+ [ ] Facebook (Georgian name + Latin name)
+ [ ] Instagram
+ [ ] LinkedIn
+ [ ] Telegram (search by phone number)
+ [ ] Google search: "name" "+995" / "name" "tbilisi"
+ [ ] SS.GE (classifieds -- may have phone number, property listings)
+
+### STEP 4: FINANCIAL & BUSINESS
+
+ [ ] enreg.reestri.gov.ge -- company ownership/directorship
+ [ ] tenders.procurement.gov.ge -- government contracts
+ [ ] nbg.gov.ge -- banking/AML sanctions
+ [ ] offshoreleaks.icij.org -- offshore connections
+ [ ] opensanctions.org -- sanctions cross-reference
+
+### STEP 5: BREACH & LEAK DATA
+
+ [ ] haveibeenpwned.com -- email breaches
+ [ ] leakcheck.io -- email/phone breach search
+ [ ] dehashed.com -- comprehensive breach search
+ [ ] Known Georgian data leaks (4.9M citizen leak)
+
+### STEP 6: PHONE OSINT
+
+ [ ] GetContact -- caller ID lookup
+ [ ] TrueCaller -- caller ID
+ [ ] WhatsApp profile check
+ [ ] Viber profile check
+ [ ] Telegram profile check
+ [ ] Google: "+995XXXXXXXXX"
+
+### STEP 7: PROPERTY & VEHICLES
+
+ [ ] NAPR property registry
+ [ ] nsdi.gov.ge -- cadastral map lookup
+ [ ] SS.GE / MyHome.ge -- property listings
+ [ ] MyAuto.ge -- vehicle listings
+ [ ] eauction.ge -- seized property
+
+### STEP 8: ADVANCED
+
+ [ ] Google dorking: site:.ge "target name"
+ [ ] Wayback Machine: web.archive.org/web/*/.ge
+ [ ] Shodan: country:GE
+ [ ] Certificate Transparency: crt.sh
+ [ ] OSINT Telegram bots (Eye of God, Quick OSINT)
+```
+### Appendix C: Key URLs Quick Reference
+
+| Category | URL |
+|---|---|
+| E-Government Portal | [https://my.gov.ge](https://my.gov.ge) |
+| Property Registry | [https://napr.gov.ge](https://napr.gov.ge) |
+| Business Registry | [https://enreg.reestri.gov.ge](https://enreg.reestri.gov.ge) |
+| Tax Authority | [https://rs.ge](https://rs.ge) |
+| Court Decisions | [https://ecd.court.ge](https://ecd.court.ge) |
+| Legislation | [https://matsne.gov.ge](https://matsne.gov.ge) |
+| Elections | [https://cesko.ge](https://cesko.ge) |
+| Statistics | [https://geostat.ge](https://geostat.ge) |
+| Procurement | [https://tenders.procurement.gov.ge](https://tenders.procurement.gov.ge) |
+| Open Data | [https://data.gov.ge](https://data.gov.ge) |
+| Domain WHOIS | [https://nic.ge/en/domains/whois](https://nic.ge/en/domains/whois) |
+| Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) |
+| Education | [https://emis.ge](https://emis.ge) |
+| Health | [https://ncdc.ge](https://ncdc.ge) |
+| National Archives | [https://archive.gov.ge](https://archive.gov.ge) |
+| National Library | [https://nplg.gov.ge](https://nplg.gov.ge) |
+| Classifieds | [https://ss.ge](https://ss.ge) |
+| Vehicles | [https://myauto.ge](https://myauto.ge) |
+| Real Estate | [https://myhome.ge](https://myhome.ge) |
+| Auctions | [https://eauction.ge](https://eauction.ge) |
+| Jobs | [https://jobs.ge](https://jobs.ge) |
+| Asset Declarations | [https://csb.gov.ge](https://csb.gov.ge) |
+| Fact-Checking | [https://factcheck.ge](https://factcheck.ge) |
+| Anti-Disinfo | [https://mythdetector.com](https://mythdetector.com) |
+| Investigative | [https://transparency.ge](https://transparency.ge) |
+| Open Data Procurement | [https://opendata.spa.ge](https://opendata.spa.ge) |
+
+---
+
+🔍 AWESOME OSINT ARSENAL
+The Ultimate Open-Source Intelligence Toolkit
+
+---
+
+
+
+
+
+---
+## 🤝 Contributing & Issues
+
+Found a dead link? Tool that should be here? Just open an issue or PR.
+
+- **Found something broken** → [open an issue](https://github.com/rawfilejson/awesome-osint-arsenal/issues/new)
+- **Want to add a tool** → fork, add it to the right section in alphabetical order, PR
+- **No time to PR?** → leave the tool name + URL in an issue, I'll add it
+
+Verify install commands on a fresh Kali VM before submitting.
---
@@ -1572,3 +3466,84 @@ This repository is provided for **educational and authorized security research p
+
+
+
+
+new.md
+
+
+

+
+
+
+# 🔍 AWESOME OSINT ARSENAL
+
+### The Ultimate Open-Source Intelligence + Offensive/Defensive Security Toolkit
+
+
+
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](https://github.com/rawfilejson/awesome-osint-arsenal)
+[](LICENSE)
+[](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers)
+
+
+
+> **658 verified tools · 26 categories · OSINT + Red Team + Blue Team + Forensics + Hardware + Training**
+>
+> *The most comprehensive OSINT and offensive/defensive security toolkit on the internet — every tool with installation instructions or verified link.*
+
+

+
+
+
+---
+
+> [!IMPORTANT]
+> ## ⚠️ Maintainer's note — please read before forking
+>
+> This repository contains **658 tools across 26 categories**. That's a *lot* to keep current — links rot, repos get archived, install commands change, new tools appear weekly.
+>
+> **Maintaining this alone is hard.** If nobody helps, parts of this list will go stale faster than I can fix them.
+>
+> **How you can help:**
+> - ⭐ Star the repo (signal boost = more eyes = more contributors)
+> - 🐛 Open an issue when you spot a dead link or broken install command
+> - 🔁 Submit a PR — see [CONTRIBUTING.md](CONTRIBUTING.md) for the schema
+> - ☕ [Buy me a coffee](https://www.buymeacoffee.com/rawfilejson) so I can spend more weekends on this
+> - 📢 Share it — every star/fork helps justify keeping this maintained
+>
+> If you spot something wrong: **don't just complain — open an issue or PR. That's how this stays useful.**
+
+---
+
+> [!WARNING]
+> **DISCLAIMER:** This repository is for **educational and authorized security research only**.
+> Always obtain written permission before testing systems you do not own.
+> The authors are **not responsible** for any misuse of the tools or techniques listed here.
+> See the full [Legal Disclaimer](#legal-disclaimer) at the bottom.
+
+---
+
+---
+
+
+
+### ⭐ Star this repo if you found it useful — it really helps with motivation to keep this maintained.
+
+
+
+

+
+
+
+[](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers)
+[](https://github.com/rawfilejson/awesome-osint-arsenal/network/members)
+
+*Built for the OSINT and security research community.*
+*Knowledge is power — use it responsibly.*
+
+
diff --git a/blueteam.sh b/blueteam.sh
new file mode 100644
index 0000000..699531d
--- /dev/null
+++ b/blueteam.sh
@@ -0,0 +1,149 @@
+#!/usr/bin/env bash
+# ===================================================================
+# 🛡️ Blue team / defensive + threat intel
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: 🛰️ Threat Intel Platforms (2 tools)"
+install_docker opencti/platform OpenCTI # OpenCTI
+install_git https://github.com/yeti-platform/yeti.git yeti # Yeti
+
+echo; say "Installing: 🛡️ Blue Team & Defensive Security (20 tools)"
+install_git https://github.com/redcanaryco/atomic-red-team.git atomic-red-team # Atomic Red Team
+install_git https://github.com/WithSecureLabs/chainsaw.git chainsaw # Chainsaw
+install_docker thehiveproject/cortex:latest 'Cortex (TheHive)' # Cortex (TheHive)
+install_docker docker.elastic.co/elasticsearch/elasticsearch:latest 'Elastic Stack (ELK)' # Elastic Stack (ELK)
+install_git https://github.com/falcosecurity/falco.git falco # Falco
+install_docker graylog/graylog:latest Graylog # Graylog
+install_git https://github.com/Yamato-Security/hayabusa.git hayabusa # Hayabusa
+install_git https://github.com/Neo23x0/Loki.git Loki # Loki
+install_git https://github.com/mitre/caldera.git caldera # MITRE CALDERA
+pkg_install osquery # osquery
+install_git https://github.com/activecm/rita.git rita # RITA
+install_git https://github.com/SigmaHQ/sigma.git sigma # Sigma
+install_pip sigma-cli # sigma-cli
+pkg_install snort # Snort
+pkg_install suricata # Suricata
+install_docker strangebee/thehive:latest TheHive # TheHive
+install_git https://github.com/aquasecurity/tracee.git tracee # Tracee
+install_git https://github.com/Velocidex/velociraptor.git velociraptor # Velociraptor
+install_git https://github.com/wazuh/wazuh.git wazuh # Wazuh
+pkg_install zeek # Zeek (Bro)
+
+print_summary
diff --git a/extras.sh b/extras.sh
new file mode 100644
index 0000000..1fdcc1c
--- /dev/null
+++ b/extras.sh
@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+# ===================================================================
+# 🔧 Misc / catch-all
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: 📚 Learning Resources (2 tools)"
+install_git https://github.com/cipher387/linux-for-OSINT-21-days.git linux-for-OSINT-21-days # Linux for OSINT (cipher387)
+install_git https://github.com/cipher387/python-for-OSINT-21-days.git python-for-OSINT-21-days # Python for OSINT (cipher387)
+
+echo; say "Installing: 🔧 Miscellaneous / Niche Tools (3 tools)"
+install_git https://github.com/RedSiege/EyeWitness.git EyeWitness # EyeWitness
+install_pip opencv-python # OpenCV
+install_pip trufflehog # trufflehog
+
+print_summary
diff --git a/forensics.sh b/forensics.sh
new file mode 100644
index 0000000..1d6aa7f
--- /dev/null
+++ b/forensics.sh
@@ -0,0 +1,136 @@
+#!/usr/bin/env bash
+# ===================================================================
+# 🔬 Digital forensics & RE
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: 🔬 Digital Forensics & Reverse Engineering (11 tools)"
+install_git https://github.com/rizinorg/cutter.git cutter # Cutter
+install_pip dissect # Dissect
+install_git https://github.com/NationalSecurityAgency/ghidra.git ghidra # Ghidra
+pkg_install testdisk # PhotoRec
+install_pip plaso # Plaso (log2timeline)
+pkg_install radare2 # radare2
+install_git https://github.com/keydet89/RegRipper3.0.git RegRipper3.0 # RegRipper
+install_pip rekall # Rekall
+install_git https://github.com/rizinorg/rizin.git rizin # rizin
+pkg_install sleuthkit # The Sleuth Kit
+install_pip volatility3 # Volatility 3
+
+print_summary
diff --git a/hardware.sh b/hardware.sh
new file mode 100644
index 0000000..d73453d
--- /dev/null
+++ b/hardware.sh
@@ -0,0 +1,135 @@
+#!/usr/bin/env bash
+# ===================================================================
+# 🔌 Hardware hacking & SDR
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: 🔌 Hardware Hacking & SDR (10 tools)"
+install_git https://github.com/firmadyne/firmadyne.git firmadyne # Firmadyne
+install_git https://github.com/craigz28/firmwalker.git firmwalker # firmwalker
+pkg_install flashrom # flashrom
+pkg_install gnuradio # GNU Radio
+pkg_install gqrx-sdr # Gqrx SDR
+pkg_install hackrf # HackRF One
+pkg_install openocd # OpenOCD
+install_git https://github.com/RfidResearchGroup/proxmark3.git proxmark3 # Proxmark3
+pkg_install rtl-sdr # RTL-SDR
+pkg_install ubertooth # Ubertooth One
+
+print_summary
diff --git a/install.sh b/install.sh
new file mode 100644
index 0000000..4225eb7
--- /dev/null
+++ b/install.sh
@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# ===================================================================
+# Awesome OSINT Arsenal — install everything
+# Runs each category installer in order.
+# Best support: Kali / Debian / Ubuntu / Parrot.
+# Partial: Arch / Manjaro / Fedora / RHEL.
+# For Android, use: bash termux.sh
+# ===================================================================
+set -uo pipefail
+cd "$(dirname "$0")"
+
+if [ "$EUID" -ne 0 ]; then
+ echo "Run me as root: sudo bash install.sh"
+ exit 1
+fi
+
+INSTALLERS=(
+ "osint.sh"
+ "redteam.sh"
+ "blueteam.sh"
+ "forensics.sh"
+ "hardware.sh"
+ "labs.sh"
+ "extras.sh"
+)
+
+LOGFILE="$HOME/osint-install-errors.log"
+: > "$LOGFILE"
+
+for inst in "${INSTALLERS[@]}"; do
+ echo
+ echo "==========================================="
+ echo " Running: $inst"
+ echo "==========================================="
+ bash "$inst"
+done
+
+echo
+echo "==========================================="
+echo " ALL DONE"
+echo " Failures (if any) logged to: $LOGFILE"
+echo "==========================================="
diff --git a/install_osint_arsenal.sh b/install_osint_arsenal.sh
deleted file mode 100644
index 572b503..0000000
--- a/install_osint_arsenal.sh
+++ /dev/null
@@ -1,422 +0,0 @@
-#!/bin/bash
-# ============================================================
-# AWESOME OSINT ARSENAL - Kali Linux Full Installer
-# Source: github.com/rawfilejson/awesome-osint-arsenal
-# For authorized security research & OSINT only
-# ============================================================
-
-RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'
-CYAN='\033[0;36m'; NC='\033[0m'; BOLD='\033[1m'
-
-ok() { echo -e "${GREEN}[✔]${NC} $1"; }
-warn() { echo -e "${YELLOW}[!]${NC} $1"; }
-info() { echo -e "${CYAN}[*]${NC} $1"; }
-fail() { echo -e "${RED}[✘]${NC} $1"; }
-
-TOOLS_DIR="/opt/osint-arsenal"
-ERRORS=()
-LOG_FILE="/var/log/osint-arsenal-install.log"
-START_TIME=$(date +%s)
-
-banner() {
-cat << 'EOF'
- ___ ____ ___ _ _ _____ _ ____ ____ _____
- / _ \/ ___|_ _| \ | |_ _| / \ | _ \/ ___|| ____|
-| | | \___ \| || \| | | | / _ \ | |_) \___ \| _|
-| |_| |___) | || |\ | | | / ___ \| _ < ___) | |___
- \___/|____/___|_| \_| |_| /_/ \_\_| \_\____/|_____|
-
- Awesome OSINT Arsenal - Kali Linux Installer
- For authorized security research only.
-EOF
-}
-
-check_root() {
- if [[ $EUID -ne 0 ]]; then
- warn "Not running as root. Some installs may fail. Re-run with: sudo bash $0"
- fi
-}
-
-run() {
- # run "description" command...
- local desc="$1"; shift
- if "$@" &>/dev/null; then
- ok "$desc"
- else
- fail "$desc"
- ERRORS+=("$desc")
- fi
-}
-
-# ── 1. SYSTEM UPDATE ──────────────────────────────────────
-step_apt() {
- info "── STEP 1: System update & apt packages ──"
- apt-get update -y &>/dev/null && apt-get upgrade -y &>/dev/null
- ok "System updated"
-
- APT_TOOLS=(
- # Core utilities
- git curl wget python3 python3-pip golang-go ruby-full build-essential
- # Network / scanning
- nmap masscan wireshark tcpdump netcat-openbsd
- # Web recon
- nikto dirb gobuster whatweb wfuzz feroxbuster
- # Password & brute force
- hydra john hashcat medusa cewl crunch
- # Wireless
- aircrack-ng kismet wifite reaver hcxtools fern-wifi-cracker
- bettercap ettercap-common
- # OSINT pre-installed
- theharvester recon-ng maltego spiderfoot set
- # Web app
- sqlmap burpsuite
- # Vuln scanners
- openvas
- # Forensics
- binwalk foremost bulk-extractor scalpel
- # Misc
- macchanger libimage-exiftool-perl apktool jadx
- dnsrecon
- )
-
- for pkg in "${APT_TOOLS[@]}"; do
- if apt-get install -y "$pkg" &>/dev/null; then
- ok "apt: $pkg"
- else
- warn "apt: $pkg (skipped/unavailable)"
- fi
- done
-}
-
-# ── 2. PYTHON (pip) TOOLS ─────────────────────────────────
-step_pip() {
- info "── STEP 2: Python pip tools ──"
- pip3 install --upgrade --break-system-packages pip &>/dev/null
-
- PIP_TOOLS=(
- # Username / social OSINT
- sherlock-project maigret blackbird-osint nexfil
- social-analyzer socid-extractor osrframework
- socialscan holehe gitrecon
- # Email OSINT
- h8mail theHarvester mailto-analyzer
- # Phone OSINT
- phoneinfoga ignorant
- # DNS / domain
- dnsrecon sublist3r
- # Social media scrapers
- instaloader snscrape twayback toutatis
- telepathy telethon
- # Forensics / metadata
- volatility3 metagoofil
- # AI / face
- deepface face_recognition opencv-python
- # Web / fuzzing
- wfuzz paramspider
- # Misc
- spiderfoot recon-ng
- # Mobile
- frida-tools objection
- )
-
- for pkg in "${PIP_TOOLS[@]}"; do
- if pip3 install --break-system-packages "$pkg" &>/dev/null; then
- ok "pip: $pkg"
- else
- warn "pip: $pkg (skipped/failed)"
- fi
- done
-}
-
-# ── 3. GO TOOLS ───────────────────────────────────────────
-step_go() {
- info "── STEP 3: Go-based tools ──"
- export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin:/root/go/bin
- export GOPATH=$HOME/go
-
- GO_TOOLS=(
- "github.com/owasp-amass/amass/v4/...@master"
- "github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest"
- "github.com/projectdiscovery/httpx/cmd/httpx@latest"
- "github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest"
- "github.com/projectdiscovery/katana/cmd/katana@latest"
- "github.com/OJ/gobuster/v3@latest"
- "github.com/s-rah/onionscan@latest"
- "github.com/kgretzky/evilginx2@latest"
- "github.com/drk1wi/Modlishka@latest"
- )
-
- for pkg in "${GO_TOOLS[@]}"; do
- name=$(basename "${pkg%%@*}")
- if go install "$pkg" &>/dev/null; then
- ok "go: $name"
- else
- warn "go: $name (failed)"
- fi
- done
-}
-
-# ── 4. RUBY GEMS ──────────────────────────────────────────
-step_gems() {
- info "── STEP 4: Ruby gems ──"
- run "gem: wpscan" gem install wpscan
-}
-
-# ── 5. GIT CLONE TOOLS ────────────────────────────────────
-step_git() {
- info "── STEP 5: Git clone tools → $TOOLS_DIR ──"
- mkdir -p "$TOOLS_DIR"
- cd "$TOOLS_DIR" || exit 1
-
- declare -A REPOS=(
- # Username / social
- ["userrecon"]="https://github.com/wishihab/userrecon.git"
- # Email
- ["EmailAnalyzer"]="https://github.com/keraattin/EmailAnalyzer.git"
- ["MailHeaderDetective"]="https://github.com/akajhon/MailHeaderDetective.git"
- ["WhatMail"]="https://github.com/z0m31en7/WhatMail.git"
- ["Infoga"]="https://github.com/m4ll0k/Infoga.git"
- # Domain / IP
- ["IPGeoLocation"]="https://github.com/maldevel/IPGeoLocation.git"
- # Image / forensics
- ["Depix"]="https://github.com/beurtschipper/Depix.git"
- # Social media
- ["Osintgram"]="https://github.com/Datalux/Osintgram.git"
- ["TeleGram-OSINTer"]="https://github.com/Alb-310/TeleGram-OSINTer.git"
- # Credential / password
- ["LaZagne"]="https://github.com/AlessandroZ/LaZagne.git"
- ["Responder"]="https://github.com/lgandx/Responder.git"
- # Dark web
- ["OSINT-SPY"]="https://github.com/SharadKumar97/OSINT-SPY.git"
- ["pwndb"]="https://github.com/coj337/pwndb.git"
- # Privacy / anon
- ["kali-anonsurf"]="https://github.com/Und3rf10w/kali-anonsurf.git"
- ["Anon-SMS"]="https://github.com/HACK3RY2J/Anon-SMS.git"
- # Web app scanning
- ["LinkFinder"]="https://github.com/GerbenJavado/LinkFinder.git"
- ["Photon"]="https://github.com/s0md3v/Photon.git"
- ["URLCADIZ"]="https://github.com/PerezMascato/URLCADIZ.git"
- ["webhack"]="https://github.com/yan4ikyt/webhack.git"
- # Phishing / social engineering
- ["zphisher"]="https://github.com/htr-tech/zphisher.git"
- ["nexphisher"]="https://github.com/htr-tech/nexphisher.git"
- ["Storm-Breaker"]="https://github.com/ultrasecurity/Storm-Breaker.git"
- ["shorturl"]="https://github.com/htr-tech/shorturl.git"
- ["SocialFish"]="https://github.com/UndeadSec/SocialFish.git"
- ["AdvPhishing"]="https://github.com/Ignitetch/AdvPhishing.git"
- # Vuln / exploitation
- ["commix"]="https://github.com/commixproject/commix.git"
- # Wireless
- ["fluxion"]="https://github.com/FluxionNetwork/fluxion.git"
- ["bluemaho"]="https://github.com/pysec/bluemaho.git"
- # Mobile
- ["PhoneSploit"]="https://github.com/aerosol-can/PhoneSploit.git"
- ["AhMyth-Android-RAT"]="https://github.com/AhMyth/AhMyth-Android-RAT.git"
- ["msfpc"]="https://github.com/g0tmi1k/msfpc.git"
- # Financial OSINT
- ["Orbit"]="https://github.com/s0md3v/Orbit.git"
- # All-in-one frameworks
- ["fsociety"]="https://github.com/Manisso/fsociety.git"
- ["hackingtool"]="https://github.com/Z4nzu/hackingtool.git"
- ["lscript"]="https://github.com/arismelachroinos/lscript.git"
- # Wordlists
- ["SecLists"]="https://github.com/danielmiessler/SecLists.git"
- ["cupp"]="https://github.com/Mebus/cupp.git"
- # Google dorking
- ["pagodo"]="https://github.com/opsdisk/pagodo.git"
- ["GooFuzz"]="https://github.com/m3n0sd0n4ld/GooFuzz.git"
- ["dorkScanner"]="https://github.com/madhavmehndiratta/dorkScanner.git"
- # ReconAIzer (Burp extension)
- ["ReconAIzer"]="https://github.com/hisxo/ReconAIzer.git"
- )
-
- for name in "${!REPOS[@]}"; do
- url="${REPOS[$name]}"
- if [[ -d "$name" ]]; then
- warn "git: $name already exists, pulling latest"
- git -C "$name" pull &>/dev/null && ok "git: $name (updated)" || warn "git: $name (pull failed)"
- else
- if git clone --depth=1 "$url" "$name" &>/dev/null; then
- ok "git: $name"
- else
- fail "git: $name"
- ERRORS+=("git clone $name")
- fi
- fi
- done
-
- # Install pip requirements where available
- info "Installing per-repo pip requirements..."
- for dir in IPGeoLocation Photon LinkFinder Osintgram OSINT-SPY webhack commix; do
- if [[ -f "$TOOLS_DIR/$dir/requirements.txt" ]]; then
- pip3 install --break-system-packages -r "$TOOLS_DIR/$dir/requirements.txt" &>/dev/null \
- && ok "requirements: $dir" || warn "requirements: $dir (partial)"
- fi
- done
-}
-
-# ── 6. SPECIAL INSTALLS ───────────────────────────────────
-step_special() {
- info "── STEP 6: Special installs ──"
-
- # Metasploit (if not present)
- if ! command -v msfconsole &>/dev/null; then
- info "Installing Metasploit Framework..."
- curl -s https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb \
- | sed 's/apt-get/apt-get -y/g' | bash &>/dev/null \
- && ok "Metasploit installed" || warn "Metasploit (failed - install manually)"
- else
- ok "Metasploit already installed"
- fi
-
- # PhoneInfoga binary
- if ! command -v phoneinfoga &>/dev/null; then
- info "Installing PhoneInfoga binary..."
- curl -sSL https://raw.githubusercontent.com/sundowndev/phoneinfoga/master/support/scripts/install \
- | bash &>/dev/null && ok "phoneinfoga binary" || warn "phoneinfoga binary (failed)"
- else
- ok "phoneinfoga already installed"
- fi
-
- # AnonSurf
- if [[ -d "$TOOLS_DIR/kali-anonsurf" ]]; then
- cd "$TOOLS_DIR/kali-anonsurf" && bash installer.sh &>/dev/null \
- && ok "anonsurf installed" || warn "anonsurf (manual install needed)"
- fi
-
- # Nuclei templates
- if command -v nuclei &>/dev/null; then
- nuclei -update-templates &>/dev/null && ok "nuclei templates updated"
- fi
-}
-
-# ── 7. ADDITIONAL TOOLS (suggested extras) ────────────────
-step_extras() {
- info "── STEP 7: Extra tools not in original list ──"
-
- # These complement the OSINT arsenal nicely
- EXTRA_PIP=(
- trufflehog # Git secret scanning
- git-dumper # Dump exposed .git repos
- waybackpy # Wayback Machine API client
- dnstwist # Domain phishing detection
- shodan # Shodan CLI
- censys # Censys CLI
- xeuledoc # Google Docs OSINT
- redditsfinder # Find Reddit accounts by email
- linkedin2username # Generate username lists from LinkedIn
- )
-
- EXTRA_APT=(
- tor # Tor daemon (for dark web tools)
- proxychains4 # Route traffic through proxies/tor
- steghide # Steganography analysis
- stegseek # Fast steghide cracker
- exiv2 # Alternative metadata tool
- jq # JSON parsing (useful for API tools)
- whois # WHOIS lookups
- dnsutils # dig, nslookup
- traceroute # Network path tracing
- beef-xss # Browser Exploitation Framework
- )
-
- EXTRA_GIT=(
- "EyeWitness|https://github.com/RedSiege/EyeWitness.git" # Web screenshots
- "gitrob|https://github.com/michenriksen/gitrob.git" # GitHub secret scanner
- "GitLeaks|https://github.com/gitleaks/gitleaks.git" # Git secret leaks
- "theHarvester|https://github.com/laramies/theHarvester.git" # Email/domain (latest)
- "crosslinked|https://github.com/m8sec/CrossLinked.git" # LinkedIn name scraper
- "recon-ng|https://github.com/lanmaster53/recon-ng.git" # Latest recon-ng
- "spiderfoot|https://github.com/smicallef/spiderfoot.git" # Latest SpiderFoot
- "osmedeus|https://github.com/j3ssie/osmedeus.git" # Full recon workflow
- "finalrecon|https://github.com/thewhiteh4t/FinalRecon.git" # All-in-one web recon
- "URLextractor|https://github.com/eschultze/URLextractor.git" # URL extraction
- "phoneinfoga-web|https://github.com/sundowndev/phoneinfoga.git" # PhoneInfoga web UI
- )
-
- for pkg in "${EXTRA_APT[@]%%#*}"; do
- pkg=$(echo "$pkg" | xargs)
- apt-get install -y "$pkg" &>/dev/null && ok "extra apt: $pkg" || warn "extra apt: $pkg"
- done
-
- for pkg in "${EXTRA_PIP[@]%%#*}"; do
- pkg=$(echo "$pkg" | xargs)
- pip3 install --break-system-packages "$pkg" &>/dev/null && ok "extra pip: $pkg" || warn "extra pip: $pkg"
- done
-
- cd "$TOOLS_DIR" || exit 1
- for entry in "${EXTRA_GIT[@]}"; do
- name="${entry%%|*}"
- url="${entry##*|}"
- if [[ ! -d "$name" ]]; then
- git clone --depth=1 "$url" "$name" &>/dev/null && ok "extra git: $name" || warn "extra git: $name"
- else
- ok "extra git: $name (already exists)"
- fi
- done
-
- # Shodan CLI setup hint
- if command -v shodan &>/dev/null; then
- warn "Remember to init Shodan: shodan init YOUR_API_KEY"
- fi
-
- # Tor config for dark web tools
- if command -v tor &>/dev/null; then
- systemctl enable tor &>/dev/null
- systemctl start tor &>/dev/null
- ok "Tor service enabled (SOCKS proxy on 127.0.0.1:9050)"
- fi
-}
-
-# ── SUMMARY ───────────────────────────────────────────────
-summary() {
- local END_TIME=$(date +%s)
- local DURATION=$(( END_TIME - START_TIME ))
- local MINS=$(( DURATION / 60 ))
- local SECS=$(( DURATION % 60 ))
- echo ""
- echo -e "${BOLD}════════════════════════════════════════${NC}"
- echo -e "${GREEN} Install complete!${NC}"
- echo -e " Duration: ${CYAN}${MINS}m ${SECS}s${NC}"
- echo -e " Log file: ${CYAN}$LOG_FILE${NC}"
- echo -e " Tools directory: ${CYAN}$TOOLS_DIR${NC}"
- echo ""
- if [[ ${#ERRORS[@]} -gt 0 ]]; then
- echo -e "${YELLOW} Failed installs (${#ERRORS[@]}):${NC}"
- for e in "${ERRORS[@]}"; do echo " - $e"; done
- else
- echo -e "${GREEN} No errors!${NC}"
- fi
- echo ""
- echo -e "${YELLOW} Quick-start commands:${NC}"
- echo " sherlock USERNAME"
- echo " maigret USERNAME"
- echo " theHarvester -d domain.com -b all"
- echo " recon-ng"
- echo " spiderfoot -l 127.0.0.1:5001"
- echo " nuclei -u https://target.com"
- echo " subfinder -d domain.com"
- echo " amass enum -d domain.com"
- echo -e "${BOLD}════════════════════════════════════════${NC}"
-}
-
-# ── MAIN ──────────────────────────────────────────────────
-banner
-exec > >(tee -a "$LOG_FILE") 2>&1
-check_root
-
-echo ""
-echo -e "${BOLD}This will install 100+ OSINT & security tools.${NC}"
-echo -e "${YELLOW}Use only on systems you own or have authorization to test.${NC}"
-echo ""
-read -rp "Continue? [y/N]: " confirm
-[[ "$confirm" =~ ^[Yy]$ ]] || { echo "Aborted."; exit 0; }
-
-step_apt
-step_pip
-step_go
-step_gems
-step_git
-step_special
-step_extras
-summary
diff --git a/labs.sh b/labs.sh
new file mode 100644
index 0000000..e401484
--- /dev/null
+++ b/labs.sh
@@ -0,0 +1,129 @@
+#!/usr/bin/env bash
+# ===================================================================
+# 🎓 Training / vulnerable apps
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: 🎓 Training, Labs & CTF (4 tools)"
+install_git https://github.com/digininja/DVWA.git DVWA # DVWA
+install_docker bkimminich/juice-shop 'OWASP Juice Shop' # OWASP Juice Shop
+install_docker webgoat/webgoat 'OWASP WebGoat' # OWASP WebGoat
+install_git https://github.com/practisec/pwnedhub.git pwnedhub # PwnedHub
+
+print_summary
diff --git a/osint.sh b/osint.sh
new file mode 100644
index 0000000..98f150f
--- /dev/null
+++ b/osint.sh
@@ -0,0 +1,360 @@
+#!/usr/bin/env bash
+# ===================================================================
+# 🔍 OSINT toolkit
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: 👤 Username & Social Media OSINT (33 tools)"
+install_git https://github.com/ArthurHeitmann/arctic_shift.git arctic_shift # Arctic Shift
+install_pip blackbird-osint # Blackbird
+install_git https://github.com/misiektoja/github_monitor.git github_monitor # github_monitor
+install_pip gitrecon # Gitrecon
+install_go github.com/ibnaleem/gosearch@latest gosearch # GoSearch
+install_pip holehe # Holehe
+install_git https://github.com/misiektoja/instagram_monitor.git instagram_monitor # instagram_monitor
+install_pip instaloader # Instaloader
+install_go github.com/tdh8316/investigo@latest investigo # Investigo
+install_git https://github.com/l4rm4nd/LinkedInDumper.git LinkedInDumper # LinkedInDumper
+install_pip maigret # Maigret
+install_pip nexfil # NExfil
+install_git https://github.com/Datalux/Osintgram.git Osintgram # Osintgram
+install_pip osrframework # OSRFramework
+install_git https://github.com/seekr-osint/seekr.git seekr # Seekr
+install_pip sherlock-project # Sherlock
+install_pip snoop # Snoop
+install_pip snscrape # snscrape
+install_pip social-analyzer # Social Analyzer
+install_pip socialscan # socialscan
+install_pip socid-extractor # Socid-extractor
+install_git https://github.com/tejado/telegram-nearby-map.git telegram-nearby-map # Telegram Nearby Map
+install_git https://github.com/Alb-310/TeleGram-OSINTer.git TeleGram-OSINTer # TeleGram-OSINTer
+install_pip telepathy # Telepathy
+install_git https://github.com/sockysec/Telerecon.git Telerecon # Telerecon
+install_pip telethon # Telethon
+install_git https://github.com/eth0izzle/the-endorser.git the-endorser # the-endorser
+install_git https://github.com/drego85/tosint.git tosint # TOsint
+install_pip toutatis # Toutatis
+install_pip twayback # Twayback
+install_pip twint # Twint
+install_git https://github.com/kaifcodec/user-scanner.git user-scanner # user-scanner
+install_git https://github.com/wishihab/userrecon.git userrecon # UserRecon
+
+echo; say "Installing: 📧 Email & Phone Intelligence (13 tools)"
+install_git https://github.com/keraattin/EmailAnalyzer.git EmailAnalyzer # EmailAnalyzer
+install_git https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python.git EmailHeader-Analyzer-CLI-Python # EmailHeader-Analyzer
+install_pip ghunt # GHunt
+install_pip h8mail # h8mail
+install_pip ignorant # Ignorant
+install_git https://github.com/m4ll0k/Infoga.git Infoga # Infoga
+install_git https://github.com/akajhon/MailHeaderDetective.git MailHeaderDetective # MailHeaderDetective
+install_pip mailto-analyzer # mailtoanalyzer
+install_pip phoneinfoga # PhoneInfoga
+install_git https://github.com/aerosol-can/PhoneSploit.git PhoneSploit # PhoneSploit
+install_git https://github.com/nettitude/Prowl.git Prowl # Prowl
+install_pip theHarvester # theHarvester
+install_git https://github.com/z0m31en7/WhatMail.git WhatMail # WhatMail
+
+echo; say "Installing: 🌐 Domain & IP / Network Recon (68 tools)"
+pkg_install aircrack-ng # Aircrack-ng
+install_pip py-altdns # altdns
+install_go github.com/owasp-amass/amass/v4/...@master ... # Amass
+install_go github.com/tomnomnom/anew@latest anew # anew
+install_go github.com/michenriksen/aquatone@latest aquatone # Aquatone
+install_go github.com/tomnomnom/assetfinder@latest assetfinder # assetfinder
+install_pip git # AutoRecon
+install_git https://github.com/pry0cc/axiom.git axiom # Axiom
+install_pip bbot # BBOT
+pkg_install bettercap # Bettercap
+install_git https://github.com/commixproject/commix.git commix # Commix
+pkg_install dirb # Dirb
+install_pip dirsearch # dirsearch
+install_pip dnsrecon # dnsrecon
+install_pip dnstwist # dnstwist
+pkg_install ettercap-common # Ettercap
+pkg_install fern-wifi-cracker # Fern Wifi Cracker
+pkg_install feroxbuster # Feroxbuster
+install_go github.com/ffuf/ffuf/v2@latest v2 # ffuf
+install_git https://github.com/Findomain/Findomain.git Findomain # Findomain
+install_git https://github.com/FluxionNetwork/fluxion.git fluxion # Fluxion
+install_go github.com/lc/gau/v2/cmd/gau@latest gau # gau (getallurls)
+install_go github.com/tomnomnom/gf@latest gf # gf
+install_go github.com/OJ/gobuster/v3@latest v3 # Gobuster
+install_git https://github.com/jseidl/GoldenEye.git GoldenEye # GoldenEye
+install_go github.com/jaeles-project/gospider@latest gospider # GoSpider
+install_go github.com/sensepost/gowitness@latest gowitness # gowitness
+install_go github.com/hakluke/hakrawler@latest hakrawler # hakrawler
+pkg_install hcxtools # hcxtools
+install_go github.com/tomnomnom/httprobe@latest httprobe # httprobe
+install_go github.com/projectdiscovery/httpx/cmd/httpx@latest httpx # HTTPx
+install_git https://github.com/codingo/Interlace.git Interlace # Interlace
+install_git https://github.com/maldevel/IPGeoLocation.git IPGeoLocation # IPGeoLocation
+install_git https://github.com/Threezh1/JSFinder.git JSFinder # JSFinder
+install_go github.com/projectdiscovery/katana/cmd/katana@latest katana # Katana
+pkg_install kismet # Kismet
+install_git https://github.com/guelfoweb/knock.git knock # knock
+install_pip knock-subdomains # Knockpy
+install_git https://github.com/GerbenJavado/LinkFinder.git LinkFinder # LinkFinder
+pkg_install masscan # Masscan
+install_git https://github.com/blechschmidt/massdns.git massdns # massdns
+install_go github.com/tomnomnom/meg@latest meg # meg
+pkg_install metasploit-framework # Metasploit
+install_go github.com/projectdiscovery/naabu/v2/cmd/naabu@latest naabu # Naabu
+pkg_install netcat-openbsd # Netcat
+pkg_install nikto # Nikto
+pkg_install nmap # Nmap
+install_go github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest nuclei # Nuclei
+pkg_install openvas # OpenVAS
+install_pip paramspider # ParamSpider
+install_git https://github.com/s0md3v/Photon.git Photon # Photon
+pkg_install reaver # Reaver
+install_git https://github.com/six2dez/reconftw.git reconftw # reconFTW
+install_git https://github.com/RustScan/RustScan.git RustScan # RustScan
+install_pip shodan # Shodan
+install_go github.com/s0md3v/smap/cmd/smap@latest smap # smap
+install_git https://github.com/1N3/Sn1per.git Sn1per # Sn1per
+pkg_install sqlmap # SQLMap
+install_go github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest subfinder # Subfinder
+install_pip sublist3r # Sublist3r
+pkg_install tcpdump # tcpdump
+install_git https://github.com/urbanadventurer/urlcrazy.git urlcrazy # URLCrazy
+install_go github.com/tomnomnom/waybackurls@latest waybackurls # waybackurls
+install_git https://github.com/yan4ikyt/webhack.git webhack # WebHack
+install_pip wfuzz # Wfuzz
+pkg_install whatweb # Whatweb
+pkg_install wifite # Wifite
+pkg_install wireshark # Wireshark
+
+echo; say "Installing: 🖼️ Image & Facial Recognition (6 tools)"
+install_pip deepface # DeepFace
+install_git https://github.com/beurtschipper/Depix.git Depix # Depix
+pkg_install libimage-exiftool-perl # ExifTool
+install_pip face_recognition # facerecognition
+install_git https://github.com/ElevenPaths/FOCA.git FOCA # FOCA
+install_git https://github.com/GuidoBartoli/sherloq.git sherloq # Sherloq
+
+echo; say "Installing: 🕶️ Dark Web & Tor Intelligence (5 tools)"
+install_git https://github.com/itsmehacker/DarkScrape.git DarkScrape # DarkScrape
+install_go github.com/s-rah/onionscan@latest onionscan # OnionScan
+install_pip onionsearch # OnionSearch
+install_git https://github.com/SharadKumar97/OSINT-SPY.git OSINT-SPY # OSINT-SPY
+install_git https://github.com/githacktools/TorghostNG.git TorghostNG # TorghostNG
+
+echo; say "Installing: 💥 Data Breach & Leak Detection (11 tools)"
+pkg_install cewl # CeWL
+pkg_install crunch # Crunch
+install_git https://github.com/Mebus/cupp.git cupp # Cupp
+pkg_install hashcat # Hashcat
+pkg_install hydra # Hydra
+pkg_install john # John the Ripper
+install_git https://github.com/AlessandroZ/LaZagne.git LaZagne # LaZagne
+pkg_install medusa # Medusa
+install_git https://github.com/gentilkiwi/mimikatz.git mimikatz # Mimikatz
+install_git https://github.com/lgandx/Responder.git Responder # Responder
+install_git https://github.com/danielmiessler/SecLists.git SecLists # SecLists
+
+echo; say "Installing: 🏢 Company & Business Intel (2 tools)"
+install_pip opencorporates # opencorporates-cli
+install_git https://github.com/s0md3v/Orbit.git Orbit # Orbit
+
+echo; say "Installing: ₿ Cryptocurrency & Blockchain (1 tools)"
+install_pip etherscan-python # etherscan-py
+
+echo; say "Installing: 🦠 Malware & Threat Intelligence (2 tools)"
+install_git https://github.com/MISP/MISP.git MISP # MISP
+pkg_install yara # YARA
+
+echo; say "Installing: 🔍 Search & Dorking Tools (6 tools)"
+install_pip censys # Censys CLI
+install_git https://github.com/jgor/dork-cli.git dork-cli # dork-cli
+install_git https://github.com/m3n0sd0n4ld/GooFuzz.git GooFuzz # GooFuzz
+install_git https://github.com/opsdisk/pagodo.git pagodo # Pagodo
+install_pip shodan # Shodan CLI
+install_go github.com/projectdiscovery/uncover/cmd/uncover@latest uncover # uncover
+
+echo; say "Installing: 📄 Document & Metadata Analysis (10 tools)"
+pkg_install autopsy # Autopsy
+pkg_install binwalk # Binwalk
+pkg_install bulk-extractor # Bulk Extractor
+pkg_install foremost # Foremost
+install_go github.com/tillson/git-hound@latest git-hound # git-hound
+install_go github.com/gitleaks/gitleaks/v8@latest v8 # gitleaks
+install_pip metagoofil # Metagoofil
+pkg_install scalpel # Scalpel
+install_pip volatility3 # Volatility
+install_pip xeuledoc # XeuleDoc
+
+echo; say "Installing: 🧑 People & Identity OSINT (16 tools)"
+install_git https://github.com/Ignitetch/AdvPhishing.git AdvPhishing # AdvPhishing
+install_git https://github.com/An0nUD4Y/blackeye.git blackeye # BlackEye
+install_pip crosslinked # CrossLinked
+install_git https://github.com/daprofiler/DaProfiler.git DaProfiler # DaProfiler
+install_go github.com/kgretzky/evilginx2@latest evilginx2 # Evilginx2
+install_git https://github.com/initstring/linkedin2username.git linkedin2username # linkedin2username
+install_go github.com/drk1wi/Modlishka@latest Modlishka # Modlishka
+install_git https://github.com/Lucksi/Mr.Holmes.git Mr.Holmes # Mr.Holmes
+install_git https://github.com/htr-tech/nexphisher.git nexphisher # NexPhisher
+install_git https://github.com/thewhiteh4t/seeker.git seeker # Seeker
+pkg_install set # SET (Social Engineering Toolkit)
+install_git https://github.com/UndeadSec/SocialFish.git SocialFish # SocialFish
+install_git https://github.com/ultrasecurity/Storm-Breaker.git Storm-Breaker # Storm-Breaker
+install_git https://github.com/PerezMascato/URLCADIZ.git URLCADIZ # URLCADIZ
+install_pip zehef # Zehef
+install_git https://github.com/htr-tech/zphisher.git zphisher # Zphisher
+
+echo; say "Installing: 📡 IoT & Device Intelligence (10 tools)"
+install_git https://github.com/AhMyth/AhMyth-Android-RAT.git AhMyth-Android-RAT # AhMyth Android RAT
+pkg_install apktool # Apktool
+install_pip frida-tools # Frida
+install_pip greynoise # GreyNoise CLI
+pkg_install jadx # jadx
+install_git https://github.com/g0tmi1k/msfpc.git msfpc # MSFPC
+install_pip objection # Objection
+install_pip shodan # Shodan (IoT)
+install_git https://github.com/shubhamrooter/ShodanSpider.git ShodanSpider # ShodanSpider
+install_pip zoomeye # ZoomEye CLI
+
+echo; say "Installing: 🧰 Frameworks & All-in-One Platforms (12 tools)"
+install_git https://github.com/thewhiteh4t/FinalRecon.git FinalRecon # FinalRecon
+install_git https://github.com/Manisso/fsociety.git fsociety # fsociety
+install_git https://github.com/Z4nzu/hackingtool.git hackingtool # Hackingtool
+install_pip harpoon # Harpoon
+pkg_install maltego # Maltego
+install_git https://github.com/ninoseki/mitaka.git mitaka # Mitaka
+install_git https://github.com/loseys/Oblivion.git Oblivion # Oblivion
+install_git https://github.com/Bafomet666/OSINT-SAN.git OSINT-SAN # OSINT-SAN
+install_git https://github.com/j3ssie/osmedeus.git osmedeus # osmedeus
+install_pip recon-ng # Recon-ng
+pkg_install sn0int # sn0int
+install_pip spiderfoot # SpiderFoot
+
+echo; say "Installing: 🔒 Free VPN & Privacy Tools (12 tools)"
+install_git https://github.com/trailofbits/algo.git algo # Algo VPN
+install_git https://github.com/HACK3RY2J/Anon-SMS.git Anon-SMS # Anon-SMS
+install_git https://github.com/Und3rf10w/kali-anonsurf.git kali-anonsurf # Anonsurf
+pkg_install bleachbit # BleachBit
+pkg_install macchanger # MAC Changer
+pkg_install mullvad-vpn # Mullvad VPN
+pkg_install openvpn # OpenVPN
+install_pip protonvpn-cli # Proton VPN Free
+pkg_install riseup-vpn # RiseupVPN
+pkg_install torbrowser-launcher # Tor Browser
+pkg_install veracrypt # VeraCrypt
+pkg_install wireguard # WireGuard
+
+print_summary
diff --git a/redteam.sh b/redteam.sh
new file mode 100644
index 0000000..ad5205f
--- /dev/null
+++ b/redteam.sh
@@ -0,0 +1,156 @@
+#!/usr/bin/env bash
+# ===================================================================
+# ⚔️ Red team / offensive
+# Part of awesome-osint-arsenal v3.4
+# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS /
+# Arch / Manjaro / EndeavourOS /
+# Fedora / RHEL / CentOS / Rocky / Alma
+# Best support: Kali / Debian / Ubuntu (apt-based)
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m"
+LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}"
+INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0}
+declare -ga FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+require_root() {
+ if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi
+}
+
+detect_distro() {
+ if [ -f /etc/os-release ]; then
+ . /etc/os-release
+ case "${ID,,}" in
+ kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;;
+ arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;;
+ fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;;
+ *) PKG="unknown" ;;
+ esac
+ else
+ PKG="unknown"
+ fi
+ export PKG
+ echo -e "${CYN}[i]${NC} Detected package manager: $PKG"
+ if [ "$PKG" = "unknown" ]; then
+ echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped."
+ fi
+}
+
+pkg_install() {
+ local pkg="$1"
+ case "$PKG" in
+ apt)
+ if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi
+ ;;
+ pacman)
+ if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi
+ ;;
+ dnf)
+ if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi
+ if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi
+ ;;
+ *)
+ fail "$pkg — unknown package manager, install manually"
+ ;;
+ esac
+}
+
+install_pip() {
+ local pkg="$1"
+ if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi
+ if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi
+}
+install_go() {
+ local mod="$1" name="$2"
+ if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi
+ if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi
+ if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p /opt/osint-arsenal
+ if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+install_docker() {
+ local image="$1" name="$2"
+ if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi
+ if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi
+ if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi
+}
+
+bootstrap_basics() {
+ case "$PKG" in
+ apt)
+ apt update -y >/dev/null 2>&1 || true
+ apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true
+ ;;
+ pacman)
+ pacman -Sy --noconfirm >/dev/null 2>&1 || true
+ pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true
+ ;;
+ dnf)
+ dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true
+ ;;
+ esac
+}
+
+print_summary() {
+ echo
+ echo "============================================="
+ echo -e " Installed: ${GRN}$INSTALLED${NC}"
+ echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+ echo -e " Failed: ${RED}$FAILED${NC}"
+ echo "============================================="
+ if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}"
+ echo "See $LOGFILE for details."
+ fi
+}
+
+require_root
+detect_distro
+bootstrap_basics
+
+echo; say "Installing: ⚔️ Red Team & Offensive Security (31 tools)"
+install_git https://github.com/infosecn1nja/AD-Attack-Defense.git AD-Attack-Defense # AD Attack & Defense
+install_pip arjun # Arjun
+install_git https://github.com/BloodHoundAD/BloodHound.git BloodHound # BloodHound
+install_docker specterops/bloodhound:latest 'BloodHound CE' # BloodHound CE
+install_pip certipy-ad # Certipy
+install_pip crackmapexec # CrackMapExec
+install_go github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest crlfuzz # CRLFuzz
+install_go github.com/hahwul/dalfox/v2@latest v2 # Dalfox
+pkg_install evil-winrm # Evil-WinRM
+install_git https://github.com/r0oth3x49/ghauri.git ghauri # Ghauri
+install_go github.com/KathanP19/Gxss@latest Gxss # Gxss
+install_git https://github.com/HavocFramework/Havoc.git Havoc # Havoc
+install_pip impacket # Impacket
+install_go github.com/ropnop/kerbrute@latest kerbrute # Kerbrute
+install_go github.com/assetnote/kiterunner/cmd/kr@latest kr # kiterunner
+install_go github.com/Ne0nd0g/merlin@latest merlin # Merlin
+pkg_install metasploit-framework # Metasploit Framework
+install_git https://github.com/its-a-feature/Mythic.git Mythic # Mythic
+install_pip git # NetExec (nxc)
+install_git https://github.com/codingo/NoSQLMap.git NoSQLMap # NoSQLMap
+install_git https://github.com/projectdiscovery/nuclei-templates.git nuclei-templates # Nuclei Templates
+install_git https://github.com/PortSwigger/param-miner.git param-miner # ParamMiner (Burp ext)
+install_git https://github.com/swisskyrepo/PayloadsAllTheThings.git PayloadsAllTheThings # PayloadsAllTheThings
+install_git https://github.com/topotam/PetitPotam.git PetitPotam # PetitPotam
+install_git https://github.com/BC-SECURITY/Empire.git Empire # PowerShell Empire
+install_git https://github.com/GhostPack/Rubeus.git Rubeus # Rubeus
+install_git https://github.com/BloodHoundAD/SharpHound.git SharpHound # SharpHound
+install_go github.com/bishopfox/sliver/server@latest server # Sliver
+install_git https://github.com/swisskyrepo/SSRFmap.git SSRFmap # SSRFmap
+install_git https://github.com/t3l3machus/Villain.git Villain # Villain
+install_git https://github.com/s0md3v/XSStrike.git XSStrike # XSStrike
+
+print_summary
diff --git a/termux.sh b/termux.sh
new file mode 100644
index 0000000..1137b9a
--- /dev/null
+++ b/termux.sh
@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+# ===================================================================
+# Awesome OSINT Arsenal — Termux (Android) installer
+# Subset of tools known to work on Termux.
+# Run from Termux:
+# pkg install -y git && git clone && cd && bash install-termux.sh
+# ===================================================================
+set -uo pipefail
+
+RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; NC="\033[0m"
+LOGFILE="$HOME/osint-install-errors.log"
+: > "$LOGFILE"
+INSTALLED=0; SKIPPED=0; FAILED=0
+declare -a FAILED_TOOLS=()
+
+say() { echo -e "${BLU}[*]${NC} $*"; }
+ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); }
+skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); }
+fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; }
+
+install_pkg() {
+ local p="$1"
+ if dpkg -s "$p" >/dev/null 2>&1; then skip "$p already installed"; return; fi
+ if pkg install -y "$p" >/dev/null 2>&1; then ok "$p (pkg)"; else fail "$p (pkg)"; fi
+}
+install_pip() {
+ local p="$1"
+ if pip show "$p" >/dev/null 2>&1; then skip "$p (pip) already installed"; return; fi
+ if pip install "$p" >/dev/null 2>&1; then ok "$p (pip)"; else fail "$p (pip)"; fi
+}
+install_git() {
+ local repo="$1" dst="$2"
+ mkdir -p "$HOME/osint-arsenal"
+ if [ -d "$HOME/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi
+ if git clone --depth=1 "$repo" "$HOME/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi
+}
+
+say "Updating Termux..."
+pkg update -y >/dev/null 2>&1 || true
+pkg upgrade -y >/dev/null 2>&1 || true
+
+say "Installing core packages..."
+pkg install -y python python-pip git curl wget openssh nmap hydra perl >/dev/null 2>&1 || true
+termux-setup-storage 2>/dev/null || true
+
+say "Installing Termux-compatible tools..."
+install_pkg aircrack-ng # Aircrack-ng
+install_pip blackbird-osint # Blackbird
+install_pip censys # Censys CLI
+install_pip dnsrecon # dnsrecon
+install_pip dnstwist # dnstwist
+install_pkg libimage-exiftool-perl # ExifTool
+install_git https://github.com/Manisso/fsociety.git fsociety # fsociety
+install_pip gitrecon # Gitrecon
+install_pip h8mail # h8mail
+install_pip holehe # Holehe
+install_pkg hydra # Hydra
+install_pip instaloader # Instaloader
+install_git https://github.com/maldevel/IPGeoLocation.git IPGeoLocation # IPGeoLocation
+install_pkg john # John the Ripper
+install_pip maigret # Maigret
+install_pip metagoofil # Metagoofil
+install_git https://github.com/htr-tech/nexphisher.git nexphisher # NexPhisher
+install_pkg nmap # Nmap
+install_git https://github.com/s0md3v/Orbit.git Orbit # Orbit
+install_pip phoneinfoga # PhoneInfoga
+install_git https://github.com/aerosol-can/PhoneSploit.git PhoneSploit # PhoneSploit
+install_pip sherlock-project # Sherlock
+install_pip shodan # Shodan
+install_pip shodan # Shodan CLI
+install_pip snoop # Snoop
+install_pip snscrape # snscrape
+install_pip social-analyzer # Social Analyzer
+install_git https://github.com/ultrasecurity/Storm-Breaker.git Storm-Breaker # Storm-Breaker
+install_pip sublist3r # Sublist3r
+install_pip theHarvester # theHarvester
+install_pip trufflehog # trufflehog
+install_git https://github.com/wishihab/userrecon.git userrecon # UserRecon
+install_git https://github.com/htr-tech/zphisher.git zphisher # Zphisher
+
+echo
+echo "============================================="
+echo -e " Installed: ${GRN}$INSTALLED${NC}"
+echo -e " Skipped: ${YLW}$SKIPPED${NC}"
+echo -e " Failed: ${RED}$FAILED${NC}"
+echo "============================================="
+if (( FAILED > 0 )); then
+ echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[*]}"
+ echo "See $LOGFILE for details."
+fi
+echo
+echo "Tools cloned to: $HOME/osint-arsenal/"
+echo "For more tools, see the README.md — many require x86 Linux and won't run on Android."
\ No newline at end of file
diff --git a/tools.json b/tools.json
new file mode 100644
index 0000000..405d06f
--- /dev/null
+++ b/tools.json
@@ -0,0 +1,17624 @@
+[
+ {
+ "id": "0xdf-hacks",
+ "name": "0xdf hacks stuff",
+ "description": "HTB writeups and pentesting writeups",
+ "category": "learning-resources",
+ "url": "https://0xdf.gitlab.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[0xdf.gitlab.io](https://0xdf.gitlab.io)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "abusech-hunting",
+ "name": "abuse.ch Hunting",
+ "description": "Hunt across all abuse.ch malware platforms with one query",
+ "category": "malware-threat-intel",
+ "url": "https://hunting.abuse.ch",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[hunting.abuse.ch](https://hunting.abuse.ch)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "abuseipdb",
+ "name": "AbuseIPDB",
+ "description": "IP address reputation database",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "AbuseIPDB",
+ "raw": "AbuseIPDB"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "AbuseIPDB"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ad-attack-defense",
+ "name": "AD Attack & Defense",
+ "description": "Comprehensive Active Directory attack reference",
+ "category": "red-team-offensive",
+ "url": "https://github.com/infosecn1nja/AD-Attack-Defense",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/infosecn1nja/AD-Attack-Defense.git",
+ "raw": "`git clone https://github.com/infosecn1nja/AD-Attack-Defense.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ads-b-exchange",
+ "name": "ADS-B Exchange",
+ "description": "Unfiltered flight tracking data",
+ "category": "vehicle-aviation-maritime",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ADS-B Exchange",
+ "raw": "ADS-B Exchange"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "ADS-B Exchange"
+ ],
+ "sections_seen": [
+ "Vehicle, Aviation & Maritime"
+ ],
+ "archived": false
+ },
+ {
+ "id": "advphishing",
+ "name": "AdvPhishing",
+ "description": "Advanced phishing tool",
+ "category": "people-identity",
+ "url": "https://github.com/Ignitetch/AdvPhishing",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Ignitetch/AdvPhishing`",
+ "raw": "`git clone https://github.com/Ignitetch/AdvPhishing`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ahmia",
+ "name": "Ahmia",
+ "description": "Clearnet search engine for dark web",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Ahmia",
+ "raw": "Ahmia"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Ahmia"
+ ],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ahmyth-android-rat",
+ "name": "AhMyth Android RAT",
+ "description": "Android remote access tool",
+ "category": "iot-devices",
+ "url": "https://github.com/AhMyth/AhMyth-Android-RAT",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`",
+ "raw": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ai-or-not",
+ "name": "AI or Not",
+ "description": "Detect AI-generated images",
+ "category": "image-facial",
+ "url": "https://aiornot.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[aiornot.com](https://aiornot.com/)"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "AI or Not"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "aircrack-ng",
+ "name": "Aircrack-ng",
+ "description": "Wi-Fi security auditing suite",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install aircrack-ng`",
+ "raw": "`apt install aircrack-ng`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Aircrack-ng"
+ ],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "aleph-occrp",
+ "name": "Aleph (OCCRP)",
+ "description": "Global corporate & public records",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Aleph (OCCRP)",
+ "raw": "Aleph (OCCRP)"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Aleph (OCCRP)"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "aleph-open-search",
+ "name": "Aleph Open Search",
+ "description": "Dark-web search engine by Aleph Networks",
+ "category": "dark-web",
+ "url": "https://open-search.aleph-networks.eu",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[open-search.aleph-networks.eu](https://open-search.aleph-networks.eu)"
+ },
+ "tags": [
+ "dark-web",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "aletheia-research",
+ "name": "Aletheia (image forensics)",
+ "description": "Detect manipulated/AI-generated images",
+ "category": "image-facial",
+ "url": "https://www.aletheia.ai",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.aletheia.ai](https://www.aletheia.ai)"
+ },
+ "tags": [
+ "image-facial",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "alfa-network",
+ "name": "Alfa Network Adapters",
+ "description": "Wi-Fi adapters known to support monitor/inject mode (AWUS036ACH etc.)",
+ "category": "hardware-hacking",
+ "url": "https://www.alfa.com.tw",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.alfa.com.tw](https://www.alfa.com.tw)"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "algo-vpn",
+ "name": "Algo VPN",
+ "description": "Self-hosted cloud VPN — sets up WireGuard/IPsec automatically",
+ "category": "vpn-privacy",
+ "url": "https://github.com/trailofbits/algo",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/trailofbits/algo`",
+ "raw": "`git clone https://github.com/trailofbits/algo`"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Free (self-hosted on cloud)",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:WireGuard, IPsec"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Algo VPN"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "alienvault-otx",
+ "name": "AlienVault OTX",
+ "description": "Open threat exchange platform",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "AlienVault OTX",
+ "raw": "AlienVault OTX"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "AlienVault OTX"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "altdns",
+ "name": "altdns",
+ "description": "Generates permutations, alterations and mutations of subdomains",
+ "category": "domain-ip-network",
+ "url": "https://github.com/infosec-au/altdns",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install py-altdns",
+ "raw": "`pip3 install py-altdns`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "amass",
+ "name": "Amass",
+ "description": "In-depth DNS enumeration and network mapping",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/owasp-amass/amass/v4/...@master`",
+ "raw": "`go install github.com/owasp-amass/amass/v4/...@master`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Amass"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "anew-tomnomnom",
+ "name": "anew",
+ "description": "Append lines from stdin to a file only if not already there",
+ "category": "domain-ip-network",
+ "url": "https://github.com/tomnomnom/anew",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tomnomnom/anew@latest",
+ "raw": "`go install github.com/tomnomnom/anew@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "anomali",
+ "name": "Anomali ThreatStream",
+ "description": "Enterprise threat intel aggregation platform",
+ "category": "threat-intel-platforms",
+ "url": "https://www.anomali.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.anomali.com](https://www.anomali.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "anon-sms",
+ "name": "Anon-SMS",
+ "description": "Anonymous SMS sending",
+ "category": "vpn-privacy",
+ "url": "https://github.com/HACK3RY2J/Anon-SMS.git",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`",
+ "raw": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "anonsurf",
+ "name": "Anonsurf",
+ "description": "Anonymize entire OS traffic through Tor",
+ "category": "vpn-privacy",
+ "url": "https://github.com/Und3rf10w/kali-anonsurf",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Und3rf10w/kali-anonsurf`",
+ "raw": "`git clone https://github.com/Und3rf10w/kali-anonsurf`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Anonsurf"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "any-run",
+ "name": "ANY.RUN",
+ "description": "Interactive online malware sandbox",
+ "category": "malware-threat-intel",
+ "url": "https://any.run",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[any.run](https://any.run)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "apktool",
+ "name": "Apktool",
+ "description": "Android APK decompiler/rebuilder",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install apktool`",
+ "raw": "`apt install apktool`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "apollo-io",
+ "name": "Apollo.io",
+ "description": "B2B phone/email finder — 1200 free credits/yr",
+ "category": "people-identity",
+ "url": "https://www.apollo.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.apollo.io](https://www.apollo.io)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "apt-groups",
+ "name": "APT Groups and Operations",
+ "description": "Spreadsheet of threat actors, sponsoring countries, TTPs",
+ "category": "malware-threat-intel",
+ "url": "https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[docs.google.com](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "aquatone",
+ "name": "Aquatone",
+ "description": "Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers)",
+ "category": "domain-ip-network",
+ "url": "https://github.com/michenriksen/aquatone",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/michenriksen/aquatone@latest",
+ "raw": "`go install github.com/michenriksen/aquatone@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "archive-today",
+ "name": "Archive.today",
+ "description": "Web archive — saves snapshots even when robots.txt blocks Wayback",
+ "category": "document-metadata",
+ "url": "https://archive.ph",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[archive.ph](https://archive.ph)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "arctic-shift",
+ "name": "Arctic Shift",
+ "description": "Tool for accessing large dumps of Reddit data via API/web",
+ "category": "username-social",
+ "url": "https://github.com/ArthurHeitmann/arctic_shift",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/ArthurHeitmann/arctic_shift.git",
+ "raw": "`git clone https://github.com/ArthurHeitmann/arctic_shift.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "arin-whois",
+ "name": "ARIN WHOIS",
+ "description": "IP registration database",
+ "category": "domain-ip-network",
+ "url": "https://whois.arin.net/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[whois.arin.net](https://whois.arin.net/)"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "arjun",
+ "name": "Arjun",
+ "description": "HTTP parameter discovery suite",
+ "category": "red-team-offensive",
+ "url": "https://github.com/s0md3v/Arjun",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install arjun",
+ "raw": "`pip3 install arjun`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "arkham",
+ "name": "Arkham Intelligence",
+ "description": "On-chain intel — labels, entities, historical flows",
+ "category": "crypto-blockchain",
+ "url": "https://www.arkhamintelligence.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.arkhamintelligence.com](https://www.arkhamintelligence.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "assetfinder",
+ "name": "assetfinder",
+ "description": "Find domains and subdomains related to a given domain",
+ "category": "domain-ip-network",
+ "url": "https://github.com/tomnomnom/assetfinder",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tomnomnom/assetfinder@latest",
+ "raw": "`go install github.com/tomnomnom/assetfinder@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "atomic-red-team",
+ "name": "Atomic Red Team",
+ "description": "Library of small detection-test scripts mapped to MITRE ATT&CK",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/redcanaryco/atomic-red-team",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/redcanaryco/atomic-red-team.git",
+ "raw": "`git clone https://github.com/redcanaryco/atomic-red-team.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "attify-badge",
+ "name": "Attify Badge",
+ "description": "Hardware tool for IoT firmware/UART/JTAG analysis",
+ "category": "hardware-hacking",
+ "url": "https://www.attify-store.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.attify-store.com](https://www.attify-store.com)"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "autocheck",
+ "name": "AutoCheck",
+ "description": "Vehicle history reports",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://autocheck.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[autocheck.com](https://autocheck.com/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "autopsy",
+ "name": "Autopsy",
+ "description": "Full digital forensics platform",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install autopsy`",
+ "raw": "`apt install autopsy`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Autopsy"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "autorecon",
+ "name": "AutoRecon",
+ "description": "Multi-threaded network reconnaissance and enumeration framework",
+ "category": "domain-ip-network",
+ "url": "https://github.com/Tib3rius/AutoRecon",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install git+https://github.com/Tib3rius/AutoRecon.git",
+ "raw": "`pip3 install git+https://github.com/Tib3rius/AutoRecon.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "awesome-hacking-resources",
+ "name": "awesome-hacking-resources",
+ "description": "Beginner-friendly hacking learning resources",
+ "category": "learning-resources",
+ "url": "https://github.com/vitalysim/Awesome-Hacking-Resources",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com](https://github.com/vitalysim/Awesome-Hacking-Resources)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "awesome-incident-response",
+ "name": "awesome-incident-response",
+ "description": "Curated list of IR tools and resources",
+ "category": "learning-resources",
+ "url": "https://github.com/meirwah/awesome-incident-response",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com](https://github.com/meirwah/awesome-incident-response)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "awesome-malware-analysis",
+ "name": "awesome-malware-analysis",
+ "description": "Curated list of malware-analysis tools",
+ "category": "learning-resources",
+ "url": "https://github.com/rshipp/awesome-malware-analysis",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com](https://github.com/rshipp/awesome-malware-analysis)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "awesome-pentest",
+ "name": "awesome-pentest",
+ "description": "Massive curated list of pentesting tools and resources",
+ "category": "learning-resources",
+ "url": "https://github.com/enaqx/awesome-pentest",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com](https://github.com/enaqx/awesome-pentest)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "axiom",
+ "name": "Axiom",
+ "description": "Dynamic infra framework for parallel cloud-based recon",
+ "category": "domain-ip-network",
+ "url": "https://github.com/pry0cc/axiom",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/pry0cc/axiom.git",
+ "raw": "`git clone https://github.com/pry0cc/axiom.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "backgroundchecks",
+ "name": "BackgroundChecks.com",
+ "description": "Background check aggregator (BeenVerified family)",
+ "category": "people-identity",
+ "url": "https://www.backgroundchecks.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.backgroundchecks.com](https://www.backgroundchecks.com)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "baidu",
+ "name": "Baidu",
+ "description": "Major Chinese search engine — essential for China-focused OSINT",
+ "category": "search-dorking",
+ "url": "https://www.baidu.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.baidu.com](https://www.baidu.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bbh-list-public",
+ "name": "Public Bug Bounty Programs (chaos)",
+ "description": "ProjectDiscovery's free BBH program list",
+ "category": "bug-bounty",
+ "url": "https://chaos.projectdiscovery.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[chaos.projectdiscovery.io](https://chaos.projectdiscovery.io)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bbot",
+ "name": "BBOT",
+ "description": "Recursive internet scanner for attack surface",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install bbot`",
+ "raw": "`pip3 install bbot`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "BBOT"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "beenverified",
+ "name": "BeenVerified",
+ "description": "People search & background check",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "BeenVerified",
+ "raw": "BeenVerified"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "BeenVerified"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bettercap",
+ "name": "Bettercap",
+ "description": "MITM framework (ARP, DNS, HTTP)",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install bettercap`",
+ "raw": "`apt install bettercap`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bevigil",
+ "name": "BeVigil",
+ "description": "Search subdomains, URLs, parameters from mobile applications",
+ "category": "domain-ip-network",
+ "url": "https://bevigil.com/search",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bevigil.com](https://bevigil.com/search)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bgp-toolkit",
+ "name": "BGP Toolkit",
+ "description": "BGP/ASN/IP intelligence",
+ "category": "domain-ip-network",
+ "url": "https://bgp.he.net/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bgp.he.net](https://bgp.he.net/)"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bgp-tools",
+ "name": "BGP.tools",
+ "description": "Modern BGP toolkit for network reconnaissance",
+ "category": "domain-ip-network",
+ "url": "https://bgp.tools",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bgp.tools](https://bgp.tools)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "binary-ninja",
+ "name": "Binary Ninja",
+ "description": "Modern reverse engineering platform with API",
+ "category": "digital-forensics",
+ "url": "https://binary.ninja",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[binary.ninja](https://binary.ninja)"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "binaryedge",
+ "name": "BinaryEdge",
+ "description": "Cyber risk and attack-surface intelligence",
+ "category": "iot-devices",
+ "url": "https://www.binaryedge.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.binaryedge.io](https://www.binaryedge.io)"
+ },
+ "tags": [
+ "iot-devices",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bincheck",
+ "name": "BinCheck",
+ "description": "Bank card BIN lookup",
+ "category": "company-business",
+ "url": "https://bincheck.io/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bincheck.io](https://bincheck.io/)"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "binwalk",
+ "name": "Binwalk",
+ "description": "Firmware analysis & extraction",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install binwalk`",
+ "raw": "`apt install binwalk`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Binwalk"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bitquery",
+ "name": "Bitquery",
+ "description": "Blockchain data APIs for on-chain investigation",
+ "category": "crypto-blockchain",
+ "url": "https://bitquery.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bitquery.io](https://bitquery.io)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "blackbird",
+ "name": "Blackbird",
+ "description": "Fast username search tool across 600+ websites",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install blackbird-osint`",
+ "raw": "`pip install blackbird-osint`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Blackbird"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "blackbookonline",
+ "name": "Black Book Online",
+ "description": "Free nationwide directory of public-record lookups",
+ "category": "people-identity",
+ "url": "https://www.blackbookonline.info",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.blackbookonline.info](https://www.blackbookonline.info)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "blackeye",
+ "name": "BlackEye",
+ "description": "32+ phishing template builder for credential capture (lab-only)",
+ "category": "people-identity",
+ "url": "https://github.com/An0nUD4Y/blackeye",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/An0nUD4Y/blackeye.git",
+ "raw": "`git clone https://github.com/An0nUD4Y/blackeye.git`"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bleachbit",
+ "name": "BleachBit",
+ "description": "Digital footprint cleaner",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install bleachbit`",
+ "raw": "`apt install bleachbit`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "BleachBit"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "blockchain.com",
+ "name": "Blockchain.com",
+ "description": "Bitcoin explorer",
+ "category": "company-business",
+ "url": "https://blockchain.com/explorer",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[blockchain.com/explorer](https://blockchain.com/explorer)"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "blockchain.com-explorer",
+ "name": "Blockchain.com Explorer",
+ "description": "Bitcoin blockchain explorer",
+ "category": "crypto-blockchain",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Blockchain.com Explorer",
+ "raw": "Blockchain.com Explorer"
+ },
+ "tags": [
+ "crypto-blockchain"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Blockchain.com Explorer"
+ ],
+ "sections_seen": [
+ "Cryptocurrency & Blockchain"
+ ],
+ "archived": false
+ },
+ {
+ "id": "blockchair",
+ "name": "Blockchair",
+ "description": "Universal blockchain explorer & search",
+ "category": "crypto-blockchain",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Blockchair",
+ "raw": "Blockchair"
+ },
+ "tags": [
+ "crypto-blockchain"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Blockchair"
+ ],
+ "sections_seen": [
+ "Cryptocurrency & Blockchain"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bloodhound",
+ "name": "BloodHound",
+ "description": "AD attack-path graph analysis",
+ "category": "red-team-offensive",
+ "url": "https://github.com/BloodHoundAD/BloodHound",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/BloodHoundAD/BloodHound.git",
+ "raw": "`git clone https://github.com/BloodHoundAD/BloodHound.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bloodhound-ce",
+ "name": "BloodHound CE",
+ "description": "Community Edition of BloodHound — modernized stack",
+ "category": "red-team-offensive",
+ "url": "https://github.com/SpecterOps/BloodHound",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull specterops/bloodhound:latest",
+ "raw": "`docker pull specterops/bloodhound:latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "brandwatch",
+ "name": "BrandWatch",
+ "description": "Social listening platform",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "💰 Paid",
+ "raw": "💰 Paid"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "BrandWatch"
+ ],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "brave-browser",
+ "name": "Brave Browser",
+ "description": "Privacy-focused browser with built-in Tor/IPFS support",
+ "category": "vpn-privacy",
+ "url": "https://brave.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[brave.com](https://brave.com)"
+ },
+ "tags": [
+ "vpn-privacy",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "brave-search",
+ "name": "Brave Search",
+ "description": "Independent, transparent, ad-free search engine",
+ "category": "search-dorking",
+ "url": "https://search.brave.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[search.brave.com](https://search.brave.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "breachdirectory",
+ "name": "BreachDirectory",
+ "description": "Free breach search",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟢 Free",
+ "raw": "🟢 Free"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "BreachDirectory"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "breachforums-mirror",
+ "name": "BreachForums Status",
+ "description": "Status tracking for the rotating BreachForums mirrors",
+ "category": "data-breach",
+ "url": "https://www.breachforums.cx",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.breachforums.cx](https://www.breachforums.cx)"
+ },
+ "tags": [
+ "data-breach",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "breadcrumbs",
+ "name": "Breadcrumbs",
+ "description": "Free crypto investigation platform — visualize transaction flows",
+ "category": "crypto-blockchain",
+ "url": "https://breadcrumbs.app",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[breadcrumbs.app](https://breadcrumbs.app)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "brightcloud",
+ "name": "BrightCloud URL/IP Lookup",
+ "description": "Reputation, category, and threat checks for URLs/IPs",
+ "category": "malware-threat-intel",
+ "url": "https://brightcloud.com/tools/url-ip-lookup.php",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[brightcloud.com](https://brightcloud.com/tools/url-ip-lookup.php)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "brightcloud-url",
+ "name": "BrightCloud Threat Intelligence",
+ "description": "URL/IP/threat reputation database",
+ "category": "search-dorking",
+ "url": "https://brightcloud.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[brightcloud.com](https://brightcloud.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "brute-ratel",
+ "name": "Brute Ratel C4",
+ "description": "Premium C2 with strong AV/EDR evasion",
+ "category": "red-team-offensive",
+ "url": "https://bruteratel.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bruteratel.com](https://bruteratel.com)"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bscscan",
+ "name": "BscScan",
+ "description": "Binance Smart Chain explorer — same UX as Etherscan",
+ "category": "crypto-blockchain",
+ "url": "https://bscscan.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bscscan.com](https://bscscan.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "btfm-blueteam",
+ "name": "BTFM: Blue Team Field Manual",
+ "description": "Concise blue-team incident response reference",
+ "category": "learning-resources",
+ "url": "https://www.amazon.com/dp/154101636X",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.amazon.com](https://www.amazon.com/dp/154101636X)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bugbase",
+ "name": "Bugbase",
+ "description": "Indian-origin bug-bounty + vulnerability disclosure platform",
+ "category": "bug-bounty",
+ "url": "https://bugbase.ai",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bugbase.ai](https://bugbase.ai)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bugbountyhunter",
+ "name": "BugBountyHunter",
+ "description": "Web hacking training and labs",
+ "category": "training-ctf",
+ "url": "https://www.bugbountyhunter.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.bugbountyhunter.com](https://www.bugbountyhunter.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "bugcrowd",
+ "name": "Bugcrowd",
+ "description": "Crowdsourced security platform — bug bounty + pentesting",
+ "category": "bug-bounty",
+ "url": "https://bugcrowd.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[bugcrowd.com](https://bugcrowd.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "builtwith",
+ "name": "BuiltWith",
+ "description": "Web technology profiler",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "BuiltWith",
+ "raw": "BuiltWith"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "BuiltWith"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bulk-extractor",
+ "name": "Bulk Extractor",
+ "description": "Extract features from disk images",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install bulk-extractor`",
+ "raw": "`apt install bulk-extractor`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Bulk Extractor"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "burp-suite",
+ "name": "Burp Suite",
+ "description": "Web app security testing proxy",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`burpsuite`",
+ "raw": "`burpsuite`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Burp Suite"
+ ],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "bus-pirate",
+ "name": "Bus Pirate",
+ "description": "Universal serial-protocol probe (I2C, SPI, UART, JTAG)",
+ "category": "hardware-hacking",
+ "url": "http://dangerousprototypes.com/docs/Bus_Pirate",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[dangerousprototypes.com](http://dangerousprototypes.com/docs/Bus_Pirate)"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cachedview",
+ "name": "CachedView",
+ "description": "View Google/Bing/Yandex cached versions of any page",
+ "category": "document-metadata",
+ "url": "https://cachedview.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[cachedview.com](https://cachedview.com)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "caldera",
+ "name": "MITRE CALDERA",
+ "description": "Cyber adversary emulation platform",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/mitre/caldera",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/mitre/caldera.git",
+ "raw": "`git clone https://github.com/mitre/caldera.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "calleridtest",
+ "name": "CallerIDTest",
+ "description": "Reverse phone lookup",
+ "category": "email-phone",
+ "url": "https://calleridtest.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[calleridtest.com](https://calleridtest.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "calyxvpn",
+ "name": "CalyxVPN",
+ "description": "Free VPN by Calyx Institute — no accounts required",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Website",
+ "raw": "Website"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Unlimited, no account needed",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:OpenVPN (Bitmask)"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "CalyxVPN"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "canary-tokens",
+ "name": "Canary Tokens",
+ "description": "Tracking tokens (URL, email, DNS, files)",
+ "category": "geolocation",
+ "url": "https://canarytokens.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[canarytokens.org](https://canarytokens.org/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "IP Tracking & Geolocation Links"
+ ],
+ "archived": false
+ },
+ {
+ "id": "castrick",
+ "name": "Castrick",
+ "description": "Find social media accounts via email, username, phone",
+ "category": "people-identity",
+ "url": "https://castrickclues.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[castrickclues.com](https://castrickclues.com)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "censys",
+ "name": "Censys",
+ "description": "Internet-wide scan search",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Censys",
+ "raw": "Censys"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Censys"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "censys-cli",
+ "name": "Censys CLI",
+ "description": "Official Python wrapper and CLI for Censys",
+ "category": "search-dorking",
+ "url": "https://github.com/censys/censys-python",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install censys",
+ "raw": "`pip3 install censys`"
+ },
+ "tags": [
+ "search-dorking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "certipy",
+ "name": "Certipy",
+ "description": "Active Directory Certificate Services enumeration and abuse",
+ "category": "red-team-offensive",
+ "url": "https://github.com/ly4k/Certipy",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install certipy-ad",
+ "raw": "`pip3 install certipy-ad`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "certkit",
+ "name": "CertKit Certificate Search",
+ "description": "Fast search for public SSL/TLS certificate records",
+ "category": "domain-ip-network",
+ "url": "https://www.certkit.io/tools/ct-logs/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.certkit.io](https://www.certkit.io/tools/ct-logs/)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cewl",
+ "name": "CeWL",
+ "description": "Custom wordlist generator from website",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install cewl`",
+ "raw": "`apt install cewl`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "CeWL"
+ ],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "chainabuse",
+ "name": "Chainabuse",
+ "description": "Public crypto-scam reporting database",
+ "category": "crypto-blockchain",
+ "url": "https://www.chainabuse.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.chainabuse.com](https://www.chainabuse.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "chainalysis",
+ "name": "Chainalysis",
+ "description": "Blockchain analytics & investigation",
+ "category": "crypto-blockchain",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Chainalysis",
+ "raw": "Chainalysis"
+ },
+ "tags": [
+ "crypto-blockchain"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Chainalysis"
+ ],
+ "sections_seen": [
+ "Cryptocurrency & Blockchain"
+ ],
+ "archived": false
+ },
+ {
+ "id": "chainalysis-reactor",
+ "name": "Chainalysis Reactor",
+ "description": "Premium blockchain investigation platform",
+ "category": "crypto-blockchain",
+ "url": "https://www.chainalysis.com/product/reactor/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.chainalysis.com](https://www.chainalysis.com/product/reactor/)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "chainsaw",
+ "name": "Chainsaw",
+ "description": "Hunt threats in Windows event logs — fast forensics",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/WithSecureLabs/chainsaw",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/WithSecureLabs/chainsaw.git",
+ "raw": "`git clone https://github.com/WithSecureLabs/chainsaw.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "chatgpt",
+ "name": "ChatGPT",
+ "description": "OpenAI's AI assistant",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ GPT-4o mini",
+ "raw": "✅ GPT-4o mini"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "checkleaked",
+ "name": "CheckLeaked",
+ "description": "Leak search engine (15B+ accounts)",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "checkuser",
+ "name": "CheckUser",
+ "description": "Search username across multiple social networks",
+ "category": "username-social",
+ "url": "https://checkuser.vercel.app",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[checkuser.vercel.app](https://checkuser.vercel.app)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "checkusernames",
+ "name": "CheckUserNames",
+ "description": "Check username across multiple platforms",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "CheckUserNames",
+ "raw": "CheckUserNames"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "CheckUserNames"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "cisco-talos",
+ "name": "Cisco Talos Intelligence",
+ "description": "IP and Domain Reputation Center for real-time detection",
+ "category": "malware-threat-intel",
+ "url": "https://talosintelligence.com/reputation_center",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[talosintelligence.com](https://talosintelligence.com/reputation_center)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "claude",
+ "name": "Claude",
+ "description": "Best for reasoning & analysis",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free tier",
+ "raw": "✅ Free tier"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "clearbit",
+ "name": "Clearbit Connect",
+ "description": "Email finder browser extension with company data",
+ "category": "people-identity",
+ "url": "https://connect.clearbit.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[connect.clearbit.com](https://connect.clearbit.com)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cloudflare-radar",
+ "name": "Cloudflare Radar",
+ "description": "Internet traffic patterns, attacks, technology trends",
+ "category": "domain-ip-network",
+ "url": "https://radar.cloudflare.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[radar.cloudflare.com](https://radar.cloudflare.com)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "clustrmaps",
+ "name": "Clustrmaps",
+ "description": "Find people and address information",
+ "category": "people-identity",
+ "url": "https://clustrmaps.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[clustrmaps.com](https://clustrmaps.com)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cobalt-strike",
+ "name": "Cobalt Strike",
+ "description": "Premium adversary simulation / red team framework",
+ "category": "red-team-offensive",
+ "url": "https://www.cobaltstrike.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.cobaltstrike.com](https://www.cobaltstrike.com)"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "commandersearch",
+ "name": "Commander Search",
+ "description": "Boolean search builder for OSINT investigators",
+ "category": "search-dorking",
+ "url": "https://www.commandersearch.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.commandersearch.com](https://www.commandersearch.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "commentpicker-tg",
+ "name": "Telemetr",
+ "description": "Telegram channel/group analytics",
+ "category": "username-social",
+ "url": "https://telemetr.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[telemetr.io](https://telemetr.io)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "commix",
+ "name": "Commix",
+ "description": "Command injection exploiter",
+ "category": "domain-ip-network",
+ "url": "https://github.com/commixproject/commix",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/commixproject/commix`",
+ "raw": "`git clone https://github.com/commixproject/commix`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "companies-house-uk",
+ "name": "Companies House (UK)",
+ "description": "UK company register",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Companies House (UK)",
+ "raw": "Companies House (UK)"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Companies House (UK)"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "constella-intel",
+ "name": "Constella Intelligence",
+ "description": "Identity threat intel from breaches and dark web",
+ "category": "people-identity",
+ "url": "https://constellaintelligence.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[constellaintelligence.com](https://constellaintelligence.com)"
+ },
+ "tags": [
+ "people-identity",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "contactout",
+ "name": "ContactOut",
+ "description": "Find emails and phones for 300M+ professionals",
+ "category": "people-identity",
+ "url": "https://contactout.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[contactout.com](https://contactout.com)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cortex",
+ "name": "Cortex (TheHive)",
+ "description": "Observable analysis and active response engine",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/TheHive-Project/Cortex",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull thehiveproject/cortex:latest",
+ "raw": "`docker pull thehiveproject/cortex:latest`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "court-listener",
+ "name": "Court Listener",
+ "description": "Free US court opinion search",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://courtlistener.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[courtlistener.com](https://courtlistener.com/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "crackmapexec",
+ "name": "CrackMapExec",
+ "description": "Post-exploitation tool for AD networks",
+ "category": "red-team-offensive",
+ "url": "https://github.com/byt3bl33d3r/CrackMapExec",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install crackmapexec",
+ "raw": "`pip3 install crackmapexec`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "credenshow",
+ "name": "CredenShow",
+ "description": "Identify your compromised credentials before others do",
+ "category": "data-breach",
+ "url": "https://credenshow.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[credenshow.com](https://credenshow.com)"
+ },
+ "tags": [
+ "data-breach",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "criminal-ip",
+ "name": "Criminal IP",
+ "description": "AI-powered cyber threat intelligence",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Criminal IP",
+ "raw": "Criminal IP"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Criminal IP"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "crlfuzz",
+ "name": "CRLFuzz",
+ "description": "Fast CRLF-injection scanner in Go",
+ "category": "red-team-offensive",
+ "url": "https://github.com/dwisiswant0/crlfuzz",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest",
+ "raw": "`go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "crosslinked",
+ "name": "CrossLinked",
+ "description": "LinkedIn enumeration — generate username lists from LinkedIn profiles",
+ "category": "people-identity",
+ "url": "https://github.com/m8sec/CrossLinked",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install crosslinked",
+ "raw": "`pip3 install crosslinked`"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "crowdstrike-falcon-x",
+ "name": "CrowdStrike Falcon Intelligence",
+ "description": "Premium adversary intel from CrowdStrike",
+ "category": "threat-intel-platforms",
+ "url": "https://www.crowdstrike.com/products/threat-intelligence/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "crt.sh",
+ "name": "crt.sh",
+ "description": "Certificate transparency search",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "crt.sh",
+ "raw": "crt.sh"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "crt.sh"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "crunch",
+ "name": "Crunch",
+ "description": "Pattern-based wordlist generator",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install crunch`",
+ "raw": "`apt install crunch`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Crunch"
+ ],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "crunchbase",
+ "name": "Crunchbase",
+ "description": "Company/startup database",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Crunchbase",
+ "raw": "Crunchbase"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Crunchbase"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ctftime",
+ "name": "CTFtime",
+ "description": "Calendar of upcoming and past CTF events",
+ "category": "training-ctf",
+ "url": "https://ctftime.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[ctftime.org](https://ctftime.org)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cupp",
+ "name": "Cupp",
+ "description": "Profile-based wordlist generator",
+ "category": "data-breach",
+ "url": "https://github.com/Mebus/cupp",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Mebus/cupp`",
+ "raw": "`git clone https://github.com/Mebus/cupp`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Wordlist Generation & Brute Force"
+ ],
+ "archived": false
+ },
+ {
+ "id": "cutter",
+ "name": "Cutter",
+ "description": "GUI for radare2/rizin reverse-engineering",
+ "category": "digital-forensics",
+ "url": "https://cutter.re",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/rizinorg/cutter.git",
+ "raw": "`git clone https://github.com/rizinorg/cutter.git`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "cyberchef",
+ "name": "CyberChef",
+ "description": "Data analysis swiss army knife",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "CyberChef",
+ "raw": "CyberChef"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "CyberChef"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "cybrary",
+ "name": "Cybrary",
+ "description": "Free + paid cybersecurity courses",
+ "category": "training-ctf",
+ "url": "https://www.cybrary.it",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.cybrary.it](https://www.cybrary.it)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dalfox",
+ "name": "Dalfox",
+ "description": "Fast, intelligent XSS scanner",
+ "category": "red-team-offensive",
+ "url": "https://github.com/hahwul/dalfox",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/hahwul/dalfox/v2@latest",
+ "raw": "`go install github.com/hahwul/dalfox/v2@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "daprofiler",
+ "name": "DaProfiler",
+ "description": "OSINT profiling tool with reports",
+ "category": "people-identity",
+ "url": "https://github.com/daprofiler/DaProfiler",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/daprofiler/DaProfiler`",
+ "raw": "`git clone https://github.com/daprofiler/DaProfiler`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "DaProfiler"
+ ],
+ "sections_seen": [
+ "People & Identity OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dark.fail",
+ "name": "Dark.fail",
+ "description": "Verified dark web links directory",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Dark.fail",
+ "raw": "Dark.fail"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Dark.fail"
+ ],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "darkscrape",
+ "name": "DarkScrape",
+ "description": "Dark web scraping tool",
+ "category": "dark-web",
+ "url": "https://github.com/itsmehacker/DarkScrape",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/itsmehacker/DarkScrape`",
+ "raw": "`git clone https://github.com/itsmehacker/DarkScrape`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "DarkScrape"
+ ],
+ "sections_seen": [
+ "Dark Web & Tor Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "darksearch",
+ "name": "DarkSearch",
+ "description": "Dark web search API (clearnet)",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "DarkSearch",
+ "raw": "DarkSearch"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "DarkSearch"
+ ],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "databreach.com",
+ "name": "DataBreach.com",
+ "description": "Data breach lookup",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟢 Free",
+ "raw": "🟢 Free"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "db-ip",
+ "name": "DB-IP",
+ "description": "IP geolocation database",
+ "category": "domain-ip-network",
+ "url": "https://db-ip.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[db-ip.com](https://db-ip.com/)"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dbpedia",
+ "name": "DBpedia",
+ "description": "Structured Wikipedia data — SPARQL endpoint",
+ "category": "people-identity",
+ "url": "https://www.dbpedia.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.dbpedia.org](https://www.dbpedia.org)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "deepface",
+ "name": "DeepFace",
+ "description": "AI face analysis (age, gender, emotion)",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install deepface`",
+ "raw": "`pip install deepface`"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "DeepFace"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "deepseek",
+ "name": "DeepSeek",
+ "description": "Open-source, strong reasoning",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dehashed",
+ "name": "DeHashed",
+ "description": "Breach search engine",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "💰 Paid",
+ "raw": "💰 Paid"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "DeHashed"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "depix",
+ "name": "Depix",
+ "description": "Recover pixelated text from screenshots",
+ "category": "image-facial",
+ "url": "https://github.com/beurtschipper/Depix",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/beurtschipper/Depix`",
+ "raw": "`git clone https://github.com/beurtschipper/Depix`"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Depix"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "digital-footprint-check",
+ "name": "Digital Footprint Check",
+ "description": "Free username check on hundreds of sites",
+ "category": "username-social",
+ "url": "https://www.digitalfootprintcheck.com/free-checker.html",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.digitalfootprintcheck.com](https://www.digitalfootprintcheck.com/free-checker.html)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "digital-shadows",
+ "name": "Digital Shadows SearchLight",
+ "description": "Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP)",
+ "category": "threat-intel-platforms",
+ "url": "https://www.reliaquest.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.reliaquest.com](https://www.reliaquest.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dirb",
+ "name": "Dirb",
+ "description": "Web directory brute-forcer",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install dirb`",
+ "raw": "`apt install dirb`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Dirb"
+ ],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dirsearch",
+ "name": "dirsearch",
+ "description": "Web path scanner — advanced wordlist-based directory bruteforce",
+ "category": "domain-ip-network",
+ "url": "https://github.com/maurosoria/dirsearch",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install dirsearch",
+ "raw": "`pip3 install dirsearch`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "disboard",
+ "name": "Disboard",
+ "description": "Discord server discovery platform",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Disboard",
+ "raw": "Disboard"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Disboard"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "disclose-io",
+ "name": "Disclose.io",
+ "description": "Standardized vulnerability-disclosure language and tools",
+ "category": "bug-bounty",
+ "url": "https://disclose.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[disclose.io](https://disclose.io)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "discord-history",
+ "name": "DiscordHistory",
+ "description": "Search public Discord servers and messages",
+ "category": "username-social",
+ "url": "https://disboard.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[disboard.org](https://disboard.org)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "discord-history-tracker",
+ "name": "Discord History Tracker",
+ "description": "Save Discord chat history",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Discord History Tracker",
+ "raw": "Discord History Tracker"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Discord History Tracker"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "discord-lookup",
+ "name": "Discord Lookup",
+ "description": "Look up Discord user info via ID",
+ "category": "username-social",
+ "url": "https://discordlookup.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[discordlookup.com](https://discordlookup.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "discordbee",
+ "name": "DiscordBee",
+ "description": "Discord user and server search engine",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "DiscordBee",
+ "raw": "DiscordBee"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "DiscordBee"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "discordhub",
+ "name": "DiscordHub",
+ "description": "Discord user search platform",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "DiscordHub",
+ "raw": "DiscordHub"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "DiscordHub"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dissect",
+ "name": "Dissect",
+ "description": "Fox-IT framework for fast forensic image analysis",
+ "category": "digital-forensics",
+ "url": "https://docs.dissect.tools",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install dissect",
+ "raw": "`pip3 install dissect`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dnsdumpster",
+ "name": "DNSDumpster",
+ "description": "DNS reconnaissance & mapping",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "DNSDumpster",
+ "raw": "DNSDumpster"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "DNSDumpster"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dnshistory",
+ "name": "DNS History",
+ "description": "Historical DNS records lookup",
+ "category": "domain-ip-network",
+ "url": "https://dnshistory.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[dnshistory.org](https://dnshistory.org)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dnsrecon",
+ "name": "dnsrecon",
+ "description": "DNS enumeration and reconnaissance",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install dnsrecon`",
+ "raw": "`pip install dnsrecon`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "dnsrecon"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dnstwist",
+ "name": "dnstwist",
+ "description": "Domain name permutation engine for phishing detection",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install dnstwist`",
+ "raw": "`pip3 install dnstwist`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "dnstwist"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "documentcloud",
+ "name": "DocumentCloud",
+ "description": "Platform for analyzing, annotating, publishing documents",
+ "category": "document-metadata",
+ "url": "https://www.documentcloud.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.documentcloud.org](https://www.documentcloud.org)"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dork-cli",
+ "name": "dork-cli",
+ "description": "Run Google dorks from the command line",
+ "category": "search-dorking",
+ "url": "https://github.com/jgor/dork-cli",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/jgor/dork-cli.git",
+ "raw": "`git clone https://github.com/jgor/dork-cli.git`"
+ },
+ "tags": [
+ "search-dorking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dorkgenius",
+ "name": "DorkGenius",
+ "description": "AI-powered search query generator for Google, Bing, DuckDuckGo",
+ "category": "search-dorking",
+ "url": "https://dorkgenius.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[dorkgenius.com](https://dorkgenius.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dorkgpt",
+ "name": "DorkGPT",
+ "description": "Generate Google Dorks with AI",
+ "category": "search-dorking",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "DorkGPT",
+ "raw": "DorkGPT"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "DorkGPT"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dorksearch",
+ "name": "DorkSearch",
+ "description": "Google dork search engine",
+ "category": "search-dorking",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "DorkSearch",
+ "raw": "DorkSearch"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "DorkSearch"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dorky-com",
+ "name": "Dorky",
+ "description": "Online dork builder for Google/Bing/DuckDuckGo",
+ "category": "search-dorking",
+ "url": "https://dorky.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[dorky.io](https://dorky.io)"
+ },
+ "tags": [
+ "search-dorking",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "duckduckgo-onion",
+ "name": "DuckDuckGo Onion",
+ "description": "Private search on Tor",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`",
+ "raw": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "dune",
+ "name": "Dune Analytics",
+ "description": "SQL queries over indexed blockchain data",
+ "category": "crypto-blockchain",
+ "url": "https://dune.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[dune.com](https://dune.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "dvwa",
+ "name": "DVWA",
+ "description": "Damn Vulnerable Web Application — classic appsec lab",
+ "category": "training-ctf",
+ "url": "https://github.com/digininja/DVWA",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/digininja/DVWA.git",
+ "raw": "`git clone https://github.com/digininja/DVWA.git`"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "eclecticiq",
+ "name": "EclecticIQ Intelligence Center",
+ "description": "STIX/TAXII-native threat intel platform",
+ "category": "threat-intel-platforms",
+ "url": "https://www.eclecticiq.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.eclecticiq.com](https://www.eclecticiq.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "elk-elastic",
+ "name": "Elastic Stack (ELK)",
+ "description": "Elasticsearch + Logstash + Kibana — log analytics",
+ "category": "blue-team-defensive",
+ "url": "https://www.elastic.co/elastic-stack",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull docker.elastic.co/elasticsearch/elasticsearch:latest",
+ "raw": "`docker pull docker.elastic.co/elasticsearch/elasticsearch:latest`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "elliptic",
+ "name": "Elliptic",
+ "description": "Crypto financial-crime detection and investigation",
+ "category": "crypto-blockchain",
+ "url": "https://www.elliptic.co",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.elliptic.co](https://www.elliptic.co)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "email-checker",
+ "name": "Email-Checker",
+ "description": "Email validation tool",
+ "category": "email-phone",
+ "url": "https://email-checker.net/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[email-checker.net](https://email-checker.net/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "emailanalyzer",
+ "name": "EmailAnalyzer",
+ "description": "Analyze suspicious .eml files",
+ "category": "email-phone",
+ "url": "https://github.com/keraattin/EmailAnalyzer",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/keraattin/EmailAnalyzer`",
+ "raw": "`git clone https://github.com/keraattin/EmailAnalyzer`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "emailheader-analyzer",
+ "name": "EmailHeader-Analyzer",
+ "description": "CLI email header parser + OSINT",
+ "category": "email-phone",
+ "url": "https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`",
+ "raw": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "emailrep",
+ "name": "EmailRep",
+ "description": "Email address reputation and risk scoring",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "EmailRep",
+ "raw": "EmailRep"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "EmailRep"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "emailrep-io",
+ "name": "EmailRep.io",
+ "description": "Free email reputation API by Sublime Security",
+ "category": "email-phone",
+ "url": "https://emailrep.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[emailrep.io](https://emailrep.io)"
+ },
+ "tags": [
+ "email-phone",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "empire",
+ "name": "PowerShell Empire",
+ "description": "Post-exploitation framework with PS-based agents",
+ "category": "red-team-offensive",
+ "url": "https://github.com/BC-SECURITY/Empire",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/BC-SECURITY/Empire.git",
+ "raw": "`git clone https://github.com/BC-SECURITY/Empire.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "epieos",
+ "name": "Epieos",
+ "description": "Get info linked to any email address",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Epieos",
+ "raw": "Epieos"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Epieos"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "epieos-tools",
+ "name": "Epieos Tools",
+ "description": "Reverse-lookup email/phone for Google profile data",
+ "category": "people-identity",
+ "url": "https://tools.epieos.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[tools.epieos.com](https://tools.epieos.com)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "epstein-exposed",
+ "name": "Epstein Exposed",
+ "description": "Searchable database of 2M+ DOJ Epstein case docs and network graphs",
+ "category": "document-metadata",
+ "url": "https://epsteinexposed.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[epsteinexposed.com](https://epsteinexposed.com)"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "eric-zimmerman-tools",
+ "name": "Eric Zimmerman's Tools",
+ "description": "Suite of free Windows DFIR utilities",
+ "category": "digital-forensics",
+ "url": "https://ericzimmerman.github.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[ericzimmerman.github.io](https://ericzimmerman.github.io)"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "etda-apt",
+ "name": "ETDA APT Groups",
+ "description": "Search threat-actor groups and their tools",
+ "category": "malware-threat-intel",
+ "url": "https://apt.etda.or.th/cgi-bin/listgroups.cgi",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[apt.etda.or.th](https://apt.etda.or.th/cgi-bin/listgroups.cgi)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "etherscan",
+ "name": "Etherscan",
+ "description": "Ethereum blockchain explorer",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Etherscan",
+ "raw": "Etherscan"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Etherscan"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "etherscan-cli",
+ "name": "etherscan-py",
+ "description": "Python wrapper for Etherscan API",
+ "category": "crypto-blockchain",
+ "url": "https://github.com/pcko1/etherscan-python",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install etherscan-python",
+ "raw": "`pip3 install etherscan-python`"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ettercap",
+ "name": "Ettercap",
+ "description": "MITM attack suite",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install ettercap-common`",
+ "raw": "`apt install ettercap-common`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "evil-winrm",
+ "name": "Evil-WinRM",
+ "description": "Ultimate WinRM shell for hacking/pentesting",
+ "category": "red-team-offensive",
+ "url": "https://github.com/Hackplayers/evil-winrm",
+ "install": {
+ "method": "apt",
+ "kali": "apt install evil-winrm",
+ "raw": "`apt install evil-winrm`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "evilginx2",
+ "name": "Evilginx2",
+ "description": "Man-in-the-middle reverse proxy",
+ "category": "people-identity",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/kgretzky/evilginx2@latest`",
+ "raw": "`go install github.com/kgretzky/evilginx2@latest`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "exiftool",
+ "name": "ExifTool",
+ "description": "Complete metadata extraction from images/docs",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install libimage-exiftool-perl`",
+ "raw": "`apt install libimage-exiftool-perl`"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "ExifTool"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "exploitdb",
+ "name": "ExploitDB",
+ "description": "Exploit database (searchsploit)",
+ "category": "domain-ip-network",
+ "url": "https://www.exploit-db.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[exploit-db.com](https://www.exploit-db.com/)"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "exportdata",
+ "name": "ExportData",
+ "description": "Historical tweet, follower, and trend export tool",
+ "category": "username-social",
+ "url": "https://www.exportdata.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.exportdata.io](https://www.exportdata.io)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "eyewitness",
+ "name": "EyeWitness",
+ "description": "Take screenshots of web pages",
+ "category": "misc",
+ "url": "https://github.com/RedSiege/EyeWitness",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/RedSiege/EyeWitness`",
+ "raw": "`git clone https://github.com/RedSiege/EyeWitness`"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "EyeWitness"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "f4map",
+ "name": "F4map",
+ "description": "3D interactive world map",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "F4map",
+ "raw": "F4map"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "F4map"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "facecheck.id",
+ "name": "FaceCheck.ID",
+ "description": "Face recognition search engine",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FaceCheck.ID",
+ "raw": "FaceCheck.ID"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FaceCheck.ID"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "facerecognition",
+ "name": "facerecognition",
+ "description": "Python face recognition library",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install face_recognition`",
+ "raw": "`pip install face_recognition`"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "face_recognition",
+ "facerecognition"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "faceseek",
+ "name": "FaceSeek",
+ "description": "AI-powered reverse face search",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FaceSeek",
+ "raw": "FaceSeek"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FaceSeek"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "fake-image-detector",
+ "name": "Fake Image Detector",
+ "description": "AI-based fake image detection",
+ "category": "image-facial",
+ "url": "https://www.fakeimagedetector.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[fakeimagedetector.com](https://www.fakeimagedetector.com/)"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "falco",
+ "name": "Falco",
+ "description": "Cloud-native runtime security",
+ "category": "blue-team-defensive",
+ "url": "https://falco.org",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/falcosecurity/falco.git",
+ "raw": "`git clone https://github.com/falcosecurity/falco.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "familytreenow",
+ "name": "FamilyTreeNow",
+ "description": "Free genealogy search — addresses, phones, emails",
+ "category": "people-identity",
+ "url": "https://familytreenow.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[familytreenow.com](https://familytreenow.com)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "fastpeoplesearch",
+ "name": "FastPeopleSearch",
+ "description": "Free people finder",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FastPeopleSearch",
+ "raw": "FastPeopleSearch"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FastPeopleSearch"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "faxvin",
+ "name": "FAXVIN",
+ "description": "Free VIN decoder and vehicle history",
+ "category": "vehicle-aviation-maritime",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FAXVIN",
+ "raw": "FAXVIN"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FAXVIN"
+ ],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "fern-wifi-cracker",
+ "name": "Fern Wifi Cracker",
+ "description": "GUI-based Wi-Fi audit tool",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install fern-wifi-cracker`",
+ "raw": "`apt install fern-wifi-cracker`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "feroxbuster",
+ "name": "Feroxbuster",
+ "description": "Fast recursive content discovery",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install feroxbuster`",
+ "raw": "`apt install feroxbuster`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ffuf",
+ "name": "ffuf",
+ "description": "Fast Go-based web fuzzer — directory, parameter, vhost discovery",
+ "category": "domain-ip-network",
+ "url": "https://github.com/ffuf/ffuf",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/ffuf/ffuf/v2@latest",
+ "raw": "`go install github.com/ffuf/ffuf/v2@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "filesec",
+ "name": "Filesec.io",
+ "description": "Catalog of malicious file extensions, risks, OS-level mitigations",
+ "category": "malware-threat-intel",
+ "url": "https://filesec.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[filesec.io](https://filesec.io)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "finalrecon",
+ "name": "FinalRecon",
+ "description": "The last web recon tool you'll need",
+ "category": "frameworks",
+ "url": "https://github.com/thewhiteh4t/FinalRecon",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/thewhiteh4t/FinalRecon`",
+ "raw": "`git clone https://github.com/thewhiteh4t/FinalRecon`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "FinalRecon"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "findomain",
+ "name": "Findomain",
+ "description": "Cross-platform subdomain enumerator with monitoring features",
+ "category": "domain-ip-network",
+ "url": "https://github.com/Findomain/Findomain",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/Findomain/Findomain.git",
+ "raw": "`git clone https://github.com/Findomain/Findomain.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "firmadyne",
+ "name": "Firmadyne",
+ "description": "Automated and scalable system for firmware emulation",
+ "category": "hardware-hacking",
+ "url": "https://github.com/firmadyne/firmadyne",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/firmadyne/firmadyne.git",
+ "raw": "`git clone https://github.com/firmadyne/firmadyne.git`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "firms",
+ "name": "FIRMS",
+ "description": "NASA fire/thermal hotspots",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FIRMS",
+ "raw": "FIRMS"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FIRMS"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "firmwalker",
+ "name": "firmwalker",
+ "description": "Script for searching extracted firmware filesystems",
+ "category": "hardware-hacking",
+ "url": "https://github.com/craigz28/firmwalker",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/craigz28/firmwalker.git",
+ "raw": "`git clone https://github.com/craigz28/firmwalker.git`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "flashpoint",
+ "name": "Flashpoint",
+ "description": "Business risk intel from criminal forums and dark web",
+ "category": "threat-intel-platforms",
+ "url": "https://flashpoint.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[flashpoint.io](https://flashpoint.io)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "flashrom",
+ "name": "flashrom",
+ "description": "Tool for identifying/reading/writing flash chips",
+ "category": "hardware-hacking",
+ "url": "https://www.flashrom.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install flashrom",
+ "raw": "`apt install flashrom`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "flickr-search",
+ "name": "Flickr",
+ "description": "Photo-sharing — geosearch + license + camera EXIF intact",
+ "category": "image-facial",
+ "url": "https://www.flickr.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.flickr.com](https://www.flickr.com)"
+ },
+ "tags": [
+ "image-facial",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "flightaware",
+ "name": "FlightAware",
+ "description": "Flight tracking and data platform",
+ "category": "vehicle-aviation-maritime",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FlightAware",
+ "raw": "FlightAware"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "FlightAware"
+ ],
+ "sections_seen": [
+ "Vehicle, Aviation & Maritime"
+ ],
+ "archived": false
+ },
+ {
+ "id": "flightradar24",
+ "name": "FlightRadar24",
+ "description": "Real-time flight tracking",
+ "category": "vehicle-aviation-maritime",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FlightRadar24",
+ "raw": "FlightRadar24"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "FlightRadar24"
+ ],
+ "sections_seen": [
+ "Vehicle, Aviation & Maritime"
+ ],
+ "archived": false
+ },
+ {
+ "id": "flipper-zero",
+ "name": "Flipper Zero",
+ "description": "Multi-tool for pentesters and geeks — RF/RFID/NFC/IR/GPIO",
+ "category": "hardware-hacking",
+ "url": "https://flipperzero.one",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[flipperzero.one](https://flipperzero.one)"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "fluxion",
+ "name": "Fluxion",
+ "description": "Wi-Fi social engineering (evil twin)",
+ "category": "domain-ip-network",
+ "url": "https://github.com/FluxionNetwork/fluxion",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/FluxionNetwork/fluxion`",
+ "raw": "`git clone https://github.com/FluxionNetwork/fluxion`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "foca",
+ "name": "FOCA",
+ "description": "Metadata extraction from documents",
+ "category": "image-facial",
+ "url": "https://github.com/ElevenPaths/FOCA",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/ElevenPaths/FOCA`",
+ "raw": "`git clone https://github.com/ElevenPaths/FOCA`"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FOCA"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "fofa",
+ "name": "FOFA",
+ "description": "Asset search and analysis tool",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FOFA",
+ "raw": "FOFA"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "FOFA"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "foia.gov",
+ "name": "FOIA.gov",
+ "description": "Freedom of Information Act portal",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://foia.gov/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[foia.gov](https://foia.gov/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "foller-me",
+ "name": "Foller.me",
+ "description": "Twitter analytics — bio, languages, hashtags, mentions",
+ "category": "username-social",
+ "url": "https://foller.me",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[foller.me](https://foller.me)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "foremost",
+ "name": "Foremost",
+ "description": "File carving (recover deleted files)",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install foremost`",
+ "raw": "`apt install foremost`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Foremost"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "forensically",
+ "name": "Forensically",
+ "description": "Online image forensics suite",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Forensically",
+ "raw": "Forensically"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Forensically"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "forensicallybeta",
+ "name": "Forensically Beta",
+ "description": "Online image forensics — clone detection, level sweep",
+ "category": "image-facial",
+ "url": "https://29a.ch/photo-forensics",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[29a.ch](https://29a.ch/photo-forensics)"
+ },
+ "tags": [
+ "image-facial",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "fotoforensics",
+ "name": "FotoForensics",
+ "description": "Image forensic analysis (ELA)",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FotoForensics",
+ "raw": "FotoForensics"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "FotoForensics"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "frida",
+ "name": "Frida",
+ "description": "Dynamic instrumentation toolkit",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install frida-tools`",
+ "raw": "`pip install frida-tools`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "fsociety",
+ "name": "fsociety",
+ "description": "Mr. Robot-inspired hacking framework",
+ "category": "frameworks",
+ "url": "https://github.com/Manisso/fsociety",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Manisso/fsociety`",
+ "raw": "`git clone https://github.com/Manisso/fsociety`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "fsociety"
+ ],
+ "sections_seen": [
+ "Termux Hacking Toolkit (Complete)"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ftk-imager",
+ "name": "FTK Imager",
+ "description": "Forensic disk imaging tool by AccessData",
+ "category": "digital-forensics",
+ "url": "https://www.exterro.com/ftk-imager",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.exterro.com](https://www.exterro.com/ftk-imager)"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "fullcontact",
+ "name": "FullContact",
+ "description": "Identity-resolution API and person enrichment",
+ "category": "people-identity",
+ "url": "https://www.fullcontact.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.fullcontact.com](https://www.fullcontact.com)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "fullhunt",
+ "name": "FullHunt",
+ "description": "External attack surface management",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "FullHunt",
+ "raw": "FullHunt"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "FullHunt"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "gau",
+ "name": "gau (getallurls)",
+ "description": "Fetch URLs from AlienVault OTX, Wayback, Common Crawl, URLScan",
+ "category": "domain-ip-network",
+ "url": "https://github.com/lc/gau",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/lc/gau/v2/cmd/gau@latest",
+ "raw": "`go install github.com/lc/gau/v2/cmd/gau@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "geocreepy",
+ "name": "Geocreepy",
+ "description": "Geolocation aggregator — pulls geotagged posts across networks",
+ "category": "geolocation",
+ "url": "http://www.geocreepy.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.geocreepy.com](http://www.geocreepy.com)"
+ },
+ "tags": [
+ "geolocation",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "geoguessr",
+ "name": "GeoGuessr",
+ "description": "Geolocation training game",
+ "category": "geolocation",
+ "url": "https://geoguessr.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[geoguessr.com](https://geoguessr.com/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "geohints",
+ "name": "GeoHints",
+ "description": "Browser-based satellite/streetview geolocation training & investigation",
+ "category": "geolocation",
+ "url": "https://geohints.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[geohints.com](https://geohints.com)"
+ },
+ "tags": [
+ "geolocation",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "geospy",
+ "name": "GeoSpy",
+ "description": "AI-powered image geolocation",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "GeoSpy",
+ "raw": "GeoSpy"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "GeoSpy"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "geospy-pro",
+ "name": "GeoSpy Pro",
+ "description": "Premium AI image geolocation by Graylark",
+ "category": "geolocation",
+ "url": "https://geospy.ai/pro",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[geospy.ai](https://geospy.ai/pro)"
+ },
+ "tags": [
+ "geolocation",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "get-metadata",
+ "name": "Get-Metadata.com",
+ "description": "Online EXIF extractor — handles .DOCX/.PDF too",
+ "category": "document-metadata",
+ "url": "https://www.get-metadata.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.get-metadata.com](https://www.get-metadata.com)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "getcontact",
+ "name": "GetContact",
+ "description": "See how number is saved by others",
+ "category": "email-phone",
+ "url": "https://getcontact.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[getcontact.com](https://getcontact.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "getnotify",
+ "name": "GetNotify",
+ "description": "Email open tracking + geolocation",
+ "category": "email-phone",
+ "url": "https://getnotify.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[getnotify.com](https://getnotify.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "GetNotify"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "gf-tomnomnom",
+ "name": "gf",
+ "description": "Wrapper around grep with patterns for bug-bounty workflow",
+ "category": "domain-ip-network",
+ "url": "https://github.com/tomnomnom/gf",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tomnomnom/gf@latest",
+ "raw": "`go install github.com/tomnomnom/gf@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ghauri",
+ "name": "Ghauri",
+ "description": "Advanced cross-platform tool to detect/exploit SQLi",
+ "category": "red-team-offensive",
+ "url": "https://github.com/r0oth3x49/ghauri",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/r0oth3x49/ghauri.git",
+ "raw": "`git clone https://github.com/r0oth3x49/ghauri.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ghdb",
+ "name": "Google Hacking Database (GHDB)",
+ "description": "Index of dorks for finding publicly exposed info",
+ "category": "search-dorking",
+ "url": "https://www.exploit-db.com/google-hacking-database",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.exploit-db.com](https://www.exploit-db.com/google-hacking-database)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ghidra",
+ "name": "Ghidra",
+ "description": "NSA's open-source software reverse engineering suite",
+ "category": "digital-forensics",
+ "url": "https://ghidra-sre.org",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/NationalSecurityAgency/ghidra.git",
+ "raw": "`git clone https://github.com/NationalSecurityAgency/ghidra.git`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ghiro",
+ "name": "Ghiro",
+ "description": "Automated digital image forensics",
+ "category": "image-facial",
+ "url": "https://www.getghiro.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.getghiro.org](https://www.getghiro.org)"
+ },
+ "tags": [
+ "image-facial",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ghunt",
+ "name": "GHunt",
+ "description": "Investigate Google emails and documents",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install ghunt`",
+ "raw": "`pip3 install ghunt`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "GHunt"
+ ],
+ "sections_seen": [
+ "Email & Phone Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "githound",
+ "name": "git-hound",
+ "description": "Find sensitive data exposed via GitHub code search",
+ "category": "document-metadata",
+ "url": "https://github.com/tillson/git-hound",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tillson/git-hound@latest",
+ "raw": "`go install github.com/tillson/git-hound@latest`"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "github_monitor",
+ "name": "github_monitor",
+ "description": "Real-time tracking of GitHub user activity and repo changes",
+ "category": "username-social",
+ "url": "https://github.com/misiektoja/github_monitor",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/misiektoja/github_monitor.git",
+ "raw": "`git clone https://github.com/misiektoja/github_monitor.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "gitleaks",
+ "name": "gitleaks",
+ "description": "Detect secrets, credentials, and API keys in git repos",
+ "category": "document-metadata",
+ "url": "https://github.com/gitleaks/gitleaks",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/gitleaks/gitleaks/v8@latest",
+ "raw": "`go install github.com/gitleaks/gitleaks/v8@latest`"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "gitrecon",
+ "name": "Gitrecon",
+ "description": "GitHub OSINT reconnaissance",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install gitrecon`",
+ "raw": "`pip install gitrecon`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Gitrecon"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "gnu-radio",
+ "name": "GNU Radio",
+ "description": "Toolkit for building software-defined radio systems",
+ "category": "hardware-hacking",
+ "url": "https://www.gnuradio.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install gnuradio",
+ "raw": "`apt install gnuradio`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "gobuster",
+ "name": "Gobuster",
+ "description": "URI/DNS brute-forcer (Go)",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/OJ/gobuster/v3@latest`",
+ "raw": "`go install github.com/OJ/gobuster/v3@latest`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "goldeneye",
+ "name": "GoldenEye",
+ "description": "HTTP DoS tool (authorized load testing)",
+ "category": "domain-ip-network",
+ "url": "https://github.com/jseidl/GoldenEye",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/jseidl/GoldenEye`",
+ "raw": "`git clone https://github.com/jseidl/GoldenEye`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "goofuzz",
+ "name": "GooFuzz",
+ "description": "Google dorking fuzzer",
+ "category": "search-dorking",
+ "url": "https://github.com/m3n0sd0n4ld/GooFuzz",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`",
+ "raw": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "GooFuzz"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "google-alerts",
+ "name": "Google Alerts",
+ "description": "Free web monitoring",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Searcher Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "google-earth-pro",
+ "name": "Google Earth Pro",
+ "description": "Advanced satellite imagery",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Google Earth Pro",
+ "raw": "Google Earth Pro"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Google Earth Pro"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "google-gemini",
+ "name": "Google Gemini",
+ "description": "Google AI with web search",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "google-hacking-db",
+ "name": "Google Hacking DB",
+ "description": "Exploit-DB Google dork database",
+ "category": "search-dorking",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Google Hacking DB",
+ "raw": "Google Hacking DB"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Google Hacking DB"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "google-reverse-image",
+ "name": "Google Reverse Image",
+ "description": "Google image search",
+ "category": "image-facial",
+ "url": "https://images.google.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[images.google.com](https://images.google.com/)"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "googleguide",
+ "name": "Google Guide Advanced Operators",
+ "description": "Reference for Google search operators",
+ "category": "search-dorking",
+ "url": "http://www.googleguide.com/advanced_operators_reference.html",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.googleguide.com](http://www.googleguide.com/advanced_operators_reference.html)"
+ },
+ "tags": [
+ "search-dorking",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "gophish",
+ "name": "Gophish",
+ "description": "Enterprise phishing simulation platform",
+ "category": "people-identity",
+ "url": "https://getgophish.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[getgophish.com](https://getgophish.com/)"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "gosearch",
+ "name": "GoSearch",
+ "description": "Fast username search tool in Go",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/ibnaleem/gosearch@latest`",
+ "raw": "`go install github.com/ibnaleem/gosearch@latest`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "GoSearch"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "gospider",
+ "name": "GoSpider",
+ "description": "Fast Go web spider for crawling/audit",
+ "category": "domain-ip-network",
+ "url": "https://github.com/jaeles-project/gospider",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/jaeles-project/gospider@latest",
+ "raw": "`go install github.com/jaeles-project/gospider@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "gowitness",
+ "name": "gowitness",
+ "description": "Modern Go-based web screenshot utility (Aquatone successor)",
+ "category": "domain-ip-network",
+ "url": "https://github.com/sensepost/gowitness",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/sensepost/gowitness@latest",
+ "raw": "`go install github.com/sensepost/gowitness@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "gqrx",
+ "name": "Gqrx SDR",
+ "description": "Software-defined radio receiver GUI",
+ "category": "hardware-hacking",
+ "url": "https://gqrx.dk",
+ "install": {
+ "method": "apt",
+ "kali": "apt install gqrx-sdr",
+ "raw": "`apt install gqrx-sdr`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "grabify",
+ "name": "Grabify",
+ "description": "IP grabber & URL shortener",
+ "category": "geolocation",
+ "url": "https://grabify.link/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[grabify.link](https://grabify.link/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "IP Tracking & Geolocation Links"
+ ],
+ "archived": false
+ },
+ {
+ "id": "grayhatwarfare",
+ "name": "GrayhatWarfare",
+ "description": "Index of open Amazon S3 buckets — find exposed cloud data",
+ "category": "domain-ip-network",
+ "url": "https://grayhatwarfare.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[grayhatwarfare.com](https://grayhatwarfare.com)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "graylog",
+ "name": "Graylog",
+ "description": "Open-source log management / SIEM",
+ "category": "blue-team-defensive",
+ "url": "https://www.graylog.org",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull graylog/graylog:latest",
+ "raw": "`docker pull graylog/graylog:latest`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "grep.app",
+ "name": "Grep.app",
+ "description": "Search code across all public GitHub repos",
+ "category": "search-dorking",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Grep.app",
+ "raw": "Grep.app"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Grep.app"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "greynoise",
+ "name": "GreyNoise",
+ "description": "Search exposed internet assets and malicious IPs",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "GreyNoise",
+ "raw": "GreyNoise"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "GreyNoise"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "greynoise-cli",
+ "name": "GreyNoise CLI",
+ "description": "Command-line tool for GreyNoise mass-scanner intel",
+ "category": "iot-devices",
+ "url": "https://github.com/GreyNoise-Intelligence/pygreynoise",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install greynoise",
+ "raw": "`pip3 install greynoise`"
+ },
+ "tags": [
+ "iot-devices",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "greynoise-viz",
+ "name": "GreyNoise Visualizer",
+ "description": "Tells you which IPs are noise vs targeted threats",
+ "category": "iot-devices",
+ "url": "https://viz.greynoise.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[viz.greynoise.io](https://viz.greynoise.io)"
+ },
+ "tags": [
+ "iot-devices",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "grok",
+ "name": "Grok",
+ "description": "Real-time X/Twitter data",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free on X",
+ "raw": "✅ Free on X"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "gxss-tomnomnom",
+ "name": "Gxss",
+ "description": "Test parameters for cross-site scripting reflection",
+ "category": "red-team-offensive",
+ "url": "https://github.com/KathanP19/Gxss",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/KathanP19/Gxss@latest",
+ "raw": "`go install github.com/KathanP19/Gxss@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "h8mail",
+ "name": "h8mail",
+ "description": "Email OSINT & breach hunting",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install h8mail`",
+ "raw": "`pip install h8mail`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "h8mail"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hacker101",
+ "name": "Hacker101",
+ "description": "Free HackerOne course library and CTF",
+ "category": "training-ctf",
+ "url": "https://www.hacker101.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.hacker101.com](https://www.hacker101.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hackerone",
+ "name": "HackerOne",
+ "description": "Largest bug-bounty platform — public and private programs",
+ "category": "bug-bounty",
+ "url": "https://hackerone.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[hackerone.com](https://hackerone.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hacking-art-of-exploitation",
+ "name": "Hacking: The Art of Exploitation (book)",
+ "description": "Classic by Jon Erickson — low-level attack fundamentals",
+ "category": "learning-resources",
+ "url": "https://nostarch.com/hacking2.htm",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[nostarch.com](https://nostarch.com/hacking2.htm)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hackingtool",
+ "name": "Hackingtool",
+ "description": "All-in-one hacking tool (100+ categories)",
+ "category": "frameworks",
+ "url": "https://github.com/Z4nzu/hackingtool",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Z4nzu/hackingtool`",
+ "raw": "`git clone https://github.com/Z4nzu/hackingtool`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Hackingtool"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hackrf",
+ "name": "HackRF One",
+ "description": "SDR transceiver covering 1 MHz to 6 GHz",
+ "category": "hardware-hacking",
+ "url": "https://greatscottgadgets.com/hackrf/",
+ "install": {
+ "method": "apt",
+ "kali": "apt install hackrf",
+ "raw": "`apt install hackrf`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hackthebox",
+ "name": "Hack The Box",
+ "description": "Online pentesting labs and CTFs",
+ "category": "training-ctf",
+ "url": "https://www.hackthebox.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.hackthebox.com](https://www.hackthebox.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hacktricks",
+ "name": "HackTricks",
+ "description": "Pentesting / hacking knowledge base by carlospolop",
+ "category": "red-team-offensive",
+ "url": "https://book.hacktricks.xyz",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[book.hacktricks.xyz](https://book.hacktricks.xyz)"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hacktrophy",
+ "name": "HackTrophy",
+ "description": "European bug-bounty platform",
+ "category": "bug-bounty",
+ "url": "https://hacktrophy.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[hacktrophy.com](https://hacktrophy.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hak5-tools",
+ "name": "Hak5 Tools (Bash Bunny, Rubber Ducky, Wi-Fi Pineapple)",
+ "description": "Premium offensive hardware tools",
+ "category": "hardware-hacking",
+ "url": "https://shop.hak5.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[shop.hak5.org](https://shop.hak5.org)"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hakrawler",
+ "name": "hakrawler",
+ "description": "Fast Go web crawler for endpoint and asset discovery",
+ "category": "domain-ip-network",
+ "url": "https://github.com/hakluke/hakrawler",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/hakluke/hakrawler@latest",
+ "raw": "`go install github.com/hakluke/hakrawler@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "harpa-ai",
+ "name": "HARPA AI",
+ "description": "AI browser agent for OSINT",
+ "category": "misc",
+ "url": "https://harpa.ai/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[harpa.ai](https://harpa.ai/)"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "harpoon",
+ "name": "Harpoon",
+ "description": "CLI tool for OSINT investigations",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install harpoon`",
+ "raw": "`pip3 install harpoon`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Harpoon"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hashcat",
+ "name": "Hashcat",
+ "description": "Advanced password recovery (GPU-accelerated)",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install hashcat`",
+ "raw": "`apt install hashcat`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Hashcat"
+ ],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hashlookup-circl",
+ "name": "CIRCL Hashlookup",
+ "description": "Free public hashlookup for known software files",
+ "category": "malware-threat-intel",
+ "url": "https://www.circl.lu/services/hashlookup",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.circl.lu](https://www.circl.lu/services/hashlookup)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "have-i-been-pwned",
+ "name": "Have I Been Pwned",
+ "description": "Check email/phone in breaches",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟢 Free",
+ "raw": "🟢 Free"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Have I Been Pwned"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "haveibeenransom",
+ "name": "HIB Ransomed",
+ "description": "Check if your data has been leaked by ransomware groups",
+ "category": "data-breach",
+ "url": "https://haveibeenransom.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[haveibeenransom.com](https://haveibeenransom.com)"
+ },
+ "tags": [
+ "data-breach",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "haveibeenzuckered",
+ "name": "haveibeenzuckered",
+ "description": "Check if a phone number is in the 533M Facebook breach",
+ "category": "data-breach",
+ "url": "https://haveibeenzuckered.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[haveibeenzuckered.com](https://haveibeenzuckered.com)"
+ },
+ "tags": [
+ "data-breach",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "havoc",
+ "name": "Havoc",
+ "description": "Modern, malleable post-exploitation C2 framework",
+ "category": "red-team-offensive",
+ "url": "https://github.com/HavocFramework/Havoc",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/HavocFramework/Havoc.git",
+ "raw": "`git clone https://github.com/HavocFramework/Havoc.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hayabusa",
+ "name": "Hayabusa",
+ "description": "Windows event log fast forensics timeline generator",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/Yamato-Security/hayabusa",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/Yamato-Security/hayabusa.git",
+ "raw": "`git clone https://github.com/Yamato-Security/hayabusa.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "haystak",
+ "name": "Haystak",
+ "description": "Dark web search with filtering",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`",
+ "raw": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Haystak"
+ ],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hcxtools",
+ "name": "hcxtools",
+ "description": "Wi-Fi packet capture conversion",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install hcxtools`",
+ "raw": "`apt install hcxtools`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hidden-wiki",
+ "name": "The Hidden Wiki",
+ "description": "Curated directory of dark-web sites (mirror-dependent)",
+ "category": "dark-web",
+ "url": "https://thehiddenwiki.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[thehiddenwiki.org](https://thehiddenwiki.org)"
+ },
+ "tags": [
+ "dark-web",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hive-moderation",
+ "name": "Hive Moderation",
+ "description": "AI content detection",
+ "category": "image-facial",
+ "url": "https://hivemoderation.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[hivemoderation.com](https://hivemoderation.com/)"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hlr-lookups",
+ "name": "Hlr-Lookups",
+ "description": "HLR phone number lookup",
+ "category": "email-phone",
+ "url": "https://www.hlr-lookups.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[hlr-lookups.com](https://www.hlr-lookups.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "holehe",
+ "name": "Holehe",
+ "description": "Check if email is registered on 120+ sites",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install holehe`",
+ "raw": "`pip install holehe`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Holehe"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hootsuite",
+ "name": "Hootsuite",
+ "description": "Social media management",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Searcher Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "httprobe",
+ "name": "httprobe",
+ "description": "Take a list of domains and probe for working HTTP/HTTPS",
+ "category": "domain-ip-network",
+ "url": "https://github.com/tomnomnom/httprobe",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tomnomnom/httprobe@latest",
+ "raw": "`go install github.com/tomnomnom/httprobe@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "httpx",
+ "name": "HTTPx",
+ "description": "Fast HTTP toolkit / probing",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`",
+ "raw": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "HTTPx"
+ ],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hudson-rock",
+ "name": "Hudson Rock",
+ "description": "Free infostealer-compromise check tools (domain/email/IP)",
+ "category": "people-identity",
+ "url": "https://www.hudsonrock.com/free-tools",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.hudsonrock.com](https://www.hudsonrock.com/free-tools)"
+ },
+ "tags": [
+ "people-identity",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hudson-rock-cavalier",
+ "name": "Hudson Rock Cavalier",
+ "description": "Infostealer intelligence & breach data",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Hudson Rock Cavalier"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "huggingchat",
+ "name": "HuggingChat",
+ "description": "Open-source AI chat",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hunter.how",
+ "name": "Hunter.how",
+ "description": "Internet asset search and discovery",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Hunter.how",
+ "raw": "Hunter.how"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Hunter.how"
+ ],
+ "sections_seen": [
+ "IoT & Device Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hunter.io",
+ "name": "Hunter.io",
+ "description": "Find professional email addresses by domain",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Hunter.io",
+ "raw": "Hunter.io"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Hunter.io"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "hybrid-analysis",
+ "name": "Hybrid Analysis",
+ "description": "Free advanced malware analysis service by CrowdStrike",
+ "category": "malware-threat-intel",
+ "url": "https://www.hybrid-analysis.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.hybrid-analysis.com](https://www.hybrid-analysis.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "hydra",
+ "name": "Hydra",
+ "description": "Network login brute-forcer",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install hydra`",
+ "raw": "`apt install hydra`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Hydra"
+ ],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "icij-offshore-leaks",
+ "name": "ICIJ Offshore Leaks",
+ "description": "Panama/Pandora/Paradise Papers",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ICIJ Offshore Leaks",
+ "raw": "ICIJ Offshore Leaks"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "ICIJ Offshore Leaks"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ida-free",
+ "name": "IDA Free",
+ "description": "Free version of IDA disassembler/decompiler",
+ "category": "digital-forensics",
+ "url": "https://hex-rays.com/ida-free/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[hex-rays.com](https://hex-rays.com/ida-free/)"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "idcrawl",
+ "name": "IDCrawl",
+ "description": "Free people search engine",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "IDCrawl",
+ "raw": "IDCrawl"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "IDCrawl"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ignorant",
+ "name": "Ignorant",
+ "description": "Check phone registrations on sites",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install ignorant`",
+ "raw": "`pip install ignorant`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Ignorant"
+ ],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ikyourdad",
+ "name": "IKnowYour.Dad",
+ "description": "Data breach search engine",
+ "category": "data-breach",
+ "url": "https://iknowyour.dad",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[iknowyour.dad](https://iknowyour.dad)"
+ },
+ "tags": [
+ "data-breach",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "illuminarty",
+ "name": "Illuminarty",
+ "description": "AI image detection",
+ "category": "image-facial",
+ "url": "https://illuminarty.ai/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[illuminarty.ai](https://illuminarty.ai/)"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "imgur-search",
+ "name": "Imgur",
+ "description": "Image hosting — meme tracing and reverse search",
+ "category": "image-facial",
+ "url": "https://imgur.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[imgur.com](https://imgur.com)"
+ },
+ "tags": [
+ "image-facial",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "immersivelabs",
+ "name": "Immersive Labs",
+ "description": "Cyber skills platform with hands-on exercises",
+ "category": "training-ctf",
+ "url": "https://www.immersivelabs.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.immersivelabs.com](https://www.immersivelabs.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "immunefi",
+ "name": "Immunefi",
+ "description": "Web3 / crypto-focused bug bounty platform",
+ "category": "bug-bounty",
+ "url": "https://immunefi.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[immunefi.com](https://immunefi.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "impacket",
+ "name": "Impacket",
+ "description": "Python classes for working with network protocols (Windows attacks)",
+ "category": "red-team-offensive",
+ "url": "https://github.com/fortra/impacket",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install impacket",
+ "raw": "`pip3 install impacket`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "infoga",
+ "name": "Infoga",
+ "description": "Email OSINT gathering",
+ "category": "email-phone",
+ "url": "https://github.com/m4ll0k/Infoga",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/m4ll0k/Infoga`",
+ "raw": "`git clone https://github.com/m4ll0k/Infoga`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Infoga"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "insecam",
+ "name": "Insecam",
+ "description": "Live cameras directory",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Insecam",
+ "raw": "Insecam"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Insecam"
+ ],
+ "sections_seen": [
+ "IoT & Device Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "instagram_monitor",
+ "name": "instagram_monitor",
+ "description": "Real-time tracking of Instagram users with email alerts and CSV logs",
+ "category": "username-social",
+ "url": "https://github.com/misiektoja/instagram_monitor",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/misiektoja/instagram_monitor.git",
+ "raw": "`git clone https://github.com/misiektoja/instagram_monitor.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "instaloader",
+ "name": "Instaloader",
+ "description": "Instagram data downloader",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install instaloader`",
+ "raw": "`pip install instaloader`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "instant-username-search",
+ "name": "Instant Username Search",
+ "description": "Real-time username availability checker",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Instant Username Search",
+ "raw": "Instant Username Search"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Instant Username Search"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "intel-471",
+ "name": "Intel 471",
+ "description": "Cybercrime intelligence platform",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Intel 471",
+ "raw": "Intel 471"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Intel 471"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "intel471",
+ "name": "Intel471",
+ "description": "Premium adversary intelligence and underground monitoring platform",
+ "category": "threat-intel-platforms",
+ "url": "https://intel471.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[intel471.com](https://intel471.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "intelligence-x",
+ "name": "Intelligence X",
+ "description": "Search breaches, darknet, leaks",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "💰 Paid",
+ "raw": "💰 Paid"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Intelligence X"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "intelx",
+ "name": "Intelligence X (intelx.io)",
+ "description": "Selective archive search — emails, leaks, paste sites, dark-web",
+ "category": "search-dorking",
+ "url": "https://intelx.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[intelx.io](https://intelx.io)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "interlace",
+ "name": "Interlace",
+ "description": "Easily turn single-threaded CLI apps into multi-threaded jobs",
+ "category": "domain-ip-network",
+ "url": "https://github.com/codingo/Interlace",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/codingo/Interlace.git",
+ "raw": "`git clone https://github.com/codingo/Interlace.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "intigriti",
+ "name": "Intigriti",
+ "description": "European bug-bounty platform with fast triage",
+ "category": "bug-bounty",
+ "url": "https://www.intigriti.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.intigriti.com](https://www.intigriti.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "intsights",
+ "name": "IntSights",
+ "description": "External threat protection and intel (now part of Rapid7)",
+ "category": "threat-intel-platforms",
+ "url": "https://intsights.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[intsights.com](https://intsights.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "investigo",
+ "name": "Investigo",
+ "description": "Username checker (Go-based)",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/tdh8316/investigo@latest`",
+ "raw": "`go install github.com/tdh8316/investigo@latest`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Investigo"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "invid",
+ "name": "InVID",
+ "description": "Video verification toolkit (browser extension)",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "InVID",
+ "raw": "InVID"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "InVID"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ip-api",
+ "name": "IP-API",
+ "description": "IP geolocation API",
+ "category": "geolocation",
+ "url": "http://ip-api.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[ip-api.com](http://ip-api.com/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "IP Tracking & Geolocation Links"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ipgeolocation",
+ "name": "IPGeoLocation",
+ "description": "IP address geolocation",
+ "category": "domain-ip-network",
+ "url": "https://github.com/maldevel/IPGeoLocation",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/maldevel/IPGeoLocation`",
+ "raw": "`git clone https://github.com/maldevel/IPGeoLocation`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "IPGeoLocation"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ipinfo",
+ "name": "IPinfo",
+ "description": "IP address data & geolocation",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "IPinfo",
+ "raw": "IPinfo"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "IPinfo"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "iplogger",
+ "name": "IPLogger",
+ "description": "IP logging URL shortener",
+ "category": "geolocation",
+ "url": "https://iplogger.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[iplogger.org](https://iplogger.org/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "IP Tracking & Geolocation Links"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ippsec-rocks",
+ "name": "IppSec.rocks",
+ "description": "Indexed walkthroughs of HackTheBox machines (video)",
+ "category": "learning-resources",
+ "url": "https://ippsec.rocks",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[ippsec.rocks](https://ippsec.rocks)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ivpn",
+ "name": "IVPN",
+ "description": "Privacy-first VPN — open-source, audited, no email signup",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Website",
+ "raw": "Website"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Paid only — included for privacy excellence",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:WireGuard, OpenVPN"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "IVPN"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "jadx",
+ "name": "jadx",
+ "description": "Android APK decompiler (GUI)",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install jadx`",
+ "raw": "`apt install jadx`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "joe-sandbox",
+ "name": "Joe Sandbox",
+ "description": "Deep automated malware analysis (free tier)",
+ "category": "malware-threat-intel",
+ "url": "https://www.joesandbox.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.joesandbox.com](https://www.joesandbox.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "john-hammond",
+ "name": "John Hammond",
+ "description": "Cybersecurity YouTube — CTFs, malware, walkthroughs",
+ "category": "learning-resources",
+ "url": "https://www.youtube.com/@_JohnHammond",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.youtube.com](https://www.youtube.com/@_JohnHammond)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "john-the-ripper",
+ "name": "John the Ripper",
+ "description": "Classic password cracker",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install john`",
+ "raw": "`apt install john`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "John the Ripper"
+ ],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "jsfinder",
+ "name": "JSFinder",
+ "description": "Find JS files referenced from a URL — endpoints / API paths",
+ "category": "domain-ip-network",
+ "url": "https://github.com/Threezh1/JSFinder",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/Threezh1/JSFinder.git",
+ "raw": "`git clone https://github.com/Threezh1/JSFinder.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "juice-shop",
+ "name": "OWASP Juice Shop",
+ "description": "Modern, intentionally insecure web app — covers OWASP Top 10",
+ "category": "training-ctf",
+ "url": "https://github.com/juice-shop/juice-shop",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull bkimminich/juice-shop",
+ "raw": "`docker pull bkimminich/juice-shop`"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "kagi",
+ "name": "Kagi Search",
+ "description": "Premium privacy-respecting search engine, no ads, no tracking",
+ "category": "search-dorking",
+ "url": "https://kagi.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[kagi.com](https://kagi.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "kape",
+ "name": "KAPE",
+ "description": "Kroll Artifact Parser and Extractor — fast triage collection",
+ "category": "digital-forensics",
+ "url": "https://www.kroll.com/kape",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.kroll.com](https://www.kroll.com/kape)"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "kartaview",
+ "name": "KartaView",
+ "description": "Street-level imagery (OpenStreetCam)",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "KartaView",
+ "raw": "KartaView"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "KartaView"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "katana",
+ "name": "Katana",
+ "description": "Web crawler",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`",
+ "raw": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "keepassxc",
+ "name": "KeePassXC",
+ "description": "Offline password manager",
+ "category": "vpn-privacy",
+ "url": "https://keepassxc.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[keepassxc.org](https://keepassxc.org/)"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "kela",
+ "name": "KELA",
+ "description": "Cybercrime intelligence and dark-web monitoring",
+ "category": "threat-intel-platforms",
+ "url": "https://kelacyber.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[kelacyber.com](https://kelacyber.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "kerbrute",
+ "name": "Kerbrute",
+ "description": "Tool for performing Kerberos pre-auth bruteforcing",
+ "category": "red-team-offensive",
+ "url": "https://github.com/ropnop/kerbrute",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/ropnop/kerbrute@latest",
+ "raw": "`go install github.com/ropnop/kerbrute@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "king-phisher",
+ "name": "King Phisher",
+ "description": "Phishing campaign toolkit",
+ "category": "people-identity",
+ "url": "https://github.com/rsmusllp/king-phisher",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher)"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "kismet",
+ "name": "Kismet",
+ "description": "Wireless network detector & sniffer",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install kismet`",
+ "raw": "`apt install kismet`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "kiterunner",
+ "name": "kiterunner",
+ "description": "Contextual content-discovery for modern API endpoints",
+ "category": "red-team-offensive",
+ "url": "https://github.com/assetnote/kiterunner",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/assetnote/kiterunner/cmd/kr@latest",
+ "raw": "`go install github.com/assetnote/kiterunner/cmd/kr@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "knock",
+ "name": "knock",
+ "description": "Domain knock — security testing via DNS",
+ "category": "domain-ip-network",
+ "url": "https://github.com/guelfoweb/knock",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/guelfoweb/knock.git",
+ "raw": "`git clone https://github.com/guelfoweb/knock.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "knockpy",
+ "name": "Knockpy",
+ "description": "Subdomain enumeration scan with virtual host discovery",
+ "category": "domain-ip-network",
+ "url": "https://github.com/guelfoweb/knock",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install knock-subdomains",
+ "raw": "`pip3 install knock-subdomains`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "knowem",
+ "name": "KnowEm",
+ "description": "Username search on 500+ sites",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "KnowEm",
+ "raw": "KnowEm"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "KnowEm"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "lantern",
+ "name": "Lantern",
+ "description": "Free censorship circumvention tool — peer-to-peer",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Website",
+ "raw": "Website"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:500MB/month free",
+ "open-source:✅",
+ "no-log:⚠️",
+ "protocols:Proprietary"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Lantern"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "lazagne",
+ "name": "LaZagne",
+ "description": "Credentials recovery tool (post-exploit)",
+ "category": "data-breach",
+ "url": "https://github.com/AlessandroZ/LaZagne",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/AlessandroZ/LaZagne`",
+ "raw": "`git clone https://github.com/AlessandroZ/LaZagne`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "leakcheck",
+ "name": "LeakCheck",
+ "description": "Email/username/phone breach search",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "LeakCheck"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "leakpeek",
+ "name": "LeakPeek",
+ "description": "Search leaked databases",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "LeakPeek"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "lei-search",
+ "name": "LEI Search",
+ "description": "Legal Entity Identifier lookup",
+ "category": "company-business",
+ "url": "https://search.gleif.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[search.gleif.org](https://search.gleif.org/)"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "lenso.ai",
+ "name": "Lenso.ai",
+ "description": "Reverse image search with facial recognition",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Lenso.ai",
+ "raw": "Lenso.ai"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Lenso.ai"
+ ],
+ "sections_seen": [
+ "Image & Facial Recognition"
+ ],
+ "archived": false
+ },
+ {
+ "id": "linkedin2username",
+ "name": "linkedin2username",
+ "description": "Generate usernames from a target's LinkedIn employees",
+ "category": "people-identity",
+ "url": "https://github.com/initstring/linkedin2username",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/initstring/linkedin2username.git",
+ "raw": "`git clone https://github.com/initstring/linkedin2username.git`"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "linkedindumper",
+ "name": "LinkedInDumper",
+ "description": "Dump/scrape company employees from LinkedIn API",
+ "category": "username-social",
+ "url": "https://github.com/l4rm4nd/LinkedInDumper",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/l4rm4nd/LinkedInDumper.git",
+ "raw": "`git clone https://github.com/l4rm4nd/LinkedInDumper.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "linkfinder",
+ "name": "LinkFinder",
+ "description": "Discover endpoints in JavaScript",
+ "category": "domain-ip-network",
+ "url": "https://github.com/GerbenJavado/LinkFinder",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/GerbenJavado/LinkFinder`",
+ "raw": "`git clone https://github.com/GerbenJavado/LinkFinder`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "linux-for-osint-cipher387",
+ "name": "Linux for OSINT (cipher387)",
+ "description": "21-day Linux-for-OSINT course (free)",
+ "category": "learning-resources",
+ "url": "https://github.com/cipher387/linux-for-OSINT-21-days",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/cipher387/linux-for-OSINT-21-days.git",
+ "raw": "`git clone https://github.com/cipher387/linux-for-OSINT-21-days.git`"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "liveoverflow",
+ "name": "LiveOverflow",
+ "description": "Hacking and security YouTube — deep technical content",
+ "category": "learning-resources",
+ "url": "https://www.youtube.com/@LiveOverflow",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.youtube.com](https://www.youtube.com/@LiveOverflow)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "loki-yara",
+ "name": "Loki",
+ "description": "Simple IOC and YARA scanner by Florian Roth",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/Neo23x0/Loki",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/Neo23x0/Loki.git",
+ "raw": "`git clone https://github.com/Neo23x0/Loki.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mac-changer",
+ "name": "MAC Changer",
+ "description": "Change/spoof MAC address",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install macchanger`",
+ "raw": "`apt install macchanger`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "MAC Changer"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "maigret",
+ "name": "Maigret",
+ "description": "Advanced username search across 3000+ sites with reports",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install maigret`",
+ "raw": "`pip install maigret`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Maigret"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mailheaderdetective",
+ "name": "MailHeaderDetective",
+ "description": "Email header forensics",
+ "category": "email-phone",
+ "url": "https://github.com/akajhon/MailHeaderDetective",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/akajhon/MailHeaderDetective`",
+ "raw": "`git clone https://github.com/akajhon/MailHeaderDetective`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mailtoanalyzer",
+ "name": "mailtoanalyzer",
+ "description": "Email exposure analysis",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install mailto-analyzer`",
+ "raw": "`pip install mailto-analyzer`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "malpedia",
+ "name": "Malpedia",
+ "description": "Threat-actor groups, malware families, and analysis by Fraunhofer",
+ "category": "malware-threat-intel",
+ "url": "https://malpedia.caad.fkie.fraunhofer.de",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[malpedia.caad.fkie.fraunhofer.de](https://malpedia.caad.fkie.fraunhofer.de)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "malshare",
+ "name": "MalShare",
+ "description": "Free malware sample repository for researchers",
+ "category": "malware-threat-intel",
+ "url": "https://malshare.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[malshare.com](https://malshare.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "maltego",
+ "name": "Maltego",
+ "description": "Visual OSINT link analysis platform",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install maltego`",
+ "raw": "`apt install maltego`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Maltego"
+ ],
+ "sections_seen": [
+ "Kali Linux OSINT Toolkit"
+ ],
+ "archived": false
+ },
+ {
+ "id": "malwarebazaar",
+ "name": "MalwareBazaar",
+ "description": "Search & download confirmed malware samples",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "MalwareBazaar",
+ "raw": "MalwareBazaar"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "MalwareBazaar"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mandiant-advantage",
+ "name": "Mandiant Advantage",
+ "description": "Threat intel from Google's Mandiant team",
+ "category": "threat-intel-platforms",
+ "url": "https://www.mandiant.com/advantage",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.mandiant.com](https://www.mandiant.com/advantage)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mapillary",
+ "name": "Mapillary",
+ "description": "Street-level imagery",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Mapillary",
+ "raw": "Mapillary"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Mapillary"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "marinetraffic",
+ "name": "MarineTraffic",
+ "description": "Real-time ship tracking",
+ "category": "vehicle-aviation-maritime",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "MarineTraffic",
+ "raw": "MarineTraffic"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "MarineTraffic"
+ ],
+ "sections_seen": [
+ "Vehicle, Aviation & Maritime"
+ ],
+ "archived": false
+ },
+ {
+ "id": "masscan",
+ "name": "Masscan",
+ "description": "Fastest internet port scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install masscan`",
+ "raw": "`apt install masscan`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Masscan"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "massdns",
+ "name": "massdns",
+ "description": "High-performance DNS stub resolver for bulk lookups",
+ "category": "domain-ip-network",
+ "url": "https://github.com/blechschmidt/massdns",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/blechschmidt/massdns.git",
+ "raw": "`git clone https://github.com/blechschmidt/massdns.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "maxar",
+ "name": "Maxar",
+ "description": "Commercial satellite imagery",
+ "category": "geolocation",
+ "url": "https://maxar.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[maxar.com](https://maxar.com/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "maxmind-geoip",
+ "name": "MaxMind GeoIP",
+ "description": "IP geolocation database",
+ "category": "geolocation",
+ "url": "https://maxmind.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[maxmind.com](https://maxmind.com/)"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "IP Tracking & Geolocation Links"
+ ],
+ "archived": false
+ },
+ {
+ "id": "medusa",
+ "name": "Medusa",
+ "description": "Parallel brute-force tool",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install medusa`",
+ "raw": "`apt install medusa`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "meg-tomnomnom",
+ "name": "meg",
+ "description": "Fetch many paths for many hosts without flooding",
+ "category": "domain-ip-network",
+ "url": "https://github.com/tomnomnom/meg",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tomnomnom/meg@latest",
+ "raw": "`go install github.com/tomnomnom/meg@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "memento-time-travel",
+ "name": "Memento Time Travel",
+ "description": "Federated search across multiple web archives",
+ "category": "document-metadata",
+ "url": "https://timetravel.mementoweb.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[timetravel.mementoweb.org](https://timetravel.mementoweb.org)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mention",
+ "name": "Mention",
+ "description": "Social media monitoring",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Mention"
+ ],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "merlin",
+ "name": "Merlin",
+ "description": "Cross-platform HTTP/2 post-exploitation server and agent in Go",
+ "category": "red-team-offensive",
+ "url": "https://github.com/Ne0nd0g/merlin",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/Ne0nd0g/merlin@latest",
+ "raw": "`go install github.com/Ne0nd0g/merlin@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "metadata2go",
+ "name": "Metadata2Go",
+ "description": "Free online metadata extractor for any file",
+ "category": "document-metadata",
+ "url": "https://www.metadata2go.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.metadata2go.com](https://www.metadata2go.com)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "metadefender-cloud",
+ "name": "MetaDefender Cloud",
+ "description": "Multi-engine file/URL/IP scanning by OPSWAT",
+ "category": "malware-threat-intel",
+ "url": "https://metadefender.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[metadefender.com](https://metadefender.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "metagoofil",
+ "name": "Metagoofil",
+ "description": "Document metadata harvester from public docs",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install metagoofil`",
+ "raw": "`pip install metagoofil`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Metagoofil"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "metasleuth",
+ "name": "MetaSleuth",
+ "description": "Free + paid crypto transaction tracing tool",
+ "category": "crypto-blockchain",
+ "url": "https://metasleuth.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[metasleuth.io](https://metasleuth.io)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "metasploit",
+ "name": "Metasploit",
+ "description": "Industry-standard pen testing framework",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install metasploit-framework`",
+ "raw": "`apt install metasploit-framework`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Metasploit"
+ ],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "metasploit-framework",
+ "name": "Metasploit Framework",
+ "description": "Industry-standard exploitation framework with 2000+ modules",
+ "category": "red-team-offensive",
+ "url": "https://github.com/rapid7/metasploit-framework",
+ "install": {
+ "method": "apt",
+ "kali": "apt install metasploit-framework",
+ "raw": "`apt install metasploit-framework`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "metasploitable",
+ "name": "Metasploitable",
+ "description": "Intentionally vulnerable Linux VM for Metasploit practice",
+ "category": "training-ctf",
+ "url": "https://docs.rapid7.com/metasploit/metasploitable-2/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "microsoft-copilot",
+ "name": "Microsoft Copilot",
+ "description": "AI with Bing search integration",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mimikatz",
+ "name": "Mimikatz",
+ "description": "Windows credential dumper",
+ "category": "data-breach",
+ "url": "https://github.com/gentilkiwi/mimikatz",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/gentilkiwi/mimikatz`",
+ "raw": "`git clone https://github.com/gentilkiwi/mimikatz`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "misp",
+ "name": "MISP",
+ "description": "Malware Information Sharing Platform",
+ "category": "malware-threat-intel",
+ "url": "https://github.com/MISP/MISP",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/MISP/MISP`",
+ "raw": "`git clone https://github.com/MISP/MISP`"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "MISP"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "misp-galaxy",
+ "name": "MISP Galaxy",
+ "description": "Adversary group identification used by SOCs/ISACs",
+ "category": "malware-threat-intel",
+ "url": "https://www.misp-galaxy.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.misp-galaxy.org](https://www.misp-galaxy.org)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mitaka",
+ "name": "Mitaka",
+ "description": "Browser extension for OSINT — extract IoCs from highlighted text",
+ "category": "frameworks",
+ "url": "https://github.com/ninoseki/mitaka",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/ninoseki/mitaka.git",
+ "raw": "`git clone https://github.com/ninoseki/mitaka.git`"
+ },
+ "tags": [
+ "frameworks",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mitre-attack",
+ "name": "MITRE ATT&CK",
+ "description": "Adversary tactics, techniques, and procedures knowledge base",
+ "category": "blue-team-defensive",
+ "url": "https://attack.mitre.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[attack.mitre.org](https://attack.mitre.org)"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mitre-d3fend",
+ "name": "MITRE D3FEND",
+ "description": "Defensive countermeasure knowledge graph",
+ "category": "blue-team-defensive",
+ "url": "https://d3fend.mitre.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[d3fend.mitre.org](https://d3fend.mitre.org)"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mobsf",
+ "name": "MobSF",
+ "description": "Mobile Security Framework (static+dynamic)",
+ "category": "iot-devices",
+ "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF)"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "modlishka",
+ "name": "Modlishka",
+ "description": "Reverse proxy phishing framework",
+ "category": "people-identity",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/drk1wi/Modlishka@latest`",
+ "raw": "`go install github.com/drk1wi/Modlishka@latest`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mojeek",
+ "name": "Mojeek",
+ "description": "Independent search engine that doesn't track users",
+ "category": "search-dorking",
+ "url": "https://www.mojeek.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.mojeek.com](https://www.mojeek.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mr.holmes",
+ "name": "Mr.Holmes",
+ "description": "OSINT investigation tool",
+ "category": "people-identity",
+ "url": "https://github.com/Lucksi/Mr.Holmes",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Lucksi/Mr.Holmes`",
+ "raw": "`git clone https://github.com/Lucksi/Mr.Holmes`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Mr.Holmes"
+ ],
+ "sections_seen": [
+ "People & Identity OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "msfpc",
+ "name": "MSFPC",
+ "description": "MSF payload creator",
+ "category": "iot-devices",
+ "url": "https://github.com/g0tmi1k/msfpc",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/g0tmi1k/msfpc`",
+ "raw": "`git clone https://github.com/g0tmi1k/msfpc`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mullvad-vpn",
+ "name": "Mullvad VPN",
+ "description": "Privacy-first VPN — no email needed, cash accepted",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install mullvad-vpn`",
+ "raw": "`apt install mullvad-vpn`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Mullvad VPN"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mxtoolbox",
+ "name": "MXToolbox",
+ "description": "Email header analysis & DNS checks",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "MXToolbox",
+ "raw": "MXToolbox"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "MXToolbox"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "mylnikov-geolocation",
+ "name": "Mylnikov Geolocation",
+ "description": "BSSID/Wi-Fi MAC to coordinates lookup",
+ "category": "geolocation",
+ "url": "https://www.mylnikov.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.mylnikov.org](https://www.mylnikov.org)"
+ },
+ "tags": [
+ "geolocation",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "mythic",
+ "name": "Mythic",
+ "description": "Cross-platform, post-exploit, multi-user red team framework",
+ "category": "red-team-offensive",
+ "url": "https://github.com/its-a-feature/Mythic",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/its-a-feature/Mythic.git",
+ "raw": "`git clone https://github.com/its-a-feature/Mythic.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "naabu",
+ "name": "Naabu",
+ "description": "Fast Go-based port scanner from ProjectDiscovery",
+ "category": "domain-ip-network",
+ "url": "https://github.com/projectdiscovery/naabu",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest",
+ "raw": "`go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "nahamsec",
+ "name": "NahamSec",
+ "description": "Bug bounty and offensive security YouTube content",
+ "category": "learning-resources",
+ "url": "https://www.youtube.com/@nahamsec",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.youtube.com](https://www.youtube.com/@nahamsec)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "namecheckr",
+ "name": "Name Checkr",
+ "description": "Check domain and username across many platforms",
+ "category": "username-social",
+ "url": "https://www.namecheckr.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.namecheckr.com](https://www.namecheckr.com)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "namecheckup",
+ "name": "Name Checkup",
+ "description": "Check username availability across social media",
+ "category": "username-social",
+ "url": "https://namecheckup.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[namecheckup.com](https://namecheckup.com)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "namechk",
+ "name": "Namechk",
+ "description": "Username & domain availability checker",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Namechk",
+ "raw": "Namechk"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Namechk"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nameketchup",
+ "name": "NameKetchup",
+ "description": "Check domain + username on popular social media",
+ "category": "username-social",
+ "url": "https://nameketchup.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[nameketchup.com](https://nameketchup.com)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "national-cellular-directory",
+ "name": "National Cellular Directory",
+ "description": "Phone owner lookup",
+ "category": "email-phone",
+ "url": "https://www.nationalcellulardirectory.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "naver",
+ "name": "Naver",
+ "description": "South Korean search engine — local content not on Google",
+ "category": "search-dorking",
+ "url": "https://www.naver.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.naver.com](https://www.naver.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "nerdydata",
+ "name": "NerdyData",
+ "description": "Search engine for source code across the public web",
+ "category": "search-dorking",
+ "url": "https://nerdydata.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[nerdydata.com](https://nerdydata.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "netcat",
+ "name": "Netcat",
+ "description": "The TCP/IP swiss army knife",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install netcat-openbsd`",
+ "raw": "`apt install netcat-openbsd`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "netcraft",
+ "name": "Netcraft Site Report",
+ "description": "Web technology, hosting history, takedown service",
+ "category": "domain-ip-network",
+ "url": "https://sitereport.netcraft.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[sitereport.netcraft.com](https://sitereport.netcraft.com)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "netexec",
+ "name": "NetExec (nxc)",
+ "description": "CrackMapExec maintained successor — AD network exploitation",
+ "category": "red-team-offensive",
+ "url": "https://github.com/Pennyw0rth/NetExec",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install git+https://github.com/Pennyw0rth/NetExec",
+ "raw": "`pip3 install git+https://github.com/Pennyw0rth/NetExec`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "netlas-cookbook",
+ "name": "Netlas Cookbook",
+ "description": "Free OSINT automation cookbook",
+ "category": "learning-resources",
+ "url": "https://academy.netlas.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[academy.netlas.io](https://academy.netlas.io)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "netlas.io",
+ "name": "Netlas.io",
+ "description": "Internet scanning and intelligence",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Netlas.io",
+ "raw": "Netlas.io"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Netlas.io"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nexfil",
+ "name": "NExfil",
+ "description": "Find profiles by username on various platforms",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install nexfil`",
+ "raw": "`pip install nexfil`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "NExfil"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nexphisher",
+ "name": "NexPhisher",
+ "description": "Multi-platform phishing tool",
+ "category": "people-identity",
+ "url": "https://github.com/htr-tech/nexphisher",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/htr-tech/nexphisher`",
+ "raw": "`git clone https://github.com/htr-tech/nexphisher`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "NexPhisher"
+ ],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nicb-vincheck",
+ "name": "NICB VINCheck",
+ "description": "Stolen vehicle check",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://www.nicb.org/vincheck",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[nicb.org/vincheck](https://www.nicb.org/vincheck)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nighthawk",
+ "name": "Nighthawk",
+ "description": "Premium evasive C2 by MDSec (Cobalt Strike alt)",
+ "category": "red-team-offensive",
+ "url": "https://www.mdsec.co.uk/nighthawk/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/)"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "nikto",
+ "name": "Nikto",
+ "description": "Web server vulnerability scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install nikto`",
+ "raw": "`apt install nikto`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Nikto"
+ ],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nmap",
+ "name": "Nmap",
+ "description": "Network scanner & mapper",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install nmap`",
+ "raw": "`apt install nmap`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Nmap"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nosqlmap",
+ "name": "NoSQLMap",
+ "description": "Automated NoSQL database enumeration and exploitation",
+ "category": "red-team-offensive",
+ "url": "https://github.com/codingo/NoSQLMap",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/codingo/NoSQLMap.git",
+ "raw": "`git clone https://github.com/codingo/NoSQLMap.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "notebooklm",
+ "name": "NotebookLM",
+ "description": "Google's document analysis AI",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nuclei",
+ "name": "Nuclei",
+ "description": "Template-based fast vulnerability scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`",
+ "raw": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Nuclei"
+ ],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "nuclei-templates",
+ "name": "Nuclei Templates",
+ "description": "Community-curated templates for Nuclei",
+ "category": "red-team-offensive",
+ "url": "https://github.com/projectdiscovery/nuclei-templates",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/projectdiscovery/nuclei-templates.git",
+ "raw": "`git clone https://github.com/projectdiscovery/nuclei-templates.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "numlookup",
+ "name": "NumLookup",
+ "description": "Free reverse phone lookup",
+ "category": "email-phone",
+ "url": "https://www.numlookup.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[numlookup.com](https://www.numlookup.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "numverify",
+ "name": "NumVerify",
+ "description": "Phone number validation API",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "NumVerify",
+ "raw": "NumVerify"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "NumVerify"
+ ],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "objection",
+ "name": "Objection",
+ "description": "Runtime mobile exploration",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install objection`",
+ "raw": "`pip install objection`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Mobile Hacking & Phone Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "oblivion-loseys",
+ "name": "Oblivion",
+ "description": "OSINT framework",
+ "category": "frameworks",
+ "url": "https://github.com/loseys/Oblivion",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/loseys/Oblivion.git",
+ "raw": "`git clone https://github.com/loseys/Oblivion.git`"
+ },
+ "tags": [
+ "frameworks",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "odin-search",
+ "name": "ODIN",
+ "description": "Search hosts, CVEs, exposed buckets — 10 free searches/day",
+ "category": "domain-ip-network",
+ "url": "https://search.odin.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[search.odin.io](https://search.odin.io)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "offensivesecurity-proving",
+ "name": "OffSec Proving Grounds",
+ "description": "OSCP-style training labs by Offensive Security",
+ "category": "training-ctf",
+ "url": "https://www.offsec.com/labs/individual/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.offsec.com](https://www.offsec.com/labs/individual/)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "offshoreleaks",
+ "name": "Offshore Leaks Database",
+ "description": "Panama/Pandora/Paradise Papers searchable database",
+ "category": "document-metadata",
+ "url": "https://offshoreleaks.icij.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[offshoreleaks.icij.org](https://offshoreleaks.icij.org)"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "onionland",
+ "name": "OnionLand Search",
+ "description": "Search engine for dark-web content",
+ "category": "dark-web",
+ "url": "https://onionlandsearchengine.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[onionlandsearchengine.com](https://onionlandsearchengine.com)"
+ },
+ "tags": [
+ "dark-web",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "onionscan",
+ "name": "OnionScan",
+ "description": "Scan & analyze .onion sites",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/s-rah/onionscan@latest`",
+ "raw": "`go install github.com/s-rah/onionscan@latest`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "OnionScan"
+ ],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "onionsearch",
+ "name": "OnionSearch",
+ "description": "Search .onion URLs from multiple engines",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install onionsearch`",
+ "raw": "`pip3 install onionsearch`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "OnionSearch"
+ ],
+ "sections_seen": [
+ "Dark Web & Tor Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "onionshare",
+ "name": "OnionShare",
+ "description": "Anonymous file sharing via Tor",
+ "category": "vpn-privacy",
+ "url": "https://onionshare.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[onionshare.org](https://onionshare.org/)"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "onyphe",
+ "name": "ONYPHE",
+ "description": "OSINT engine indexing exposed assets",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ONYPHE",
+ "raw": "ONYPHE"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "ONYPHE"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "oosint",
+ "name": "Open-Source Intelligence (Reverse Image)",
+ "description": "Yandex/Bing/TinEye combined reverse-image search",
+ "category": "image-facial",
+ "url": "https://oosint.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[oosint.com](https://oosint.com)"
+ },
+ "tags": [
+ "image-facial",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "openbugbounty",
+ "name": "Open Bug Bounty",
+ "description": "Free coordinated-disclosure platform",
+ "category": "bug-bounty",
+ "url": "https://www.openbugbounty.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.openbugbounty.org](https://www.openbugbounty.org)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "opencellid",
+ "name": "OpenCellID",
+ "description": "Largest public database of cell-tower IDs",
+ "category": "geolocation",
+ "url": "https://opencellid.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[opencellid.org](https://opencellid.org)"
+ },
+ "tags": [
+ "geolocation",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "opencorporates",
+ "name": "OpenCorporates",
+ "description": "Global corporate database",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "OpenCorporates",
+ "raw": "OpenCorporates"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "OpenCorporates"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "opencorporates-cli",
+ "name": "opencorporates-cli",
+ "description": "Command-line client for OpenCorporates API",
+ "category": "company-business",
+ "url": "https://github.com/octohedron/opencorporates",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install opencorporates",
+ "raw": "`pip3 install opencorporates`"
+ },
+ "tags": [
+ "company-business",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "opencti",
+ "name": "OpenCTI",
+ "description": "Open-source CTI platform structured around STIX2",
+ "category": "threat-intel-platforms",
+ "url": "https://www.opencti.io",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull opencti/platform",
+ "raw": "`docker pull opencti/platform`"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "opencv",
+ "name": "OpenCV",
+ "description": "Computer vision library",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install opencv-python`",
+ "raw": "`pip install opencv-python`"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "openocd",
+ "name": "OpenOCD",
+ "description": "Open On-Chip Debugger — JTAG/SWD interface for embedded",
+ "category": "hardware-hacking",
+ "url": "https://openocd.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install openocd",
+ "raw": "`apt install openocd`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "openphish",
+ "name": "OpenPhish",
+ "description": "Live phishing URL feed",
+ "category": "malware-threat-intel",
+ "url": "https://openphish.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[openphish.com](https://openphish.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "openrailwaymap",
+ "name": "OpenRailwayMap",
+ "description": "Worldwide rail network map — rolling stock, infrastructure, signals",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://www.openrailwaymap.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.openrailwaymap.org](https://www.openrailwaymap.org)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "opensanctions",
+ "name": "OpenSanctions",
+ "description": "Consolidated database of sanctioned entities across 200+ sources",
+ "category": "company-business",
+ "url": "https://opensanctions.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[opensanctions.org](https://opensanctions.org)"
+ },
+ "tags": [
+ "company-business",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "openstreetmap",
+ "name": "OpenStreetMap",
+ "description": "Free collaborative world map",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "OpenStreetMap",
+ "raw": "OpenStreetMap"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "OpenStreetMap"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "openvas",
+ "name": "OpenVAS",
+ "description": "Open-source vulnerability scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install openvas`",
+ "raw": "`apt install openvas`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "openvpn",
+ "name": "OpenVPN",
+ "description": "Industry-standard open-source VPN protocol",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install openvpn`",
+ "raw": "`apt install openvpn`"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Free open-source (self-hosted)",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:OpenVPN"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "OpenVPN"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ophcrack",
+ "name": "Ophcrack",
+ "description": "Windows password cracker (rainbow tables)",
+ "category": "data-breach",
+ "url": "https://ophcrack.sourceforge.io/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/)"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "orbit",
+ "name": "Orbit",
+ "description": "Bitcoin address investigator",
+ "category": "company-business",
+ "url": "https://github.com/s0md3v/Orbit",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/s0md3v/Orbit`",
+ "raw": "`git clone https://github.com/s0md3v/Orbit`"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Orbit"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osint-curious",
+ "name": "OSINT Curious",
+ "description": "Community blog, podcast, and learning resources",
+ "category": "learning-resources",
+ "url": "https://osintcurio.us",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[osintcurio.us](https://osintcurio.us)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "osint-framework",
+ "name": "OSINT Framework",
+ "description": "Visual map of all OSINT tools",
+ "category": "username-social",
+ "url": "https://osintframework.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[osintframework.com](https://osintframework.com/)"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osint-framework-web",
+ "name": "OSINT Framework (Web)",
+ "description": "Visual map of all OSINT tools",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "OSINT Framework (Web)",
+ "raw": "OSINT Framework (Web)"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "OSINT Framework (Web)"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osint-industries",
+ "name": "OSINT Industries",
+ "description": "People search + social media lookup",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "OSINT Industries",
+ "raw": "OSINT Industries"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "OSINT Industries"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osint-san",
+ "name": "OSINT-SAN",
+ "description": "OSINT Swiss Army Knife framework",
+ "category": "frameworks",
+ "url": "https://github.com/Bafomet666/OSINT-SAN",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Bafomet666/OSINT-SAN`",
+ "raw": "`git clone https://github.com/Bafomet666/OSINT-SAN`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "OSINT-SAN"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osint-spy",
+ "name": "OSINT-SPY",
+ "description": "OSINT tool with Tor support",
+ "category": "dark-web",
+ "url": "https://github.com/SharadKumar97/OSINT-SPY",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/SharadKumar97/OSINT-SPY`",
+ "raw": "`git clone https://github.com/SharadKumar97/OSINT-SPY`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osint-techniques",
+ "name": "OSINT Techniques",
+ "description": "Michael Bazzell's resources, books, and search tools",
+ "category": "learning-resources",
+ "url": "https://inteltechniques.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[inteltechniques.com](https://inteltechniques.com)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "osint-training",
+ "name": "Bellingcat's Online Investigations Toolkit",
+ "description": "Bellingcat-curated tools and methodology guide",
+ "category": "learning-resources",
+ "url": "https://www.bellingcat.com/resources/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.bellingcat.com](https://www.bellingcat.com/resources/)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "osintgram",
+ "name": "Osintgram",
+ "description": "Instagram OSINT tool",
+ "category": "username-social",
+ "url": "https://github.com/Datalux/Osintgram",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Datalux/Osintgram`",
+ "raw": "`git clone https://github.com/Datalux/Osintgram`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osmedeus",
+ "name": "osmedeus",
+ "description": "Full automated reconnaissance workflow",
+ "category": "frameworks",
+ "url": "https://github.com/j3ssie/osmedeus",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/j3ssie/osmedeus`",
+ "raw": "`git clone https://github.com/j3ssie/osmedeus`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "osmedeus"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "osquery",
+ "name": "osquery",
+ "description": "SQL-powered OS instrumentation/monitoring/analytics",
+ "category": "blue-team-defensive",
+ "url": "https://osquery.io",
+ "install": {
+ "method": "apt",
+ "kali": "apt install osquery",
+ "raw": "`apt install osquery`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "osrframework",
+ "name": "OSRFramework",
+ "description": "Username research framework with multiple tools",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install osrframework`",
+ "raw": "`pip install osrframework`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "OSRFramework"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "outline-vpn",
+ "name": "Outline VPN",
+ "description": "Google Jigsaw's self-hosted VPN — censorship circumvention",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Website",
+ "raw": "Website"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Free (self-hosted)",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:Shadowsocks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Outline VPN"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "overpass-turbo",
+ "name": "Overpass Turbo",
+ "description": "OpenStreetMap data query",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Overpass Turbo",
+ "raw": "Overpass Turbo"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Overpass Turbo"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "overthewire",
+ "name": "OverTheWire Wargames",
+ "description": "Free wargames for learning offensive security from scratch",
+ "category": "training-ctf",
+ "url": "https://overthewire.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[overthewire.org](https://overthewire.org)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "owasp-zap",
+ "name": "OWASP ZAP",
+ "description": "Open-source web app scanner",
+ "category": "domain-ip-network",
+ "url": "https://zaproxy.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[zaproxy.org](https://zaproxy.org/)"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "oxt",
+ "name": "OXT (OpenXt)",
+ "description": "Bitcoin transaction graph explorer with clustering",
+ "category": "crypto-blockchain",
+ "url": "https://oxt.me",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[oxt.me](https://oxt.me)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "oxt.me",
+ "name": "OXT.me",
+ "description": "Bitcoin transaction graph analysis",
+ "category": "crypto-blockchain",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "OXT.me",
+ "raw": "OXT.me"
+ },
+ "tags": [
+ "crypto-blockchain"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "OXT.me"
+ ],
+ "sections_seen": [
+ "Cryptocurrency & Blockchain"
+ ],
+ "archived": false
+ },
+ {
+ "id": "pacer",
+ "name": "PACER",
+ "description": "US federal court records",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://pacer.uscourts.gov/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[pacer.uscourts.gov](https://pacer.uscourts.gov/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "pagodo",
+ "name": "Pagodo",
+ "description": "Automated Google dorking tool",
+ "category": "search-dorking",
+ "url": "https://github.com/opsdisk/pagodo",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/opsdisk/pagodo`",
+ "raw": "`git clone https://github.com/opsdisk/pagodo`"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Pagodo"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "paramminer",
+ "name": "ParamMiner (Burp ext)",
+ "description": "Discover hidden, unlinked HTTP parameters in Burp",
+ "category": "red-team-offensive",
+ "url": "https://github.com/PortSwigger/param-miner",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/PortSwigger/param-miner.git",
+ "raw": "`git clone https://github.com/PortSwigger/param-miner.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "paramspider",
+ "name": "ParamSpider",
+ "description": "Parameter discovery from web archives",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install paramspider`",
+ "raw": "`pip install paramspider`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "passivedns-mnemonic",
+ "name": "Mnemonic Passive DNS",
+ "description": "Free passive-DNS query tool",
+ "category": "domain-ip-network",
+ "url": "https://passivedns.mnemonic.no",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[passivedns.mnemonic.no](https://passivedns.mnemonic.no)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "passivetotal",
+ "name": "PassiveTotal (RiskIQ)",
+ "description": "Passive DNS, WHOIS, SSL cert pivots — now Microsoft Defender TI",
+ "category": "domain-ip-network",
+ "url": "https://community.riskiq.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[community.riskiq.com](https://community.riskiq.com)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "payloadsallthethings",
+ "name": "PayloadsAllTheThings",
+ "description": "Web app pentest payloads, bypasses, and methodology",
+ "category": "red-team-offensive",
+ "url": "https://github.com/swisskyrepo/PayloadsAllTheThings",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git",
+ "raw": "`git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "peekalink",
+ "name": "Peekalink",
+ "description": "Preview any URL — title, description, screenshot via API",
+ "category": "document-metadata",
+ "url": "https://www.peekalink.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.peekalink.io](https://www.peekalink.io)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pentest-tools-scanner",
+ "name": "Pentest-Tools Scanner",
+ "description": "Website vulnerability scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Pentest-Tools Scanner",
+ "raw": "Pentest-Tools Scanner"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Pentest-Tools Scanner"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "pentesterlab",
+ "name": "PentesterLab",
+ "description": "Hands-on web-app pentesting training",
+ "category": "training-ctf",
+ "url": "https://pentesterlab.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[pentesterlab.com](https://pentesterlab.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "perplexity-ai",
+ "name": "Perplexity AI",
+ "description": "AI search with cited sources",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ 5 Pro/day",
+ "raw": "✅ 5 Pro/day"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "petitpotam",
+ "name": "PetitPotam",
+ "description": "PoC tool to coerce Windows hosts to authenticate to attacker",
+ "category": "red-team-offensive",
+ "url": "https://github.com/topotam/PetitPotam",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/topotam/PetitPotam.git",
+ "raw": "`git clone https://github.com/topotam/PetitPotam.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "phind",
+ "name": "Phind",
+ "description": "AI search for developers",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "phishstats",
+ "name": "PhishStats",
+ "description": "Live phishing intelligence feed and search",
+ "category": "malware-threat-intel",
+ "url": "https://phishstats.info",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[phishstats.info](https://phishstats.info)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "phishtank",
+ "name": "PhishTank",
+ "description": "Anti-phishing community — verified phishing URLs",
+ "category": "malware-threat-intel",
+ "url": "https://phishtank.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[phishtank.org](https://phishtank.org)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "phobos",
+ "name": "Phobos",
+ "description": "Dark web search engine",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`",
+ "raw": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "phonebook.cz",
+ "name": "Phonebook.cz",
+ "description": "Email, domain & URL search",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Phonebook.cz",
+ "raw": "Phonebook.cz"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Phonebook.cz"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "phoneinfoga",
+ "name": "PhoneInfoga",
+ "description": "Advanced phone number scanner",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install phoneinfoga`",
+ "raw": "`pip install phoneinfoga`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "PhoneInfoga"
+ ],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "phonesploit",
+ "name": "PhoneSploit",
+ "description": "ADB-based phone exploitation",
+ "category": "email-phone",
+ "url": "https://github.com/aerosol-can/PhoneSploit",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/aerosol-can/PhoneSploit`",
+ "raw": "`git clone https://github.com/aerosol-can/PhoneSploit`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "PhoneSploit"
+ ],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "photon",
+ "name": "Photon",
+ "description": "Web crawler for OSINT data",
+ "category": "domain-ip-network",
+ "url": "https://github.com/s0md3v/Photon",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/s0md3v/Photon`",
+ "raw": "`git clone https://github.com/s0md3v/Photon`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "photorec",
+ "name": "PhotoRec",
+ "description": "File data recovery — focuses on multimedia",
+ "category": "digital-forensics",
+ "url": "https://www.cgsecurity.org/wiki/PhotoRec",
+ "install": {
+ "method": "apt",
+ "kali": "apt install testdisk",
+ "raw": "`apt install testdisk`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "picarta",
+ "name": "Picarta.ai",
+ "description": "AI-powered photo geolocation predictor",
+ "category": "geolocation",
+ "url": "https://picarta.ai",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[picarta.ai](https://picarta.ai)"
+ },
+ "tags": [
+ "geolocation",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "picoctf",
+ "name": "picoCTF",
+ "description": "Free CTF and learning platform built by CMU",
+ "category": "training-ctf",
+ "url": "https://picoctf.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[picoctf.org](https://picoctf.org)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pimeyes",
+ "name": "PimEyes",
+ "description": "Face search engine from photos",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "PimEyes",
+ "raw": "PimEyes"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "PimEyes"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "pinterest-search",
+ "name": "Pinterest",
+ "description": "Visual search engine — alternate reverse-image source",
+ "category": "image-facial",
+ "url": "https://www.pinterest.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.pinterest.com](https://www.pinterest.com)"
+ },
+ "tags": [
+ "image-facial",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pipl",
+ "name": "Pipl",
+ "description": "Deep people search engine",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Pipl",
+ "raw": "Pipl"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Pipl"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "plaso",
+ "name": "Plaso (log2timeline)",
+ "description": "Super-timeline creation from forensic artifacts",
+ "category": "digital-forensics",
+ "url": "https://github.com/log2timeline/plaso",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install plaso",
+ "raw": "`pip3 install plaso`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "polygonscan",
+ "name": "PolygonScan",
+ "description": "Polygon (Matic) blockchain explorer",
+ "category": "crypto-blockchain",
+ "url": "https://polygonscan.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[polygonscan.com](https://polygonscan.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "portswigger-academy",
+ "name": "PortSwigger Web Security Academy",
+ "description": "Free, world-class web security training (by Burp Suite team)",
+ "category": "training-ctf",
+ "url": "https://portswigger.net/web-security",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[portswigger.net](https://portswigger.net/web-security)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "predictasearch",
+ "name": "Predicta Search",
+ "description": "Search social accounts by email or phone",
+ "category": "people-identity",
+ "url": "https://predictasearch.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[predictasearch.com](https://predictasearch.com)"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "privadovpn-free",
+ "name": "PrivadoVPN Free",
+ "description": "Free VPN with 10GB/month and zero-log policy",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Website",
+ "raw": "Website"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:10GB/month, 12 servers",
+ "open-source:❌",
+ "no-log:✅",
+ "protocols:WireGuard, OpenVPN, IKEv2"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "PrivadoVPN Free"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "proton-vpn-free",
+ "name": "Proton VPN Free",
+ "description": "Best free VPN — unlimited data, no-log, open-source, Swiss privacy",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install protonvpn-cli`",
+ "raw": "`pip3 install protonvpn-cli`"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Unlimited data, 5 countries, 1 device",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:WireGuard, OpenVPN, Stealth"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Proton VPN Free"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "protonmail",
+ "name": "ProtonMail",
+ "description": "Encrypted email",
+ "category": "vpn-privacy",
+ "url": "https://proton.me/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[proton.me](https://proton.me/)"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "protonvpn",
+ "name": "ProtonVPN",
+ "description": "Free encrypted VPN",
+ "category": "vpn-privacy",
+ "url": "https://protonvpn.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[protonvpn.com](https://protonvpn.com/)"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "prowl",
+ "name": "Prowl",
+ "description": "Email & domain reconnaissance",
+ "category": "email-phone",
+ "url": "https://github.com/nettitude/Prowl",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/nettitude/Prowl`",
+ "raw": "`git clone https://github.com/nettitude/Prowl`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "proxmark3",
+ "name": "Proxmark3",
+ "description": "RFID/NFC research and exploitation hardware + software",
+ "category": "hardware-hacking",
+ "url": "https://github.com/RfidResearchGroup/proxmark3",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/RfidResearchGroup/proxmark3.git",
+ "raw": "`git clone https://github.com/RfidResearchGroup/proxmark3.git`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "public-transport-maps",
+ "name": "Public Transport Maps",
+ "description": "20+ online public transport maps by country",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://cipher387.github.io/public_transport_maps/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[cipher387.github.io](https://cipher387.github.io/public_transport_maps/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "publicwww",
+ "name": "PublicWWW",
+ "description": "Search the web's source code (HTML/JS/CSS) for snippets, trackers, scripts",
+ "category": "search-dorking",
+ "url": "https://publicwww.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[publicwww.com](https://publicwww.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pullpush",
+ "name": "PullPush",
+ "description": "Index/retrieval service for Reddit (incl. deleted content)",
+ "category": "username-social",
+ "url": "https://pullpush.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[pullpush.io](https://pullpush.io)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pulsedive",
+ "name": "Pulsedive",
+ "description": "Threat intelligence enrichment",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Pulsedive",
+ "raw": "Pulsedive"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Pulsedive"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "pushshift",
+ "name": "Pushshift API",
+ "description": "Historical Reddit data — posts, comments, metadata",
+ "category": "username-social",
+ "url": "https://pushshift.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[pushshift.io](https://pushshift.io)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pwn-college",
+ "name": "pwn.college",
+ "description": "Free college-level cybersecurity education from ASU",
+ "category": "training-ctf",
+ "url": "https://pwn.college",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[pwn.college](https://pwn.college)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "pwndb",
+ "name": "Pwndb",
+ "description": "Dark web breach database (Tor)",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟢 Free",
+ "raw": "🟢 Free"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "pwnedhub",
+ "name": "PwnedHub",
+ "description": "Intentionally-vulnerable web app for hands-on appsec training",
+ "category": "training-ctf",
+ "url": "https://github.com/practisec/pwnedhub",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/practisec/pwnedhub.git",
+ "raw": "`git clone https://github.com/practisec/pwnedhub.git`"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "python-for-osint-cipher387",
+ "name": "Python for OSINT (cipher387)",
+ "description": "21-day Python-for-OSINT course (free)",
+ "category": "learning-resources",
+ "url": "https://github.com/cipher387/python-for-OSINT-21-days",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/cipher387/python-for-OSINT-21-days.git",
+ "raw": "`git clone https://github.com/cipher387/python-for-OSINT-21-days.git`"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "quake-360",
+ "name": "Quake (360.cn)",
+ "description": "Chinese internet asset search engine",
+ "category": "iot-devices",
+ "url": "https://quake.360.net",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[quake.360.net](https://quake.360.net)"
+ },
+ "tags": [
+ "iot-devices",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "quttera",
+ "name": "Quttera",
+ "description": "Online website malware scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Quttera",
+ "raw": "Quttera"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Quttera"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "radare2",
+ "name": "radare2",
+ "description": "Reverse engineering framework",
+ "category": "digital-forensics",
+ "url": "https://www.radare.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install radare2",
+ "raw": "`apt install radare2`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rainbowcrack",
+ "name": "RainbowCrack",
+ "description": "Rainbow table cracker",
+ "category": "data-breach",
+ "url": "https://project-rainbowcrack.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[project-rainbowcrack.com](https://project-rainbowcrack.com/)"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "real-world-bug-hunting",
+ "name": "Real-World Bug Hunting (book)",
+ "description": "Peter Yaworski — bug bounty methodology and real reports",
+ "category": "learning-resources",
+ "url": "https://nostarch.com/bughunting",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[nostarch.com](https://nostarch.com/bughunting)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "reaver",
+ "name": "Reaver",
+ "description": "WPS brute force tool",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install reaver`",
+ "raw": "`apt install reaver`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "recap-archive",
+ "name": "RECAP Archive",
+ "description": "Public archive of PACER court documents",
+ "category": "document-metadata",
+ "url": "https://www.courtlistener.com/recap/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.courtlistener.com](https://www.courtlistener.com/recap/)"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "recon-ng",
+ "name": "Recon-ng",
+ "description": "Module-based web reconnaissance framework",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install recon-ng`",
+ "raw": "`pip3 install recon-ng`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Recon-ng"
+ ],
+ "sections_seen": [
+ "Kali Linux OSINT Toolkit"
+ ],
+ "archived": false
+ },
+ {
+ "id": "reconaizer",
+ "name": "ReconAIzer",
+ "description": "AI-enhanced Burp Suite extension",
+ "category": "misc",
+ "url": "https://github.com/hisxo/ReconAIzer",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer)"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "AI-Powered OSINT & Free AI Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "reconftw",
+ "name": "reconFTW",
+ "description": "Full-suite domain recon — subdomain enum, port scan, vuln scan in one pipeline",
+ "category": "domain-ip-network",
+ "url": "https://github.com/six2dez/reconftw",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/six2dez/reconftw.git",
+ "raw": "`git clone https://github.com/six2dez/reconftw.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "recorded-future",
+ "name": "Recorded Future",
+ "description": "Threat intelligence platform",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Recorded Future",
+ "raw": "Recorded Future"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Recorded Future"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "reddit-investigator",
+ "name": "Reddit Investigator",
+ "description": "Reddit user analysis",
+ "category": "username-social",
+ "url": "https://reddit-user-analyser.netlify.app/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/)"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "redditmetis",
+ "name": "RedditMetis",
+ "description": "Reddit user analysis — summary, top posts, activity stats",
+ "category": "username-social",
+ "url": "https://redditmetis.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[redditmetis.com](https://redditmetis.com)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "redditsearch-io",
+ "name": "RedditSearch.io",
+ "description": "Search archived Reddit content via Pushshift mirror",
+ "category": "username-social",
+ "url": "https://redditsearch.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[redditsearch.io](https://redditsearch.io)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "regripper",
+ "name": "RegRipper",
+ "description": "Open-source Windows registry parsing tool",
+ "category": "digital-forensics",
+ "url": "https://github.com/keydet89/RegRipper3.0",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/keydet89/RegRipper3.0.git",
+ "raw": "`git clone https://github.com/keydet89/RegRipper3.0.git`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rekall",
+ "name": "Rekall",
+ "description": "Memory forensics tooling (legacy fork of Volatility)",
+ "category": "digital-forensics",
+ "url": "https://github.com/google/rekall",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install rekall",
+ "raw": "`pip3 install rekall`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "responder",
+ "name": "Responder",
+ "description": "LLMNR/NBT-NS/MDNS poisoner",
+ "category": "data-breach",
+ "url": "https://github.com/lgandx/Responder",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/lgandx/Responder`",
+ "raw": "`git clone https://github.com/lgandx/Responder`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Password Cracking & Credential Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "revealer-cc",
+ "name": "Revealer.cc",
+ "description": "Discord-based account-checker & breach lookup",
+ "category": "data-breach",
+ "url": "https://revealer.cc",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[revealer.cc](https://revealer.cc)"
+ },
+ "tags": [
+ "data-breach",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "reverse-whois-domaineye",
+ "name": "DomainEye Reverse WHOIS",
+ "description": "Search domains by registrant data",
+ "category": "people-identity",
+ "url": "https://domaineye.com/reverse-whois",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[domaineye.com](https://domaineye.com/reverse-whois)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "riseupvpn",
+ "name": "RiseupVPN",
+ "description": "Free VPN by Riseup collective — no accounts, no tracking",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install riseup-vpn`",
+ "raw": "`apt install riseup-vpn`"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Unlimited, no account needed",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:OpenVPN (Bitmask)"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "RiseupVPN"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "rita",
+ "name": "RITA",
+ "description": "Real Intelligence Threat Analytics — beaconing/long-conn detection",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/activecm/rita",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/activecm/rita.git",
+ "raw": "`git clone https://github.com/activecm/rita.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rizin",
+ "name": "rizin",
+ "description": "Modern fork of radare2 with cleaner API",
+ "category": "digital-forensics",
+ "url": "https://rizin.re",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/rizinorg/rizin.git",
+ "raw": "`git clone https://github.com/rizinorg/rizin.git`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "robtex",
+ "name": "Robtex",
+ "description": "DNS lookup visualization",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Robtex",
+ "raw": "Robtex"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Robtex"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "rocketreach",
+ "name": "RocketReach",
+ "description": "Find professional emails/phones for 700M+ profiles",
+ "category": "people-identity",
+ "url": "https://rocketreach.co",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[rocketreach.co](https://rocketreach.co)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rockyou",
+ "name": "RockYou",
+ "description": "Classic leaked password list",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Pre-installed in Kali (`/usr/share/wordlists/`)",
+ "raw": "Pre-installed in Kali (`/usr/share/wordlists/`)"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Wordlist Generation & Brute Force"
+ ],
+ "archived": false
+ },
+ {
+ "id": "root-me",
+ "name": "Root-Me",
+ "description": "500+ challenges and 100+ virtual labs",
+ "category": "training-ctf",
+ "url": "https://www.root-me.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.root-me.org](https://www.root-me.org)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rtfm-redteam",
+ "name": "RTFM: Red Team Field Manual",
+ "description": "Concise red-team command reference",
+ "category": "learning-resources",
+ "url": "https://www.amazon.com/dp/B07RJG62SJ",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.amazon.com](https://www.amazon.com/dp/B07RJG62SJ)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rtl-sdr",
+ "name": "RTL-SDR",
+ "description": "Cheap ($30) SDR receiver — entry into RF",
+ "category": "hardware-hacking",
+ "url": "https://www.rtl-sdr.com",
+ "install": {
+ "method": "apt",
+ "kali": "apt install rtl-sdr",
+ "raw": "`apt install rtl-sdr`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rubeus",
+ "name": "Rubeus",
+ "description": "C# toolset for raw Kerberos interaction and abuse",
+ "category": "red-team-offensive",
+ "url": "https://github.com/GhostPack/Rubeus",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/GhostPack/Rubeus.git",
+ "raw": "`git clone https://github.com/GhostPack/Rubeus.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "rustscan",
+ "name": "RustScan",
+ "description": "Modern port scanner — finds open ports, then pipes to Nmap",
+ "category": "domain-ip-network",
+ "url": "https://github.com/RustScan/RustScan",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/RustScan/RustScan.git",
+ "raw": "`git clone https://github.com/RustScan/RustScan.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "scalpel",
+ "name": "Scalpel",
+ "description": "File carving tool",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install scalpel`",
+ "raw": "`apt install scalpel`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "scamadviser",
+ "name": "ScamAdviser",
+ "description": "Check website trustworthiness scores",
+ "category": "malware-threat-intel",
+ "url": "https://www.scamadviser.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.scamadviser.com](https://www.scamadviser.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "scatteredsecrets",
+ "name": "ScatteredSecrets",
+ "description": "Breach notification service",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟡 Freemium",
+ "raw": "🟡 Freemium"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "scribd-search",
+ "name": "Scribd",
+ "description": "Search for documents, presentations, sheet music, ebooks",
+ "category": "document-metadata",
+ "url": "https://www.scribd.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.scribd.com](https://www.scribd.com)"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "search-by-image",
+ "name": "Search by Image",
+ "description": "Multi-engine reverse image (browser ext)",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Chrome / Firefox extension",
+ "raw": "Chrome / Firefox extension"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "search4faces",
+ "name": "Search4faces",
+ "description": "Face search in VK/OK social networks",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Search4faces",
+ "raw": "Search4faces"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Search4faces"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "searchcode",
+ "name": "searchcode",
+ "description": "Search 75+ billion lines of public source code across GitHub/GitLab/Bitbucket",
+ "category": "search-dorking",
+ "url": "https://searchcode.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[searchcode.com](https://searchcode.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "searxng",
+ "name": "SearXNG",
+ "description": "Privacy-respecting metasearch engine",
+ "category": "search-dorking",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "SearXNG",
+ "raw": "SearXNG"
+ },
+ "tags": [
+ "search-dorking"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "SearXNG"
+ ],
+ "sections_seen": [
+ "Search & Dorking Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sec-edgar",
+ "name": "SEC EDGAR",
+ "description": "US company filings",
+ "category": "company-business",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "SEC EDGAR",
+ "raw": "SEC EDGAR"
+ },
+ "tags": [
+ "company-business"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "SEC EDGAR"
+ ],
+ "sections_seen": [
+ "Financial & Corporate Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "seclists",
+ "name": "SecLists",
+ "description": "The ultimate security wordlist collection",
+ "category": "data-breach",
+ "url": "https://github.com/danielmiessler/SecLists",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/danielmiessler/SecLists`",
+ "raw": "`git clone https://github.com/danielmiessler/SecLists`"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "SecLists"
+ ],
+ "sections_seen": [
+ "Wordlist Generation & Brute Force"
+ ],
+ "archived": false
+ },
+ {
+ "id": "security-onion",
+ "name": "Security Onion",
+ "description": "Linux distro for threat hunting, monitoring, and log management",
+ "category": "blue-team-defensive",
+ "url": "https://securityonionsolutions.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[securityonionsolutions.com](https://securityonionsolutions.com)"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "securitytrails",
+ "name": "SecurityTrails",
+ "description": "DNS & domain intelligence",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "SecurityTrails",
+ "raw": "SecurityTrails"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "SecurityTrails"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "seeker",
+ "name": "Seeker",
+ "description": "Geolocation by phishing — collects precise GPS via WebRTC + browser geolocation",
+ "category": "people-identity",
+ "url": "https://github.com/thewhiteh4t/seeker",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/thewhiteh4t/seeker.git",
+ "raw": "`git clone https://github.com/thewhiteh4t/seeker.git`"
+ },
+ "tags": [
+ "people-identity",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "seekr",
+ "name": "Seekr",
+ "description": "Multi-purpose OSINT toolkit with web interface",
+ "category": "username-social",
+ "url": "https://github.com/seekr-osint/seekr",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/seekr-osint/seekr`",
+ "raw": "`git clone https://github.com/seekr-osint/seekr`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Seekr"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sentinel-hub",
+ "name": "Sentinel Hub",
+ "description": "Multi-source satellite imagery access",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Sentinel Hub",
+ "raw": "Sentinel Hub"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Sentinel Hub"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "set",
+ "name": "SET",
+ "description": "Social engineering toolkit",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`setoolkit`",
+ "raw": "`setoolkit`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Kali Linux OSINT Toolkit"
+ ],
+ "archived": false
+ },
+ {
+ "id": "set-social-engineering-toolkit",
+ "name": "SET (Social Engineering Toolkit)",
+ "description": "Complete SE framework",
+ "category": "people-identity",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install set`",
+ "raw": "`apt install set`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "shadowmap",
+ "name": "ShadowMap",
+ "description": "Shadow analysis for time estimation",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ShadowMap",
+ "raw": "ShadowMap"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "ShadowMap"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "shadowserver-dashboard",
+ "name": "Shadowserver Dashboard",
+ "description": "Global statistics on cyber threats by Shadowserver Foundation",
+ "category": "malware-threat-intel",
+ "url": "https://dashboard.shadowserver.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[dashboard.shadowserver.org](https://dashboard.shadowserver.org/)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sharphound",
+ "name": "SharpHound",
+ "description": "C# data collector for BloodHound",
+ "category": "red-team-offensive",
+ "url": "https://github.com/BloodHoundAD/SharpHound",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/BloodHoundAD/SharpHound.git",
+ "raw": "`git clone https://github.com/BloodHoundAD/SharpHound.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sherlock",
+ "name": "Sherlock",
+ "description": "Hunt down social media accounts by username across 400+ sites",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install sherlock-project`",
+ "raw": "`pip install sherlock-project`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Sherlock"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sherlockeye",
+ "name": "SherlockEye",
+ "description": "Search publicly available info connected to a username",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "SherlockEye",
+ "raw": "SherlockEye"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "SherlockEye"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sherloq",
+ "name": "Sherloq",
+ "description": "Open-source image forensics toolset",
+ "category": "image-facial",
+ "url": "https://github.com/GuidoBartoli/sherloq",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/GuidoBartoli/sherloq.git",
+ "raw": "`git clone https://github.com/GuidoBartoli/sherloq.git`"
+ },
+ "tags": [
+ "image-facial",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "shodan",
+ "name": "Shodan",
+ "description": "Internet-connected device search",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install shodan`",
+ "raw": "`pip3 install shodan`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Shodan"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "shodan-cli-tool",
+ "name": "Shodan CLI",
+ "description": "Official Shodan command-line client",
+ "category": "search-dorking",
+ "url": "https://github.com/achillean/shodan-python",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install shodan",
+ "raw": "`pip3 install shodan`"
+ },
+ "tags": [
+ "search-dorking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "shodan-iot",
+ "name": "Shodan (IoT)",
+ "description": "IoT and device search engine",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install shodan`",
+ "raw": "`pip3 install shodan`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Shodan (IoT)"
+ ],
+ "sections_seen": [
+ "IoT & Device Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "shodanspider",
+ "name": "ShodanSpider",
+ "description": "Shodan scanning automation tool",
+ "category": "iot-devices",
+ "url": "https://github.com/shubhamrooter/ShodanSpider",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/shubhamrooter/ShodanSpider`",
+ "raw": "`git clone https://github.com/shubhamrooter/ShodanSpider`"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "ShodanSpider"
+ ],
+ "sections_seen": [
+ "IoT & Device Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sigma",
+ "name": "Sigma",
+ "description": "Generic signature format for SIEM detections",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/SigmaHQ/sigma",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/SigmaHQ/sigma.git",
+ "raw": "`git clone https://github.com/SigmaHQ/sigma.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sigma-cli",
+ "name": "sigma-cli",
+ "description": "Convert Sigma rules to native SIEM queries",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/SigmaHQ/sigma-cli",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install sigma-cli",
+ "raw": "`pip3 install sigma-cli`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "signal",
+ "name": "Signal",
+ "description": "Encrypted messaging",
+ "category": "vpn-privacy",
+ "url": "https://signal.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[signal.org](https://signal.org/)"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "simplelogin",
+ "name": "SimpleLogin",
+ "description": "Email alias service for OSINT",
+ "category": "email-phone",
+ "url": "https://simplelogin.io/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[simplelogin.io](https://simplelogin.io/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sleuthkit",
+ "name": "The Sleuth Kit",
+ "description": "Library and CLI tools for forensic disk analysis",
+ "category": "digital-forensics",
+ "url": "https://www.sleuthkit.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install sleuthkit",
+ "raw": "`apt install sleuthkit`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "slideshare-search",
+ "name": "SlideShare",
+ "description": "Search public PowerPoint/PDF presentations",
+ "category": "document-metadata",
+ "url": "https://www.slideshare.net",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.slideshare.net](https://www.slideshare.net)"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sliver",
+ "name": "Sliver",
+ "description": "Open-source adversary emulation/red-team framework (Cobalt Strike alt)",
+ "category": "red-team-offensive",
+ "url": "https://github.com/BishopFox/sliver",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/bishopfox/sliver/server@latest",
+ "raw": "`go install github.com/bishopfox/sliver/server@latest`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "smap",
+ "name": "smap",
+ "description": "Drop-in replacement for nmap powered by shodan.io",
+ "category": "domain-ip-network",
+ "url": "https://github.com/s0md3v/Smap",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/s0md3v/smap/cmd/smap@latest",
+ "raw": "`go install github.com/s0md3v/smap/cmd/smap@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sn0int",
+ "name": "sn0int",
+ "description": "Semi-automatic OSINT framework in Rust",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install sn0int`",
+ "raw": "`apt install sn0int`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "sn0int"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sn1per",
+ "name": "Sn1per",
+ "description": "Automated pentest reconnaissance scanner",
+ "category": "domain-ip-network",
+ "url": "https://github.com/1N3/Sn1per.git",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/1N3/Sn1per.git`",
+ "raw": "`git clone https://github.com/1N3/Sn1per.git`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Sn1per"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "snoop",
+ "name": "Snoop",
+ "description": "Username search with Russian-focused platforms",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install snoop`",
+ "raw": "`pip install snoop`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Snoop"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "snort",
+ "name": "Snort",
+ "description": "Open-source intrusion-prevention/detection system",
+ "category": "blue-team-defensive",
+ "url": "https://www.snort.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install snort",
+ "raw": "`apt install snort`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "snov.io",
+ "name": "Snov.io",
+ "description": "Email finder & verifier",
+ "category": "email-phone",
+ "url": "https://snov.io/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[snov.io](https://snov.io/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "snscrape",
+ "name": "snscrape",
+ "description": "Social media scraper (Twitter, Reddit, etc.)",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install snscrape`",
+ "raw": "`pip install snscrape`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "snusbase",
+ "name": "Snusbase",
+ "description": "Breach data search engine",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "💰 Paid",
+ "raw": "💰 Paid"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Snusbase"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "snusbase-cli",
+ "name": "Snusbase API",
+ "description": "API access to breach data (premium)",
+ "category": "data-breach",
+ "url": "https://snusbase.com/api",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[snusbase.com](https://snusbase.com/api)"
+ },
+ "tags": [
+ "data-breach",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "social-analyzer",
+ "name": "Social Analyzer",
+ "description": "API-based social media profiler for 1000+ sites",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install social-analyzer`",
+ "raw": "`pip install social-analyzer`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Social Analyzer"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "social-mention",
+ "name": "Social Mention",
+ "description": "Social media aggregator",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Yes",
+ "raw": "✅ Yes"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Searcher Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "social-searcher",
+ "name": "Social Searcher",
+ "description": "Real-time social media search",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Yes",
+ "raw": "✅ Yes"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Searcher Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "social-searcher",
+ "name": "Social-Searcher",
+ "description": "Free social media search engine",
+ "category": "username-social",
+ "url": "https://www.social-searcher.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[social-searcher.com](https://www.social-searcher.com/)"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "socialblade",
+ "name": "SocialBlade",
+ "description": "Social media analytics",
+ "category": "username-social",
+ "url": "https://socialblade.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[socialblade.com](https://socialblade.com/)"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "socialfish",
+ "name": "SocialFish",
+ "description": "Social media phishing",
+ "category": "people-identity",
+ "url": "https://github.com/UndeadSec/SocialFish",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/UndeadSec/SocialFish`",
+ "raw": "`git clone https://github.com/UndeadSec/SocialFish`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "socialscan",
+ "name": "socialscan",
+ "description": "Check email/username availability",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install socialscan`",
+ "raw": "`pip install socialscan`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "socialscan"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "socid-extractor",
+ "name": "Socid-extractor",
+ "description": "Extract user info from web page source code",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install socid-extractor`",
+ "raw": "`pip install socid-extractor`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Socid-extractor"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "socradar",
+ "name": "SOCRadar",
+ "description": "Extended threat intel — attack surface + dark web + brand",
+ "category": "threat-intel-platforms",
+ "url": "https://socradar.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[socradar.io](https://socradar.io)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sourcegraph",
+ "name": "SourceGraph",
+ "description": "Search code from millions of open-source repos",
+ "category": "search-dorking",
+ "url": "https://sourcegraph.com/search",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[sourcegraph.com](https://sourcegraph.com/search)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "spiderfoot",
+ "name": "SpiderFoot",
+ "description": "OSINT automation platform (200+ modules)",
+ "category": "frameworks",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install spiderfoot`",
+ "raw": "`pip3 install spiderfoot`"
+ },
+ "tags": [
+ "frameworks"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "SpiderFoot"
+ ],
+ "sections_seen": [
+ "Frameworks & All-in-One Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "spokeo",
+ "name": "Spokeo",
+ "description": "People search aggregator",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Spokeo",
+ "raw": "Spokeo"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Spokeo"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "spycloud",
+ "name": "SpyCloud",
+ "description": "Account-takeover prevention + identity exposure data",
+ "category": "people-identity",
+ "url": "https://spycloud.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[spycloud.com](https://spycloud.com)"
+ },
+ "tags": [
+ "people-identity",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "spydialer",
+ "name": "SpyDialer",
+ "description": "Free reverse phone lookup",
+ "category": "email-phone",
+ "url": "https://spydialer.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[spydialer.com](https://spydialer.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sqlmap",
+ "name": "SQLMap",
+ "description": "Automated SQL injection tool",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install sqlmap`",
+ "raw": "`apt install sqlmap`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "SQLMap"
+ ],
+ "sections_seen": [
+ "Vulnerability Scanning & Exploitation"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ssl-labs",
+ "name": "SSL Labs",
+ "description": "SSL/TLS server testing",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "SSL Labs",
+ "raw": "SSL Labs"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "SSL Labs"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "ssrfmap",
+ "name": "SSRFmap",
+ "description": "Automated SSRF detection and exploitation framework",
+ "category": "red-team-offensive",
+ "url": "https://github.com/swisskyrepo/SSRFmap",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/swisskyrepo/SSRFmap.git",
+ "raw": "`git clone https://github.com/swisskyrepo/SSRFmap.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "startpage",
+ "name": "Startpage",
+ "description": "Privacy-focused search — Google results with no tracking",
+ "category": "search-dorking",
+ "url": "https://www.startpage.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.startpage.com](https://www.startpage.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "stealseek",
+ "name": "StealSeek",
+ "description": "Search engine for finding and analyzing data breaches",
+ "category": "data-breach",
+ "url": "https://stealseek.io",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[stealseek.io](https://stealseek.io)"
+ },
+ "tags": [
+ "data-breach",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "storm-breaker",
+ "name": "Storm-Breaker",
+ "description": "Access webcam/mic/location (SE)",
+ "category": "people-identity",
+ "url": "https://github.com/ultrasecurity/Storm-Breaker",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/ultrasecurity/Storm-Breaker`",
+ "raw": "`git clone https://github.com/ultrasecurity/Storm-Breaker`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Storm-Breaker"
+ ],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "subfinder",
+ "name": "Subfinder",
+ "description": "Fast passive subdomain discovery",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "go",
+ "kali": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`",
+ "raw": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Subfinder"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "sublist3r",
+ "name": "Sublist3r",
+ "description": "Subdomain enumeration",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install sublist3r`",
+ "raw": "`pip install sublist3r`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Sublist3r"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "subredditstats",
+ "name": "SubredditStats",
+ "description": "Subreddit user-overlap, growth, top posts",
+ "category": "username-social",
+ "url": "https://subredditstats.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[subredditstats.com](https://subredditstats.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sucuri-sitecheck",
+ "name": "Sucuri SiteCheck",
+ "description": "Free website malware scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Sucuri SiteCheck",
+ "raw": "Sucuri SiteCheck"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Sucuri SiteCheck"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "suncalc",
+ "name": "SunCalc",
+ "description": "Sun position/time calculator from photos",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "SunCalc",
+ "raw": "SunCalc"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "SunCalc"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "suricata",
+ "name": "Suricata",
+ "description": "High-perf network IDS / IPS / NSM",
+ "category": "blue-team-defensive",
+ "url": "https://suricata.io",
+ "install": {
+ "method": "apt",
+ "kali": "apt install suricata",
+ "raw": "`apt install suricata`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "synack",
+ "name": "Synack",
+ "description": "Crowdsourced + vetted-researcher pentesting platform",
+ "category": "bug-bounty",
+ "url": "https://www.synack.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.synack.com](https://www.synack.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "sync.me",
+ "name": "Sync.me",
+ "description": "Phone number lookup",
+ "category": "email-phone",
+ "url": "https://sync.me/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[sync.me](https://sync.me/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tails-os",
+ "name": "Tails OS",
+ "description": "Amnesic live OS (no trace)",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Tails OS",
+ "raw": "Tails OS"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Tails OS"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "talkwalker",
+ "name": "Talkwalker",
+ "description": "Social listening & analytics",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "💰 Paid",
+ "raw": "💰 Paid"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Searcher Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tcpdump",
+ "name": "tcpdump",
+ "description": "Command-line packet analyzer",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install tcpdump`",
+ "raw": "`apt install tcpdump`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "telegago",
+ "name": "Telegago",
+ "description": "Google CSE for finding public/private Telegram channels",
+ "category": "username-social",
+ "url": "https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[cse.google.com](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "telegram-nearby-map",
+ "name": "Telegram Nearby Map",
+ "description": "Find positions of nearby Telegram users via OSM",
+ "category": "username-social",
+ "url": "https://github.com/tejado/telegram-nearby-map",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/tejado/telegram-nearby-map.git",
+ "raw": "`git clone https://github.com/tejado/telegram-nearby-map.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "telegram-osinter",
+ "name": "TeleGram-OSINTer",
+ "description": "Telegram profile investigation",
+ "category": "username-social",
+ "url": "https://github.com/Alb-310/TeleGram-OSINTer",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`",
+ "raw": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Telegram OSINT Bots & Channels"
+ ],
+ "archived": false
+ },
+ {
+ "id": "telegramdb",
+ "name": "TelegramDB",
+ "description": "Telegram user & group lookup database",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "TelegramDB",
+ "raw": "TelegramDB"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "TelegramDB"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "telepathy",
+ "name": "Telepathy",
+ "description": "Telegram OSINT analysis",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install telepathy`",
+ "raw": "`pip install telepathy`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Telepathy"
+ ],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "telerecon",
+ "name": "Telerecon",
+ "description": "Reconnaissance framework for investigating Telegram",
+ "category": "username-social",
+ "url": "https://github.com/sockysec/Telerecon",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/sockysec/Telerecon.git",
+ "raw": "`git clone https://github.com/sockysec/Telerecon.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "teleteg",
+ "name": "Teleteg",
+ "description": "Telegram search engine — 10 free results",
+ "category": "username-social",
+ "url": "https://teleteg.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[teleteg.com](https://teleteg.com)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "telethon",
+ "name": "Telethon",
+ "description": "Python Telegram API library",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install telethon`",
+ "raw": "`pip install telethon`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Telegram OSINT Bots & Channels"
+ ],
+ "archived": false
+ },
+ {
+ "id": "telpoisk",
+ "name": "TelPoisk",
+ "description": "Russian phone directory",
+ "category": "email-phone",
+ "url": "https://telpoisk.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[telpoisk.com](https://telpoisk.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tg-search-com",
+ "name": "Telegram Search (lyzem.com)",
+ "description": "Search public Telegram messages and channels",
+ "category": "username-social",
+ "url": "https://lyzem.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[lyzem.com](https://lyzem.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "tgstat",
+ "name": "TGStat",
+ "description": "Telegram channel analytics — post stats, audience overlap",
+ "category": "username-social",
+ "url": "https://tgstat.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[tgstat.com](https://tgstat.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "thatsthem",
+ "name": "ThatsThem",
+ "description": "Free people search by name/email/phone",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ThatsThem",
+ "raw": "ThatsThem"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "ThatsThem"
+ ],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "the-endorser",
+ "name": "the-endorser",
+ "description": "Map LinkedIn endorsements/skills to draw out person relationships",
+ "category": "username-social",
+ "url": "https://github.com/eth0izzle/the-endorser",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/eth0izzle/the-endorser.git",
+ "raw": "`git clone https://github.com/eth0izzle/the-endorser.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "the-osint-rack",
+ "name": "The OSINT Rack",
+ "description": "Ransomware & data leak monitoring",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟢 Free",
+ "raw": "🟢 Free"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "the-web-application-hackers-handbook",
+ "name": "The Web Application Hacker's Handbook (book)",
+ "description": "Stuttard & Pinto — appsec bible",
+ "category": "learning-resources",
+ "url": "https://www.amazon.com/dp/1118026470",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.amazon.com](https://www.amazon.com/dp/1118026470)"
+ },
+ "tags": [
+ "learning-resources",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "theharvester",
+ "name": "theHarvester",
+ "description": "Email, subdomain & IP harvesting tool",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install theHarvester`",
+ "raw": "`pip install theHarvester`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "theHarvester"
+ ],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "thehive",
+ "name": "TheHive",
+ "description": "Scalable, free, open-source case management for SOCs",
+ "category": "blue-team-defensive",
+ "url": "https://thehive-project.org",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull strangebee/thehive:latest",
+ "raw": "`docker pull strangebee/thehive:latest`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "threatconnect",
+ "name": "ThreatConnect",
+ "description": "Threat intel platform combining intel and SOAR",
+ "category": "threat-intel-platforms",
+ "url": "https://threatconnect.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[threatconnect.com](https://threatconnect.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "threatquotient",
+ "name": "ThreatQ",
+ "description": "Threat intel platform for SOCs",
+ "category": "threat-intel-platforms",
+ "url": "https://www.threatq.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.threatq.com](https://www.threatq.com)"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "tiktok-finder",
+ "name": "TikTok Finder Country",
+ "description": "Free OSINT lookup for TikTok account country/language",
+ "category": "username-social",
+ "url": "https://tiktokfindercountry.xyz",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[tiktokfindercountry.xyz](https://tiktokfindercountry.xyz)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "tiktok-scraper",
+ "name": "TikTok Scraper",
+ "description": "TikTok data extraction",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`npm install -g tiktok-scraper`",
+ "raw": "`npm install -g tiktok-scraper`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tineye",
+ "name": "TinEye",
+ "description": "Reverse image search",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "TinEye",
+ "raw": "TinEye"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "TinEye"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tor-browser",
+ "name": "Tor Browser",
+ "description": "Anonymous web browsing via Tor network",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install torbrowser-launcher`",
+ "raw": "`apt install torbrowser-launcher`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Tor Browser"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "torch",
+ "name": "Torch",
+ "description": "Oldest & largest dark web search engine",
+ "category": "dark-web",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`",
+ "raw": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`"
+ },
+ "tags": [
+ "dark-web"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Torch"
+ ],
+ "sections_seen": [
+ "Dark Web Search Engines & Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "torghostng",
+ "name": "TorghostNG",
+ "description": "Anonymize all OS traffic via Tor (Linux)",
+ "category": "dark-web",
+ "url": "https://github.com/githacktools/TorghostNG",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/githacktools/TorghostNG.git",
+ "raw": "`git clone https://github.com/githacktools/TorghostNG.git`"
+ },
+ "tags": [
+ "dark-web",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "tosint",
+ "name": "TOsint",
+ "description": "Extract info from Telegram bots and channels",
+ "category": "username-social",
+ "url": "https://github.com/drego85/tosint",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/drego85/tosint.git",
+ "raw": "`git clone https://github.com/drego85/tosint.git`"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "toutatis",
+ "name": "Toutatis",
+ "description": "Instagram OSINT by phone/email",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install toutatis`",
+ "raw": "`pip install toutatis`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Toutatis"
+ ],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "trace-manus",
+ "name": "Trace",
+ "description": "Search usernames, emails, phones across 600+ platforms with risk scoring",
+ "category": "username-social",
+ "url": "https://trace.manus.space",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[trace.manus.space](https://trace.manus.space)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "tracee",
+ "name": "Tracee",
+ "description": "Runtime security and forensics using eBPF (Aqua)",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/aquasecurity/tracee",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/aquasecurity/tracee.git",
+ "raw": "`git clone https://github.com/aquasecurity/tracee.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "transit-visualisation",
+ "name": "Transit Visualisation Client",
+ "description": "Real-time public transport across 700+ cities",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://tracker.geops.ch",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[tracker.geops.ch](https://tracker.geops.ch)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "trends24-tt",
+ "name": "Trends24",
+ "description": "Twitter trends history per country",
+ "category": "username-social",
+ "url": "https://trends24.in",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[trends24.in](https://trends24.in)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "triage",
+ "name": "Hatching Triage",
+ "description": "Modern malware sandbox with kernel-level monitoring",
+ "category": "malware-threat-intel",
+ "url": "https://tria.ge",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[tria.ge](https://tria.ge)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "trm-labs",
+ "name": "TRM Labs",
+ "description": "Crypto compliance and investigation platform",
+ "category": "crypto-blockchain",
+ "url": "https://www.trmlabs.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.trmlabs.com](https://www.trmlabs.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "truecaller",
+ "name": "Truecaller",
+ "description": "Global reverse phone number lookup",
+ "category": "email-phone",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Truecaller",
+ "raw": "Truecaller"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Truecaller"
+ ],
+ "sections_seen": [
+ "Phone Number OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "trufflehog",
+ "name": "trufflehog",
+ "description": "Find secrets in git repos",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install trufflehog`",
+ "raw": "`pip3 install trufflehog`"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "trufflehog"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tryhackme",
+ "name": "TryHackMe",
+ "description": "Beginner-friendly cybersecurity training platform",
+ "category": "training-ctf",
+ "url": "https://tryhackme.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[tryhackme.com](https://tryhackme.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "twayback",
+ "name": "Twayback",
+ "description": "Find deleted tweets",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install twayback`",
+ "raw": "`pip install twayback`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "tweetbinder",
+ "name": "TweetBinder",
+ "description": "Twitter/X analytics dashboards",
+ "category": "username-social",
+ "url": "https://www.tweetbinder.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.tweetbinder.com](https://www.tweetbinder.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "twint",
+ "name": "Twint",
+ "description": "Twitter OSINT (no API needed)",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install twint`",
+ "raw": "`pip install twint`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Monitoring"
+ ],
+ "archived": false
+ },
+ {
+ "id": "twitch-search",
+ "name": "Twitch Search",
+ "description": "Search live streams by category, language, viewer count",
+ "category": "username-social",
+ "url": "https://www.twitch.tv/directory",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.twitch.tv](https://www.twitch.tv/directory)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "twiteur-osint",
+ "name": "Twiteur",
+ "description": "Twitter/X advanced search wrapper — geo, date, sentiment",
+ "category": "username-social",
+ "url": "https://twiteur.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[twiteur.com](https://twiteur.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "u-find-com",
+ "name": "U-Find",
+ "description": "Reddit user comment / submission scraper",
+ "category": "username-social",
+ "url": "https://u-find.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[u-find.com](https://u-find.com)"
+ },
+ "tags": [
+ "username-social",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "ubertooth",
+ "name": "Ubertooth One",
+ "description": "Open-source 2.4 GHz wireless dev platform — Bluetooth research",
+ "category": "hardware-hacking",
+ "url": "https://greatscottgadgets.com/ubertoothone/",
+ "install": {
+ "method": "apt",
+ "kali": "apt install ubertooth",
+ "raw": "`apt install ubertooth`"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "uncover",
+ "name": "uncover",
+ "description": "ProjectDiscovery — quickly find exposed hosts via Shodan/Censys/Fofa",
+ "category": "search-dorking",
+ "url": "https://github.com/projectdiscovery/uncover",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/projectdiscovery/uncover/cmd/uncover@latest",
+ "raw": "`go install github.com/projectdiscovery/uncover/cmd/uncover@latest`"
+ },
+ "tags": [
+ "search-dorking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "unfurl",
+ "name": "Unfurl",
+ "description": "URL & data artifact analysis tool",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Unfurl",
+ "raw": "Unfurl"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Unfurl"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "urlcadiz",
+ "name": "URLCADIZ",
+ "description": "URL masking tool",
+ "category": "people-identity",
+ "url": "https://github.com/PerezMascato/URLCADIZ",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/PerezMascato/URLCADIZ`",
+ "raw": "`git clone https://github.com/PerezMascato/URLCADIZ`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ },
+ {
+ "id": "urlcrazy",
+ "name": "URLCrazy",
+ "description": "Generate domain typos and check availability/registration",
+ "category": "domain-ip-network",
+ "url": "https://github.com/urbanadventurer/urlcrazy",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/urbanadventurer/urlcrazy.git",
+ "raw": "`git clone https://github.com/urbanadventurer/urlcrazy.git`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "urlhaus",
+ "name": "URLhaus (abuse.ch)",
+ "description": "Database of malicious URLs used for malware distribution",
+ "category": "malware-threat-intel",
+ "url": "https://urlhaus.abuse.ch",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[urlhaus.abuse.ch](https://urlhaus.abuse.ch)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "urlscan.io",
+ "name": "urlscan.io",
+ "description": "URL/domain analysis & screenshots",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "urlscan.io",
+ "raw": "urlscan.io"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "urlscan.io"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "user-scanner",
+ "name": "user-scanner",
+ "description": "Check username presence across dev/social/gaming sites",
+ "category": "username-social",
+ "url": "https://github.com/kaifcodec/user-scanner.git",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/kaifcodec/user-scanner.git`",
+ "raw": "`git clone https://github.com/kaifcodec/user-scanner.git`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "user-scanner"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "user-searcher",
+ "name": "User-Searcher",
+ "description": "Search a username across 2000+ websites",
+ "category": "username-social",
+ "url": "https://www.user-searcher.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.user-searcher.com](https://www.user-searcher.com)"
+ },
+ "tags": [
+ "username-social",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "userrecon",
+ "name": "UserRecon",
+ "description": "Bash-based username finder across platforms",
+ "category": "username-social",
+ "url": "https://github.com/wishihab/userrecon.git",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/wishihab/userrecon.git`",
+ "raw": "`git clone https://github.com/wishihab/userrecon.git`"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "UserRecon"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "usersearch.org",
+ "name": "Usersearch.org",
+ "description": "Free social network search",
+ "category": "username-social",
+ "url": "https://usersearch.org/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[usersearch.org](https://usersearch.org/)"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "vehicle-number-toolbox",
+ "name": "Vehicle Number Search Toolbox",
+ "description": "Search 14 country license plates from one page",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://cipher387.github.io/venicle_number_search_toolbox/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[cipher387.github.io](https://cipher387.github.io/venicle_number_search_toolbox/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "velociraptor",
+ "name": "Velociraptor",
+ "description": "Endpoint visibility and digital forensics — query-driven",
+ "category": "blue-team-defensive",
+ "url": "https://github.com/Velocidex/velociraptor",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/Velocidex/velociraptor.git",
+ "raw": "`git clone https://github.com/Velocidex/velociraptor.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "velocirector",
+ "name": "Velociraptor Server",
+ "description": "Centralized server for Velociraptor agents",
+ "category": "blue-team-defensive",
+ "url": "https://docs.velociraptor.app",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[docs.velociraptor.app](https://docs.velociraptor.app)"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "venacus",
+ "name": "Venacus",
+ "description": "Search for your data breaches and get notified when compromised",
+ "category": "data-breach",
+ "url": "https://venacus.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[venacus.com](https://venacus.com)"
+ },
+ "tags": [
+ "data-breach",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "veracrypt",
+ "name": "VeraCrypt",
+ "description": "Disk encryption",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install veracrypt`",
+ "raw": "`apt install veracrypt`"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "VeraCrypt"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "vesselfinder",
+ "name": "VesselFinder",
+ "description": "Free AIS vessel tracking",
+ "category": "vehicle-aviation-maritime",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "VesselFinder",
+ "raw": "VesselFinder"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "VesselFinder"
+ ],
+ "sections_seen": [
+ "Vehicle, Aviation & Maritime"
+ ],
+ "archived": false
+ },
+ {
+ "id": "viewdns",
+ "name": "ViewDNS",
+ "description": "Multiple DNS investigation tools",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ViewDNS",
+ "raw": "ViewDNS"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "ViewDNS"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "vigilante-pw",
+ "name": "Vigilante.pw",
+ "description": "Index of dumped databases (educational)",
+ "category": "data-breach",
+ "url": "https://vigilante.pw",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[vigilante.pw](https://vigilante.pw)"
+ },
+ "tags": [
+ "data-breach",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "villain",
+ "name": "Villain",
+ "description": "High-level stage 0/1 C2 framework for handling sibling agents",
+ "category": "red-team-offensive",
+ "url": "https://github.com/t3l3machus/Villain",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/t3l3machus/Villain.git",
+ "raw": "`git clone https://github.com/t3l3machus/Villain.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "virustotal",
+ "name": "VirusTotal",
+ "description": "Domain/IP/file analysis",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "VirusTotal",
+ "raw": "VirusTotal"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "VirusTotal"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "virustotal-threat",
+ "name": "VirusTotal (Threat)",
+ "description": "File/URL/domain malware analysis",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "VirusTotal (Threat)",
+ "raw": "VirusTotal (Threat)"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "VirusTotal (Threat)"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "vmray",
+ "name": "VMRay Analyzer",
+ "description": "Malware sandbox analysis platform",
+ "category": "malware-threat-intel",
+ "url": "https://www.vmray.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.vmray.com](https://www.vmray.com)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "voila-norbert",
+ "name": "Voila Norbert",
+ "description": "Find anyone's email",
+ "category": "email-phone",
+ "url": "https://voilanorbert.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[voilanorbert.com](https://voilanorbert.com/)"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "volatility",
+ "name": "Volatility",
+ "description": "Memory forensics framework",
+ "category": "document-metadata",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install volatility3`",
+ "raw": "`pip install volatility3`"
+ },
+ "tags": [
+ "document-metadata"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Volatility"
+ ],
+ "sections_seen": [
+ "Metadata & Digital Forensics"
+ ],
+ "archived": false
+ },
+ {
+ "id": "volatility3",
+ "name": "Volatility 3",
+ "description": "Memory forensics framework",
+ "category": "digital-forensics",
+ "url": "https://github.com/volatilityfoundation/volatility3",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install volatility3",
+ "raw": "`pip3 install volatility3`"
+ },
+ "tags": [
+ "digital-forensics",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "vulnhub",
+ "name": "VulnHub",
+ "description": "Free downloadable vulnerable VMs for offline practice",
+ "category": "training-ctf",
+ "url": "https://www.vulnhub.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.vulnhub.com](https://www.vulnhub.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "vulnyx",
+ "name": "VulnYX",
+ "description": "Online platform with vulnerable boxes (free + premium)",
+ "category": "training-ctf",
+ "url": "https://vulnyx.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[vulnyx.com](https://vulnyx.com)"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "walletexplorer",
+ "name": "WalletExplorer",
+ "description": "Smart bitcoin block explorer — clusters addresses by entity",
+ "category": "crypto-blockchain",
+ "url": "https://walletexplorer.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[walletexplorer.com](https://walletexplorer.com)"
+ },
+ "tags": [
+ "crypto-blockchain",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "wappalyzer",
+ "name": "Wappalyzer",
+ "description": "Technology profiler (browser ext)",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Browser Extension",
+ "raw": "Browser Extension"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Wappalyzer"
+ ],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wayback-machine",
+ "name": "Wayback Machine",
+ "description": "Web archive - explore website history",
+ "category": "misc",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Wayback Machine",
+ "raw": "Wayback Machine"
+ },
+ "tags": [
+ "misc"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Wayback Machine"
+ ],
+ "sections_seen": [
+ "Miscellaneous / Niche Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "waybackurls",
+ "name": "waybackurls",
+ "description": "Fetch all URLs the Wayback Machine knows about a domain",
+ "category": "domain-ip-network",
+ "url": "https://github.com/tomnomnom/waybackurls",
+ "install": {
+ "method": "go",
+ "kali": "go install github.com/tomnomnom/waybackurls@latest",
+ "raw": "`go install github.com/tomnomnom/waybackurls@latest`"
+ },
+ "tags": [
+ "domain-ip-network",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "wazuh",
+ "name": "Wazuh",
+ "description": "Open-source XDR / SIEM platform",
+ "category": "blue-team-defensive",
+ "url": "https://wazuh.com",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/wazuh/wazuh.git",
+ "raw": "`git clone https://github.com/wazuh/wazuh.git`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "weakpass",
+ "name": "Weakpass",
+ "description": "Massive wordlist collection",
+ "category": "data-breach",
+ "url": "https://weakpass.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[weakpass.com](https://weakpass.com/)"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Wordlist Generation & Brute Force"
+ ],
+ "archived": false
+ },
+ {
+ "id": "web-check",
+ "name": "Web-Check",
+ "description": "All-in-one website analysis",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Web-Check",
+ "raw": "Web-Check"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Web-Check"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "webgoat",
+ "name": "OWASP WebGoat",
+ "description": "Deliberately insecure Java-based web app for training",
+ "category": "training-ctf",
+ "url": "https://github.com/WebGoat/WebGoat",
+ "install": {
+ "method": "docker",
+ "kali": "docker pull webgoat/webgoat",
+ "raw": "`docker pull webgoat/webgoat`"
+ },
+ "tags": [
+ "training-ctf",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "webhack",
+ "name": "WebHack",
+ "description": "Web hacking toolkit",
+ "category": "domain-ip-network",
+ "url": "https://github.com/yan4ikyt/webhack",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/yan4ikyt/webhack`",
+ "raw": "`git clone https://github.com/yan4ikyt/webhack`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "webmii",
+ "name": "WebMii",
+ "description": "People search engine",
+ "category": "image-facial",
+ "url": "https://webmii.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[webmii.com](https://webmii.com/)"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Facial Recognition & People Search"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wfuzz",
+ "name": "Wfuzz",
+ "description": "Web fuzzer",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip install wfuzz`",
+ "raw": "`pip install wfuzz`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "whatmail",
+ "name": "WhatMail",
+ "description": "Email header analysis CLI",
+ "category": "email-phone",
+ "url": "https://github.com/z0m31en7/WhatMail",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/z0m31en7/WhatMail`",
+ "raw": "`git clone https://github.com/z0m31en7/WhatMail`"
+ },
+ "tags": [
+ "email-phone"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Email OSINT Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "whatsmyname",
+ "name": "WhatsMyName",
+ "description": "Web-based username enumeration",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "WhatsMyName",
+ "raw": "WhatsMyName"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "WhatsMyName"
+ ],
+ "sections_seen": [
+ "Username & Social Media OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "whatweb",
+ "name": "Whatweb",
+ "description": "Web technology identifier",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install whatweb`",
+ "raw": "`apt install whatweb`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Whatweb"
+ ],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "who-owns-what",
+ "name": "Who Owns What",
+ "description": "NYC landlord portfolio lookup",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://whoownswhat.justfix.org/en/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "who-posted-what",
+ "name": "Who Posted What",
+ "description": "Facebook keyword search",
+ "category": "username-social",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "✅ Free",
+ "raw": "✅ Free"
+ },
+ "tags": [
+ "username-social"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Social Media Searcher Platforms"
+ ],
+ "archived": false
+ },
+ {
+ "id": "whois.com",
+ "name": "WHOIS.com",
+ "description": "WHOIS domain registration lookup",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "WHOIS.com",
+ "raw": "WHOIS.com"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "WHOIS.com"
+ ],
+ "sections_seen": [
+ "Domain & IP OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "whoisology",
+ "name": "Whoisology",
+ "description": "Reverse WHOIS — find domains by registrant",
+ "category": "domain-ip-network",
+ "url": "https://whoisology.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[whoisology.com](https://whoisology.com)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "whonix",
+ "name": "Whonix",
+ "description": "Anonymous OS via Tor (VM-based)",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Whonix",
+ "raw": "Whonix"
+ },
+ "tags": [
+ "vpn-privacy"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Whonix"
+ ],
+ "sections_seen": [
+ "Anonymous & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "whoxy",
+ "name": "Whoxy",
+ "description": "WHOIS lookup with reverse-WHOIS, history, and bulk API",
+ "category": "domain-ip-network",
+ "url": "https://www.whoxy.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.whoxy.com](https://www.whoxy.com)"
+ },
+ "tags": [
+ "domain-ip-network",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "wifi-pineapple",
+ "name": "Wi-Fi Pineapple",
+ "description": "Hak5's wireless auditing platform",
+ "category": "hardware-hacking",
+ "url": "https://shop.hak5.org/products/wifi-pineapple",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[shop.hak5.org](https://shop.hak5.org/products/wifi-pineapple)"
+ },
+ "tags": [
+ "hardware-hacking",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "wifite",
+ "name": "Wifite",
+ "description": "Automated Wi-Fi auditing tool",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install wifite`",
+ "raw": "`apt install wifite`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wigle",
+ "name": "WiGLE",
+ "description": "Wireless network mapping database",
+ "category": "iot-devices",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "WiGLE",
+ "raw": "WiGLE"
+ },
+ "tags": [
+ "iot-devices"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "WiGLE"
+ ],
+ "sections_seen": [
+ "IoT & Device Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wikidata",
+ "name": "Wikidata",
+ "description": "Wikipedia's structured-data backbone — query via SPARQL",
+ "category": "people-identity",
+ "url": "https://www.wikidata.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.wikidata.org](https://www.wikidata.org)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "wikimapia",
+ "name": "Wikimapia",
+ "description": "Collaborative world map with annotations",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Wikimapia",
+ "raw": "Wikimapia"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Wikimapia"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wikipedia-search",
+ "name": "Wikipedia",
+ "description": "Free encyclopedia — start of every people/place investigation",
+ "category": "people-identity",
+ "url": "https://en.wikipedia.org",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[en.wikipedia.org](https://en.wikipedia.org)"
+ },
+ "tags": [
+ "people-identity",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "windscribe-free",
+ "name": "Windscribe Free",
+ "description": "Generous free VPN with 10GB/month and ad blocking",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Website",
+ "raw": "Website"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:10GB/month, 10 countries",
+ "open-source:❌",
+ "no-log:✅",
+ "protocols:WireGuard, OpenVPN, IKEv2"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Windscribe Free"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wireguard",
+ "name": "WireGuard",
+ "description": "Modern VPN protocol — ultra-fast, minimal attack surface",
+ "category": "vpn-privacy",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install wireguard`",
+ "raw": "`apt install wireguard`"
+ },
+ "tags": [
+ "vpn-privacy",
+ "free-tier:Free open-source protocol (self-hosted)",
+ "open-source:✅",
+ "no-log:✅",
+ "protocols:WireGuard (native)"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "WireGuard"
+ ],
+ "sections_seen": [
+ "Free VPN & Privacy Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "wireshark",
+ "name": "Wireshark",
+ "description": "Network protocol analyzer",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install wireshark`",
+ "raw": "`apt install wireshark`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Wireshark"
+ ],
+ "sections_seen": [
+ "Network & Wireless Tools"
+ ],
+ "archived": false
+ },
+ {
+ "id": "worldlicenseplates",
+ "name": "WorldLicensePlates",
+ "description": "Graphic index of license plates by country",
+ "category": "vehicle-aviation-maritime",
+ "url": "http://www.worldlicenseplates.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.worldlicenseplates.com](http://www.worldlicenseplates.com)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "wpscan",
+ "name": "WPScan",
+ "description": "WordPress vulnerability scanner",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "`gem install wpscan`",
+ "raw": "`gem install wpscan`"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "WPScan"
+ ],
+ "sections_seen": [
+ "Web Application OSINT & Scanning"
+ ],
+ "archived": false
+ },
+ {
+ "id": "xeuledoc",
+ "name": "XeuleDoc",
+ "description": "Fetch info on Google Docs/Sheets/Slides/Drawings without auth",
+ "category": "document-metadata",
+ "url": "https://github.com/Malfrats/xeuledoc",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install xeuledoc",
+ "raw": "`pip3 install xeuledoc`"
+ },
+ "tags": [
+ "document-metadata",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "xposedornot",
+ "name": "XposedOrNot",
+ "description": "Breach exposure check",
+ "category": "data-breach",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "🟢 Free",
+ "raw": "🟢 Free"
+ },
+ "tags": [
+ "data-breach"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "XposedOrNot"
+ ],
+ "sections_seen": [
+ "Data Breach & Leak Search Engines"
+ ],
+ "archived": false
+ },
+ {
+ "id": "xsstrike",
+ "name": "XSStrike",
+ "description": "Advanced XSS scanner with crawler and payload generator",
+ "category": "red-team-offensive",
+ "url": "https://github.com/s0md3v/XSStrike",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/s0md3v/XSStrike.git",
+ "raw": "`git clone https://github.com/s0md3v/XSStrike.git`"
+ },
+ "tags": [
+ "red-team-offensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "yandex-images",
+ "name": "Yandex Images",
+ "description": "Best reverse image search for faces/places",
+ "category": "image-facial",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Yandex Images",
+ "raw": "Yandex Images"
+ },
+ "tags": [
+ "image-facial"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Yandex Images"
+ ],
+ "sections_seen": [
+ "Image & Video OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "yandex-search",
+ "name": "Yandex",
+ "description": "Russian search engine — strong reverse-image and Cyrillic support",
+ "category": "search-dorking",
+ "url": "https://www.yandex.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.yandex.com](https://www.yandex.com)"
+ },
+ "tags": [
+ "search-dorking",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "yara",
+ "name": "YARA",
+ "description": "Pattern matching for malware research",
+ "category": "malware-threat-intel",
+ "url": "",
+ "install": {
+ "method": "apt",
+ "kali": "`apt install yara`",
+ "raw": "`apt install yara`"
+ },
+ "tags": [
+ "malware-threat-intel"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "YARA"
+ ],
+ "sections_seen": [
+ "Malware & Threat Intelligence"
+ ],
+ "archived": false
+ },
+ {
+ "id": "yaraify",
+ "name": "YARAify",
+ "description": "Collaborative YARA engine for open threat intel via file pattern matching",
+ "category": "malware-threat-intel",
+ "url": "https://yaraify.abuse.ch/scan/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[yaraify.abuse.ch](https://yaraify.abuse.ch/scan/)"
+ },
+ "tags": [
+ "malware-threat-intel",
+ "curated-addition",
+ "from-jivoi"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "yeswehack",
+ "name": "YesWeHack",
+ "description": "European-based bug-bounty and VDP platform",
+ "category": "bug-bounty",
+ "url": "https://www.yeswehack.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.yeswehack.com](https://www.yeswehack.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "yeti",
+ "name": "Yeti",
+ "description": "Open distributed threat intelligence platform",
+ "category": "threat-intel-platforms",
+ "url": "https://yeti-platform.io",
+ "install": {
+ "method": "git",
+ "kali": "git clone https://github.com/yeti-platform/yeti.git",
+ "raw": "`git clone https://github.com/yeti-platform/yeti.git`"
+ },
+ "tags": [
+ "threat-intel-platforms",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "yumpu",
+ "name": "Yumpu",
+ "description": "Document publishing — sometimes leaks via search",
+ "category": "document-metadata",
+ "url": "https://www.yumpu.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.yumpu.com](https://www.yumpu.com)"
+ },
+ "tags": [
+ "document-metadata",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "zeek",
+ "name": "Zeek (Bro)",
+ "description": "Powerful network analysis framework for security monitoring",
+ "category": "blue-team-defensive",
+ "url": "https://zeek.org",
+ "install": {
+ "method": "apt",
+ "kali": "apt install zeek",
+ "raw": "`apt install zeek`"
+ },
+ "tags": [
+ "blue-team-defensive",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "zehef",
+ "name": "Zehef",
+ "description": "OSINT tool for email/phone/name investigations",
+ "category": "people-identity",
+ "url": "",
+ "install": {
+ "method": "pip",
+ "kali": "`pip3 install zehef`",
+ "raw": "`pip3 install zehef`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "Zehef"
+ ],
+ "sections_seen": [
+ "People & Identity OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "zerobounce",
+ "name": "ZeroBounce",
+ "description": "Email validation and deliverability service",
+ "category": "email-phone",
+ "url": "https://www.zerobounce.net",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[www.zerobounce.net](https://www.zerobounce.net)"
+ },
+ "tags": [
+ "email-phone",
+ "v2.1-deep-research"
+ ],
+ "source_versions": [
+ "v2.1"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "zerodium",
+ "name": "Zerodium",
+ "description": "Premium 0day acquisition platform",
+ "category": "bug-bounty",
+ "url": "https://zerodium.com",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[zerodium.com](https://zerodium.com)"
+ },
+ "tags": [
+ "bug-bounty",
+ "v3.3-expansion"
+ ],
+ "source_versions": [
+ "v3.3"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "zillow",
+ "name": "Zillow",
+ "description": "Property records & estimates",
+ "category": "vehicle-aviation-maritime",
+ "url": "https://zillow.com/",
+ "install": {
+ "method": "web",
+ "kali": "",
+ "raw": "[zillow.com](https://zillow.com/)"
+ },
+ "tags": [
+ "vehicle-aviation-maritime"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [],
+ "sections_seen": [
+ "Vehicle, Property & Public Records"
+ ],
+ "archived": false
+ },
+ {
+ "id": "zoom-earth",
+ "name": "Zoom Earth",
+ "description": "Real-time satellite & weather",
+ "category": "geolocation",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "Zoom Earth",
+ "raw": "Zoom Earth"
+ },
+ "tags": [
+ "geolocation"
+ ],
+ "source_versions": [
+ "v1",
+ "v2"
+ ],
+ "aliases": [
+ "Zoom Earth"
+ ],
+ "sections_seen": [
+ "Geolocation & Maps OSINT"
+ ],
+ "archived": false
+ },
+ {
+ "id": "zoomeye",
+ "name": "ZoomEye",
+ "description": "Cyberspace search engine for IoT",
+ "category": "domain-ip-network",
+ "url": "",
+ "install": {
+ "method": "manual",
+ "kali": "ZoomEye",
+ "raw": "ZoomEye"
+ },
+ "tags": [
+ "domain-ip-network"
+ ],
+ "source_versions": [
+ "v2"
+ ],
+ "aliases": [
+ "ZoomEye"
+ ],
+ "sections_seen": [
+ "Domain & IP / Network Recon"
+ ],
+ "archived": false
+ },
+ {
+ "id": "zoomeye-cli",
+ "name": "ZoomEye CLI",
+ "description": "Command-line interface for ZoomEye internet asset search",
+ "category": "iot-devices",
+ "url": "https://github.com/knownsec/ZoomEye",
+ "install": {
+ "method": "pip",
+ "kali": "pip3 install zoomeye",
+ "raw": "`pip3 install zoomeye`"
+ },
+ "tags": [
+ "iot-devices",
+ "curated-addition"
+ ],
+ "source_versions": [
+ "v3.1-curated"
+ ],
+ "aliases": [],
+ "sections_seen": [],
+ "archived": false
+ },
+ {
+ "id": "zphisher",
+ "name": "Zphisher",
+ "description": "30+ phishing templates",
+ "category": "people-identity",
+ "url": "https://github.com/htr-tech/zphisher",
+ "install": {
+ "method": "git",
+ "kali": "`git clone https://github.com/htr-tech/zphisher`",
+ "raw": "`git clone https://github.com/htr-tech/zphisher`"
+ },
+ "tags": [
+ "people-identity"
+ ],
+ "source_versions": [
+ "v1"
+ ],
+ "aliases": [
+ "Zphisher"
+ ],
+ "sections_seen": [
+ "Social Engineering & Phishing"
+ ],
+ "archived": false
+ }
+]
\ No newline at end of file