From 63abebdc14cd32684fd2be8404ac1fb100d90642 Mon Sep 17 00:00:00 2001 From: rawfilejson Date: Sun, 10 May 2026 02:23:05 +0100 Subject: [PATCH] Version 2.1 --- LICENSE | 21 - README.md | 2067 ++++- blueteam.sh | 149 + extras.sh | 132 + forensics.sh | 136 + hardware.sh | 135 + install.sh | 42 + install_osint_arsenal.sh | 422 - labs.sh | 129 + osint.sh | 360 + redteam.sh | 156 + termux.sh | 93 + tools.json | 17624 +++++++++++++++++++++++++++++++++++++ 13 files changed, 20977 insertions(+), 489 deletions(-) delete mode 100644 LICENSE create mode 100644 blueteam.sh create mode 100644 extras.sh create mode 100644 forensics.sh create mode 100644 hardware.sh create mode 100644 install.sh delete mode 100644 install_osint_arsenal.sh create mode 100644 labs.sh create mode 100644 osint.sh create mode 100644 redteam.sh create mode 100644 termux.sh create mode 100644 tools.json diff --git a/LICENSE b/LICENSE deleted file mode 100644 index 6829048..0000000 --- a/LICENSE +++ /dev/null @@ -1,21 +0,0 @@ -MIT License - -Copyright (c) 2026 barni - -Permission is hereby granted, free of charge, to any person obtaining a copy -of this software and associated documentation files (the "Software"), to deal -in the Software without restriction, including without limitation the rights -to use, copy, modify, merge, publish, distribute, sublicense, and/or sell -copies of the Software, and to permit persons to whom the Software is -furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all -copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, -OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE -SOFTWARE. diff --git a/README.md b/README.md index f543d07..5909677 100644 --- a/README.md +++ b/README.md @@ -6,32 +6,73 @@ # 🔍 AWESOME OSINT ARSENAL -### The Ultimate Open-Source Intelligence Toolkit +### The Ultimate Open-Source Intelligence + Security Toolkit
-[![Tools](https://img.shields.io/badge/Tools-1100%2B-FF4444?style=for-the-badge&logo=target&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) -[![Categories](https://img.shields.io/badge/Categories-50%2B-0066CC?style=for-the-badge&logo=buffer&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) -[![Version](https://img.shields.io/badge/Version-2.0-00CC66?style=for-the-badge&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) -[![Updated](https://img.shields.io/badge/Updated-2025--2026-FF8800?style=for-the-badge&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) -[![License](https://img.shields.io/badge/License-MIT-FFCC00?style=for-the-badge&logoColor=black)](LICENSE) +[![Tools](https://img.shields.io/badge/Tools-751%2B-FF4444?style=for-the-badge&logo=target&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![Categories](https://img.shields.io/badge/Categories-50-0066CC?style=for-the-badge&logo=buffer&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![Version](https://img.shields.io/badge/Version-2.1-00CC66?style=for-the-badge&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![Updated](https://img.shields.io/badge/Updated-2026--05--10-FF8800?style=for-the-badge&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) [![Stars](https://img.shields.io/github/stars/rawfilejson/awesome-osint-arsenal?style=for-the-badge&color=gold&logo=github)](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers)
-> **1100+ tools · 50+ categories · One-command Kali installer** +> **751+ tools · 50 categories · Multi-distro installers · Georgian OSINT · Termux support** > -> *The most comprehensive OSINT toolkit on the internet — every tool includes installation instructions* +> *The most comprehensive OSINT and security toolkit on the internet — every tool with installation instructions or a verified link.* + +Buy Me a Coffee
-### ⚡ One-Line Kali Linux Installer +### ⚡ Get everything in one command ```bash -curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install_osint_arsenal.sh | sudo bash +git clone https://github.com/rawfilejson/awesome-osint-arsenal ``` -*Or clone and run manually — see [Installation Guide](#%EF%B8%8F-installation-guide) below* +```bash +cd awesome-osint-arsenal +``` + +```bash +sudo bash install.sh +``` + +### 🎯 Or pick just what you need + +```bash +sudo bash osint.sh # 🔍 OSINT only (Sherlock, Maigret, Amass, …) +``` + +```bash +sudo bash redteam.sh # ⚔️ Red team (Sliver, BloodHound, Mimikatz, Nuclei, …) +``` + +```bash +sudo bash blueteam.sh # 🛡️ Blue team (Wazuh, Sigma, Suricata, Velociraptor, …) +``` + +```bash +sudo bash forensics.sh # 🔬 DFIR + RE (Volatility, Ghidra, radare2, …) +``` + +```bash +sudo bash hardware.sh # 🔌 Hardware + SDR (binwalk, hackrf, openocd, …) +``` + +```bash +sudo bash labs.sh # 🎓 Vulnerable apps for practice (DVWA, Juice Shop, …) +``` + +```bash +bash termux.sh # 📱 Android (Termux subset, no sudo needed) +``` + +> Works on **Kali, Debian, Ubuntu, Parrot, Mint, Pop!_OS** (best — `apt`) +> Partial on **Arch / Manjaro / Fedora / RHEL** (auto-detected, falls back to git/pip/go) +> Termux subset on **Android**
@@ -39,12 +80,30 @@ curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/mai --- +> [!IMPORTANT] +> ## 🙏 A note before you fork +> +> This repo has **751 tools across 50 categories**. Keeping that current — links, install commands, new tools every week — is a *lot* for one person. +> +> **If nobody helps, parts of this list will go stale.** That's just real talk. +> +> **How you can help in 30 seconds:** +> - ⭐ **Star** the repo (more stars = more contributors find it) +> - 🐛 **Spotted a dead link?** Open an issue, takes 1 minute +> - ☕ [**Buy me a coffee**](https://www.buymeacoffee.com/rawfilejson) so weekends keep going to this +> - 📢 **Share it** — tweet, Discord, wherever the security crowd hangs out +> +> If something's broken: **don't just complain — open an issue or PR. That's how this stays useful.** + +--- + > [!WARNING] > **DISCLAIMER:** This repository is for **educational and authorized security research only**. > Always obtain written permission before testing systems you do not own. > The authors are **not responsible** for any misuse of the tools or techniques listed here. > See the full [Legal Disclaimer](#%EF%B8%8F-legal-disclaimer) at the bottom. + --- ## 📋 Table of Contents @@ -156,60 +215,127 @@ curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/mai + +
+⚔️ Red Team & Blue Team — click to expand + +42. [Red Team & Offensive Security](#42--red-team--offensive-security) +43. [Blue Team & Defensive Security](#43--blue-team--defensive-security) +44. [Threat Intel Platforms](#44--threat-intel-platforms) + +
+ +
+🔬 Forensics, Hardware & Training — click to expand + +45. [Digital Forensics & Reverse Engineering](#45--digital-forensics--reverse-engineering) +46. [Training, Labs & CTF](#46--training-labs--ctf) +47. [Bug Bounty Platforms](#47--bug-bounty-platforms) + +
+ +
+📚 Knowledge & Curated Additions — click to expand + +48. [Learning Resources](#48--learning-resources) +49. [Extra Tools (curated additions)](#49--extra-tools-curated-additions) + +
+ +
+🇬🇪 Country-Specific OSINT — click to expand + +50. [Georgian OSINT Arsenal](#50--georgian-osint-arsenal-500-resources) + +
+ --- ## ⚙️ Installation Guide -> `install_osint_arsenal.sh` automates the full setup on **Kali Linux** — apt packages, pip tools, Go binaries, Ruby gems, and git-cloned tools all in one run. - -### Option A — Direct curl install +### Quick install — Kali / Debian / Ubuntu / Parrot ```bash -curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install_osint_arsenal.sh | sudo bash +git clone https://github.com/rawfilejson/awesome-osint-arsenal ``` -### Option B — Clone and run *(recommended — lets you inspect first)* - ```bash -git clone https://github.com/rawfilejson/awesome-osint-arsenal.git cd awesome-osint-arsenal -chmod +x install_osint_arsenal.sh -sudo bash install_osint_arsenal.sh ``` -### What the script installs +```bash +sudo bash install.sh +``` -| Category | Examples | -|:--------:|---------| -| 📦 **apt packages** | nmap, masscan, wireshark, hydra, hashcat, aircrack-ng, nikto, sqlmap, binwalk, exiftool… | -| 🐍 **Python pip** | sherlock, maigret, holehe, h8mail, socialscan, phoneinfoga, deepface, volatility3… | -| 🐹 **Go binaries** | amass, subfinder, httpx, nuclei, katana, gobuster, onionscan, evilginx2… | -| 💎 **Ruby gems** | wpscan | -| 📂 **Git clones** | fsociety, hackingtool, zphisher, Storm-Breaker, Photon, SecLists, Responder, Orbit… | -| ➕ **Extras added** | trufflehog, dnstwist, waybackpy, EyeWitness, crosslinked, osmedeus, FinalRecon… | -| 🌐 **Services** | Tor daemon + proxychains4 (for dark web tools) | +### Pick a single stack + +| Script | What it installs | Use when | +|---|---|---| +| `osint.sh` | OSINT tools (Sherlock, Maigret, Amass, theHarvester, …) | You only do recon / investigations | +| `redteam.sh` | Sliver, BloodHound, Impacket, NetExec, Mimikatz, Nuclei, … | Authorized pentesting / red team | +| `blueteam.sh` | Wazuh, Sigma, Suricata, Velociraptor, Atomic Red Team, MITRE CALDERA | SOC / detection engineering | +| `forensics.sh` | Volatility 3, Ghidra, radare2, Plaso, CyberChef, … | DFIR / malware analysis | +| `hardware.sh` | binwalk, hackrf, openocd, GNU Radio, gqrx, … | RF / IoT / firmware research | +| `labs.sh` | DVWA, Juice Shop, WebGoat (Docker) | Local practice labs | +| `termux.sh` | Android-compatible subset | Phone-based recon | + +### Other Linux distros + +The installers auto-detect your package manager: + +| Distro | Manager | Status | +|---|---|---| +| Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS | `apt` | ✅ Best — primary target | +| Arch / Manjaro / EndeavourOS | `pacman` | 🟡 Partial (apt-only tools skip cleanly) | +| Fedora / RHEL / Rocky / Alma | `dnf` | 🟡 Partial (apt-only tools skip cleanly) | +| Termux (Android) | `pkg` | ✅ Subset only — use `bash termux.sh` | +| macOS / Windows | — | ❌ Use a Kali VM or WSL2 | + +### What every installer does + +- Detects your distro and uses the right package manager +- Skips what's already installed (idempotent — safe to re-run) +- Color output: 🟢 installed · 🟡 skipped · 🔴 failed +- Logs failures to `~/osint-install-errors.log` +- Prints a summary at the end +- Tools cloned via git go to `/opt/osint-arsenal/` (or `$HOME/osint-arsenal/` on Termux) + +### After install — add tools to your PATH + +```bash +echo 'export PATH="$PATH:/opt/osint-arsenal"' >> ~/.bashrc +``` + +```bash +source ~/.bashrc +``` + +Tools installed via `apt`/`pip`/`go install` are already on your `$PATH`. -> All git-cloned tools are saved to `/opt/osint-arsenal/` -> Full install log saved to `/var/log/osint-arsenal-install.log` --- - ## 📊 Stats at a Glance
| 🛠️ Total Tools | 💻 CLI Tools | 📁 GitHub Repos | 🌐 Online Platforms | 🤖 AI Tools | |:-:|:-:|:-:|:-:|:-:| -| **1100+** | **400+** | **300+** | **250+** | **25+** | +| **751+** | **165+** | **117+** | **461+** | **25+** | -| 🕶️ Dark Web Engines | 🖥️ OSINT OSes | 💥 Breach Engines | 🔍 Google Dorks | 📂 Categories | +| 🕶️ Dark Web | 🇬🇪 Georgian OSINT | 💥 Breach Engines | ⚔️ Red Team | 🛡️ Blue Team | |:-:|:-:|:-:|:-:|:-:| -| **17** | **17** | **25+** | **50+** | **41** | +| **15+** | **500+** | **39+** | **35+** | **24+** | + +| 🔬 Forensics | 🔌 Hardware | 🎓 Training | 🎯 Bug Bounty | 📂 Total Categories | +|:-:|:-:|:-:|:-:|:-:| +| **16+** | **16+** | **21+** | **12+** | **50** | + +Buy Me a Coffee
---- +--- ## 1. Username & Social Media OSINT > 🎯 Find accounts, profiles, and digital footprints across hundreds of platforms. @@ -1212,7 +1338,7 @@ echo "Done! All tools installed." ```bash # From this repo's installer (recommended — installs everything) -sudo bash install_osint_arsenal.sh +sudo bash install.sh # Or add specific tools manually: sudo apt update && sudo apt install -y \ @@ -1412,12 +1538,12 @@ python3 cupp.py -i ```bash # Option 1: Direct from this repo (one command) -curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install_osint_arsenal.sh | sudo bash +curl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install.sh | sudo bash # Option 2: Clone first (recommended — inspect before running) git clone https://github.com/rawfilejson/awesome-osint-arsenal.git cd awesome-osint-arsenal -sudo bash install_osint_arsenal.sh +sudo bash install.sh ``` ### 📱 Termux (Android) @@ -1518,15 +1644,1783 @@ sudo git clone https://github.com/RedSiege/EyeWitness --- -## 🤝 Contributing -Contributions are welcome and appreciated! If you know a tool that belongs here: +
-1. **Fork** this repository -2. **Add** the tool to the relevant section with an install command if applicable -3. **Submit a PR** with a short description of why it belongs +☕ *Liked everything above? Section 42-50 just dropped — fuel the next batch:* -Please keep all contributions relevant to OSINT, security research, and authorized testing. +Buy Me a Coffee + +
+ +--- + +## 42. ⚔️ Red Team & Offensive Security + +> C2 frameworks, AD attacks, exploitation kits, post-exploitation. Authorized testing only. +> +> **Pro tip:** Sliver and Havoc are the modern open-source Cobalt Strike alternatives — start there before paying. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **AD Attack & Defense** | Comprehensive Active Directory attack reference | `git clone https://github.com/infosecn1nja/AD-Attack-Defense.git` | +| **Arjun** | HTTP parameter discovery suite | `pip3 install arjun` | +| **BloodHound** | AD attack-path graph analysis | `git clone https://github.com/BloodHoundAD/BloodHound.git` | +| **BloodHound CE** | Community Edition of BloodHound — modernized stack | `docker pull specterops/bloodhound:latest` | +| **[Brute Ratel C4](https://bruteratel.com)** | Premium C2 with strong AV/EDR evasion | [bruteratel.com](https://bruteratel.com) | +| **Certipy** | Active Directory Certificate Services enumeration and abuse | `pip3 install certipy-ad` | +| **[Cobalt Strike](https://www.cobaltstrike.com)** | Premium adversary simulation / red team framework | [cobaltstrike.com](https://www.cobaltstrike.com) | +| **CrackMapExec** | Post-exploitation tool for AD networks | `pip3 install crackmapexec` | +| **CRLFuzz** | Fast CRLF-injection scanner in Go | `go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest` | +| **Dalfox** | Fast, intelligent XSS scanner | `go install github.com/hahwul/dalfox/v2@latest` | +| **Evil-WinRM** | Ultimate WinRM shell for hacking/pentesting | `apt install evil-winrm` | +| **Ghauri** | Advanced cross-platform tool to detect/exploit SQLi | `git clone https://github.com/r0oth3x49/ghauri.git` | +| **Gxss** | Test parameters for cross-site scripting reflection | `go install github.com/KathanP19/Gxss@latest` | +| **[HackTricks](https://book.hacktricks.xyz)** | Pentesting / hacking knowledge base by carlospolop | [book.hacktricks.xyz](https://book.hacktricks.xyz) | +| **Havoc** | Modern, malleable post-exploitation C2 framework | `git clone https://github.com/HavocFramework/Havoc.git` | +| **Impacket** | Python classes for working with network protocols (Windows attacks) | `pip3 install impacket` | +| **Kerbrute** | Tool for performing Kerberos pre-auth bruteforcing | `go install github.com/ropnop/kerbrute@latest` | +| **kiterunner** | Contextual content-discovery for modern API endpoints | `go install github.com/assetnote/kiterunner/cmd/kr@latest` | +| **Merlin** | Cross-platform HTTP/2 post-exploitation server and agent in Go | `go install github.com/Ne0nd0g/merlin@latest` | +| **Metasploit Framework** | Industry-standard exploitation framework with 2000+ modules | `apt install metasploit-framework` | +| **Mythic** | Cross-platform, post-exploit, multi-user red team framework | `git clone https://github.com/its-a-feature/Mythic.git` | +| **NetExec (nxc)** | CrackMapExec maintained successor — AD network exploitation | `pip3 install git+https://github.com/Pennyw0rth/NetExec` | +| **[Nighthawk](https://www.mdsec.co.uk/nighthawk/)** | Premium evasive C2 by MDSec (Cobalt Strike alt) | [mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/) | +| **NoSQLMap** | Automated NoSQL database enumeration and exploitation | `git clone https://github.com/codingo/NoSQLMap.git` | +| **Nuclei Templates** | Community-curated templates for Nuclei | `git clone https://github.com/projectdiscovery/nuclei-templates.git` | +| **ParamMiner (Burp ext)** | Discover hidden, unlinked HTTP parameters in Burp | `git clone https://github.com/PortSwigger/param-miner.git` | +| **PayloadsAllTheThings** | Web app pentest payloads, bypasses, and methodology | `git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git` | +| **PetitPotam** | PoC tool to coerce Windows hosts to authenticate to attacker | `git clone https://github.com/topotam/PetitPotam.git` | +| **PowerShell Empire** | Post-exploitation framework with PS-based agents | `git clone https://github.com/BC-SECURITY/Empire.git` | +| **Rubeus** | C# toolset for raw Kerberos interaction and abuse | `git clone https://github.com/GhostPack/Rubeus.git` | +| **SharpHound** | C# data collector for BloodHound | `git clone https://github.com/BloodHoundAD/SharpHound.git` | +| **Sliver** | Open-source adversary emulation/red-team framework (Cobalt Strike alt) | `go install github.com/bishopfox/sliver/server@latest` | +| **SSRFmap** | Automated SSRF detection and exploitation framework | `git clone https://github.com/swisskyrepo/SSRFmap.git` | +| **Villain** | High-level stage 0/1 C2 framework for handling sibling agents | `git clone https://github.com/t3l3machus/Villain.git` | +| **XSStrike** | Advanced XSS scanner with crawler and payload generator | `git clone https://github.com/s0md3v/XSStrike.git` | + +--- + +## 43. 🛡️ Blue Team & Defensive Security + +> SIEM, EDR, network monitoring, detection engineering, IR. +> +> **Pro tip:** Wazuh is your free Splunk replacement. Pair it with Sigma rules + Suricata for a full SOC stack on commodity hardware. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **Atomic Red Team** | Library of small detection-test scripts mapped to MITRE ATT&CK | `git clone https://github.com/redcanaryco/atomic-red-team.git` | +| **Chainsaw** | Hunt threats in Windows event logs — fast forensics | `git clone https://github.com/WithSecureLabs/chainsaw.git` | +| **Cortex (TheHive)** | Observable analysis and active response engine | `docker pull thehiveproject/cortex:latest` | +| **Elastic Stack (ELK)** | Elasticsearch + Logstash + Kibana — log analytics | `docker pull docker.elastic.co/elasticsearch/elasticsearch:latest` | +| **Falco** | Cloud-native runtime security | `git clone https://github.com/falcosecurity/falco.git` | +| **Graylog** | Open-source log management / SIEM | `docker pull graylog/graylog:latest` | +| **Hayabusa** | Windows event log fast forensics timeline generator | `git clone https://github.com/Yamato-Security/hayabusa.git` | +| **Loki** | Simple IOC and YARA scanner by Florian Roth | `git clone https://github.com/Neo23x0/Loki.git` | +| **[MITRE ATT&CK](https://attack.mitre.org)** | Adversary tactics, techniques, and procedures knowledge base | [attack.mitre.org](https://attack.mitre.org) | +| **MITRE CALDERA** | Cyber adversary emulation platform | `git clone https://github.com/mitre/caldera.git` | +| **[MITRE D3FEND](https://d3fend.mitre.org)** | Defensive countermeasure knowledge graph | [d3fend.mitre.org](https://d3fend.mitre.org) | +| **osquery** | SQL-powered OS instrumentation/monitoring/analytics | `apt install osquery` | +| **RITA** | Real Intelligence Threat Analytics — beaconing/long-conn detection | `git clone https://github.com/activecm/rita.git` | +| **[Security Onion](https://securityonionsolutions.com)** | Linux distro for threat hunting, monitoring, and log management | [securityonionsolutions.com](https://securityonionsolutions.com) | +| **Sigma** | Generic signature format for SIEM detections | `git clone https://github.com/SigmaHQ/sigma.git` | +| **sigma-cli** | Convert Sigma rules to native SIEM queries | `pip3 install sigma-cli` | +| **Snort** | Open-source intrusion-prevention/detection system | `apt install snort` | +| **Suricata** | High-perf network IDS / IPS / NSM | `apt install suricata` | +| **TheHive** | Scalable, free, open-source case management for SOCs | `docker pull strangebee/thehive:latest` | +| **Tracee** | Runtime security and forensics using eBPF (Aqua) | `git clone https://github.com/aquasecurity/tracee.git` | +| **Velociraptor** | Endpoint visibility and digital forensics — query-driven | `git clone https://github.com/Velocidex/velociraptor.git` | +| **[Velociraptor Server](https://docs.velociraptor.app)** | Centralized server for Velociraptor agents | [docs.velociraptor.app](https://docs.velociraptor.app) | +| **Wazuh** | Open-source XDR / SIEM platform | `git clone https://github.com/wazuh/wazuh.git` | +| **Zeek (Bro)** | Powerful network analysis framework for security monitoring | `apt install zeek` | + +--- + +## 44. 🛰️ Threat Intel Platforms + +> CTI platforms — open-source and enterprise. +> +> **Pro tip:** MISP is free and powerful. OpenCTI gives you a STIX2-native graph DB. Both run as Docker stacks. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **[Anomali ThreatStream](https://www.anomali.com)** | Enterprise threat intel aggregation platform | [anomali.com](https://www.anomali.com) | +| **[CrowdStrike Falcon Intelligence](https://www.crowdstrike.com/products/threat-intelligence/)** | Premium adversary intel from CrowdStrike | [crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/) | +| **[Digital Shadows SearchLight](https://www.reliaquest.com)** | Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP) | [reliaquest.com](https://www.reliaquest.com) | +| **[EclecticIQ Intelligence Center](https://www.eclecticiq.com)** | STIX/TAXII-native threat intel platform | [eclecticiq.com](https://www.eclecticiq.com) | +| **[Flashpoint](https://flashpoint.io)** | Business risk intel from criminal forums and dark web | [flashpoint.io](https://flashpoint.io) | +| **[Intel471](https://intel471.com)** | Premium adversary intelligence and underground monitoring platform | [intel471.com](https://intel471.com) | +| **[IntSights](https://intsights.com)** | External threat protection and intel (now part of Rapid7) | [intsights.com](https://intsights.com) | +| **[KELA](https://kelacyber.com)** | Cybercrime intelligence and dark-web monitoring | [kelacyber.com](https://kelacyber.com) | +| **[Mandiant Advantage](https://www.mandiant.com/advantage)** | Threat intel from Google's Mandiant team | [mandiant.com](https://www.mandiant.com/advantage) | +| **OpenCTI** | Open-source CTI platform structured around STIX2 | `docker pull opencti/platform` | +| **[SOCRadar](https://socradar.io)** | Extended threat intel — attack surface + dark web + brand | [socradar.io](https://socradar.io) | +| **[ThreatConnect](https://threatconnect.com)** | Threat intel platform combining intel and SOAR | [threatconnect.com](https://threatconnect.com) | +| **[ThreatQ](https://www.threatq.com)** | Threat intel platform for SOCs | [threatq.com](https://www.threatq.com) | +| **Yeti** | Open distributed threat intelligence platform | `git clone https://github.com/yeti-platform/yeti.git` | + +--- + +## 45. 🔬 Digital Forensics & Reverse Engineering + +> Disk/memory forensics, malware reverse engineering, timeline tools, binary analysis. +> +> **Pro tip:** Volatility 3 + Plaso (log2timeline) + KAPE = the modern DFIR triage stack. Ghidra > IDA Free for static analysis. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **[Binary Ninja](https://binary.ninja)** | Modern reverse engineering platform with API | [binary.ninja](https://binary.ninja) | +| **Cutter** | GUI for radare2/rizin reverse-engineering | `git clone https://github.com/rizinorg/cutter.git` | +| **Dissect** | Fox-IT framework for fast forensic image analysis | `pip3 install dissect` | +| **[Eric Zimmerman's Tools](https://ericzimmerman.github.io)** | Suite of free Windows DFIR utilities | [ericzimmerman.github.io](https://ericzimmerman.github.io) | +| **[FTK Imager](https://www.exterro.com/ftk-imager)** | Forensic disk imaging tool by AccessData | [exterro.com](https://www.exterro.com/ftk-imager) | +| **Ghidra** | NSA's open-source software reverse engineering suite | `git clone https://github.com/NationalSecurityAgency/ghidra.git` | +| **[IDA Free](https://hex-rays.com/ida-free/)** | Free version of IDA disassembler/decompiler | [hex-rays.com](https://hex-rays.com/ida-free/) | +| **[KAPE](https://www.kroll.com/kape)** | Kroll Artifact Parser and Extractor — fast triage collection | [kroll.com](https://www.kroll.com/kape) | +| **PhotoRec** | File data recovery — focuses on multimedia | `apt install testdisk` | +| **Plaso (log2timeline)** | Super-timeline creation from forensic artifacts | `pip3 install plaso` | +| **radare2** | Reverse engineering framework | `apt install radare2` | +| **RegRipper** | Open-source Windows registry parsing tool | `git clone https://github.com/keydet89/RegRipper3.0.git` | +| **Rekall** | Memory forensics tooling (legacy fork of Volatility) | `pip3 install rekall` | +| **rizin** | Modern fork of radare2 with cleaner API | `git clone https://github.com/rizinorg/rizin.git` | +| **The Sleuth Kit** | Library and CLI tools for forensic disk analysis | `apt install sleuthkit` | +| **Volatility 3** | Memory forensics framework | `pip3 install volatility3` | + +--- + +## 46. 🎓 Training, Labs & CTF + +> Hands-on practice — paid platforms and free local labs. +> +> **Pro tip:** Free path: TryHackMe → PortSwigger Academy → HackTheBox retired boxes. Paid path: HTB Academy + OffSec PG. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **[BugBountyHunter](https://www.bugbountyhunter.com)** | Web hacking training and labs | [bugbountyhunter.com](https://www.bugbountyhunter.com) | +| **[CTFtime](https://ctftime.org)** | Calendar of upcoming and past CTF events | [ctftime.org](https://ctftime.org) | +| **[Cybrary](https://www.cybrary.it)** | Free + paid cybersecurity courses | [cybrary.it](https://www.cybrary.it) | +| **DVWA** | Damn Vulnerable Web Application — classic appsec lab | `git clone https://github.com/digininja/DVWA.git` | +| **[Hack The Box](https://www.hackthebox.com)** | Online pentesting labs and CTFs | [hackthebox.com](https://www.hackthebox.com) | +| **[Hacker101](https://www.hacker101.com)** | Free HackerOne course library and CTF | [hacker101.com](https://www.hacker101.com) | +| **[Immersive Labs](https://www.immersivelabs.com)** | Cyber skills platform with hands-on exercises | [immersivelabs.com](https://www.immersivelabs.com) | +| **[Metasploitable](https://docs.rapid7.com/metasploit/metasploitable-2/)** | Intentionally vulnerable Linux VM for Metasploit practice | [docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/) | +| **[OffSec Proving Grounds](https://www.offsec.com/labs/individual/)** | OSCP-style training labs by Offensive Security | [offsec.com](https://www.offsec.com/labs/individual/) | +| **[OverTheWire Wargames](https://overthewire.org)** | Free wargames for learning offensive security from scratch | [overthewire.org](https://overthewire.org) | +| **OWASP Juice Shop** | Modern, intentionally insecure web app — covers OWASP Top 10 | `docker pull bkimminich/juice-shop` | +| **OWASP WebGoat** | Deliberately insecure Java-based web app for training | `docker pull webgoat/webgoat` | +| **[PentesterLab](https://pentesterlab.com)** | Hands-on web-app pentesting training | [pentesterlab.com](https://pentesterlab.com) | +| **[picoCTF](https://picoctf.org)** | Free CTF and learning platform built by CMU | [picoctf.org](https://picoctf.org) | +| **[PortSwigger Web Security Academy](https://portswigger.net/web-security)** | Free, world-class web security training (by Burp Suite team) | [portswigger.net](https://portswigger.net/web-security) | +| **[pwn.college](https://pwn.college)** | Free college-level cybersecurity education from ASU | [pwn.college](https://pwn.college) | +| **PwnedHub** | Intentionally-vulnerable web app for hands-on appsec training | `git clone https://github.com/practisec/pwnedhub.git` | +| **[Root-Me](https://www.root-me.org)** | 500+ challenges and 100+ virtual labs | [root-me.org](https://www.root-me.org) | +| **[TryHackMe](https://tryhackme.com)** | Beginner-friendly cybersecurity training platform | [tryhackme.com](https://tryhackme.com) | +| **[VulnHub](https://www.vulnhub.com)** | Free downloadable vulnerable VMs for offline practice | [vulnhub.com](https://www.vulnhub.com) | +| **[VulnYX](https://vulnyx.com)** | Online platform with vulnerable boxes (free + premium) | [vulnyx.com](https://vulnyx.com) | + +--- + +## 47. 🎯 Bug Bounty Platforms + +> Where to actually earn money from your skills. +> +> **Pro tip:** Start on Bugcrowd or YesWeHack public programs — easier triage and lower competition than HackerOne H1. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **[Bugbase](https://bugbase.ai)** | Indian-origin bug-bounty + vulnerability disclosure platform | [bugbase.ai](https://bugbase.ai) | +| **[Bugcrowd](https://bugcrowd.com)** | Crowdsourced security platform — bug bounty + pentesting | [bugcrowd.com](https://bugcrowd.com) | +| **[Disclose.io](https://disclose.io)** | Standardized vulnerability-disclosure language and tools | [disclose.io](https://disclose.io) | +| **[HackerOne](https://hackerone.com)** | Largest bug-bounty platform — public and private programs | [hackerone.com](https://hackerone.com) | +| **[HackTrophy](https://hacktrophy.com)** | European bug-bounty platform | [hacktrophy.com](https://hacktrophy.com) | +| **[Immunefi](https://immunefi.com)** | Web3 / crypto-focused bug bounty platform | [immunefi.com](https://immunefi.com) | +| **[Intigriti](https://www.intigriti.com)** | European bug-bounty platform with fast triage | [intigriti.com](https://www.intigriti.com) | +| **[Open Bug Bounty](https://www.openbugbounty.org)** | Free coordinated-disclosure platform | [openbugbounty.org](https://www.openbugbounty.org) | +| **[Public Bug Bounty Programs (chaos)](https://chaos.projectdiscovery.io)** | ProjectDiscovery's free BBH program list | [chaos.projectdiscovery.io](https://chaos.projectdiscovery.io) | +| **[Synack](https://www.synack.com)** | Crowdsourced + vetted-researcher pentesting platform | [synack.com](https://www.synack.com) | +| **[YesWeHack](https://www.yeswehack.com)** | European-based bug-bounty and VDP platform | [yeswehack.com](https://www.yeswehack.com) | +| **[Zerodium](https://zerodium.com)** | Premium 0day acquisition platform | [zerodium.com](https://zerodium.com) | + +--- + +## 48. 📚 Learning Resources + +> Books, courses, blogs, YouTube channels, awesome lists. +> +> **Pro tip:** IppSec.rocks indexes EVERY HackTheBox walkthrough — search any retired box and watch how a pro solves it. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **[0xdf hacks stuff](https://0xdf.gitlab.io)** | HTB writeups and pentesting writeups | [0xdf.gitlab.io](https://0xdf.gitlab.io) | +| **[awesome-hacking-resources](https://github.com/vitalysim/Awesome-Hacking-Resources)** | Beginner-friendly hacking learning resources | [github.com](https://github.com/vitalysim/Awesome-Hacking-Resources) | +| **[awesome-incident-response](https://github.com/meirwah/awesome-incident-response)** | Curated list of IR tools and resources | [github.com](https://github.com/meirwah/awesome-incident-response) | +| **[awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis)** | Curated list of malware-analysis tools | [github.com](https://github.com/rshipp/awesome-malware-analysis) | +| **[awesome-pentest](https://github.com/enaqx/awesome-pentest)** | Massive curated list of pentesting tools and resources | [github.com](https://github.com/enaqx/awesome-pentest) | +| **[Bellingcat's Online Investigations Toolkit](https://www.bellingcat.com/resources/)** | Bellingcat-curated tools and methodology guide | [bellingcat.com](https://www.bellingcat.com/resources/) | +| **[BTFM: Blue Team Field Manual](https://www.amazon.com/dp/154101636X)** | Concise blue-team incident response reference | [amazon.com](https://www.amazon.com/dp/154101636X) | +| **[Hacking: The Art of Exploitation (book)](https://nostarch.com/hacking2.htm)** | Classic by Jon Erickson — low-level attack fundamentals | [nostarch.com](https://nostarch.com/hacking2.htm) | +| **[IppSec.rocks](https://ippsec.rocks)** | Indexed walkthroughs of HackTheBox machines (video) | [ippsec.rocks](https://ippsec.rocks) | +| **[John Hammond](https://www.youtube.com/@_JohnHammond)** | Cybersecurity YouTube — CTFs, malware, walkthroughs | [youtube.com](https://www.youtube.com/@_JohnHammond) | +| **Linux for OSINT (cipher387)** | 21-day Linux-for-OSINT course (free) | `git clone https://github.com/cipher387/linux-for-OSINT-21-days.git` | +| **[LiveOverflow](https://www.youtube.com/@LiveOverflow)** | Hacking and security YouTube — deep technical content | [youtube.com](https://www.youtube.com/@LiveOverflow) | +| **[NahamSec](https://www.youtube.com/@nahamsec)** | Bug bounty and offensive security YouTube content | [youtube.com](https://www.youtube.com/@nahamsec) | +| **[Netlas Cookbook](https://academy.netlas.io)** | Free OSINT automation cookbook | [academy.netlas.io](https://academy.netlas.io) | +| **[OSINT Curious](https://osintcurio.us)** | Community blog, podcast, and learning resources | [osintcurio.us](https://osintcurio.us) | +| **[OSINT Techniques](https://inteltechniques.com)** | Michael Bazzell's resources, books, and search tools | [inteltechniques.com](https://inteltechniques.com) | +| **Python for OSINT (cipher387)** | 21-day Python-for-OSINT course (free) | `git clone https://github.com/cipher387/python-for-OSINT-21-days.git` | +| **[Real-World Bug Hunting (book)](https://nostarch.com/bughunting)** | Peter Yaworski — bug bounty methodology and real reports | [nostarch.com](https://nostarch.com/bughunting) | +| **[RTFM: Red Team Field Manual](https://www.amazon.com/dp/B07RJG62SJ)** | Concise red-team command reference | [amazon.com](https://www.amazon.com/dp/B07RJG62SJ) | +| **[The Web Application Hacker's Handbook (book)](https://www.amazon.com/dp/1118026470)** | Stuttard & Pinto — appsec bible | [amazon.com](https://www.amazon.com/dp/1118026470) | + +--- + +## 49. ✨ Extra Tools (curated additions) + +> Tools added in v2.x — modern recon, archive lookups, niche services, research-grade pivots. +> +> **Pro tip:** This section gets refreshed every release — check before you reach for an older tool. + +| Tool | Description | Install / Link | +|------|-------------|----------------| +| **[abuse.ch Hunting](https://hunting.abuse.ch)** | Hunt across all abuse.ch malware platforms with one query | [hunting.abuse.ch](https://hunting.abuse.ch) | +| **[Aleph Open Search](https://open-search.aleph-networks.eu)** | Dark-web search engine by Aleph Networks | [open-search.aleph-networks.eu](https://open-search.aleph-networks.eu) | +| **[Aletheia (image forensics)](https://www.aletheia.ai)** | Detect manipulated/AI-generated images | [aletheia.ai](https://www.aletheia.ai) | +| **altdns** | Generates permutations, alterations and mutations of subdomains | `pip3 install py-altdns` | +| **anew** | Append lines from stdin to a file only if not already there | `go install github.com/tomnomnom/anew@latest` | +| **[ANY.RUN](https://any.run)** | Interactive online malware sandbox | [any.run](https://any.run) | +| **[Apollo.io](https://www.apollo.io)** | B2B phone/email finder — 1200 free credits/yr | [apollo.io](https://www.apollo.io) | +| **[APT Groups and Operations](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml)** | Spreadsheet of threat actors, sponsoring countries, TTPs | [docs.google.com](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml) | +| **Aquatone** | Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers) | `go install github.com/michenriksen/aquatone@latest` | +| **[Archive.today](https://archive.ph)** | Web archive — saves snapshots even when robots.txt blocks Wayback | [archive.ph](https://archive.ph) | +| **Arctic Shift** | Tool for accessing large dumps of Reddit data via API/web | `git clone https://github.com/ArthurHeitmann/arctic_shift.git` | +| **[Arkham Intelligence](https://www.arkhamintelligence.com)** | On-chain intel — labels, entities, historical flows | [arkhamintelligence.com](https://www.arkhamintelligence.com) | +| **assetfinder** | Find domains and subdomains related to a given domain | `go install github.com/tomnomnom/assetfinder@latest` | +| **AutoRecon** | Multi-threaded network reconnaissance and enumeration framework | `pip3 install git+https://github.com/Tib3rius/AutoRecon.git` | +| **Axiom** | Dynamic infra framework for parallel cloud-based recon | `git clone https://github.com/pry0cc/axiom.git` | +| **[BackgroundChecks.com](https://www.backgroundchecks.com)** | Background check aggregator (BeenVerified family) | [backgroundchecks.com](https://www.backgroundchecks.com) | +| **[Baidu](https://www.baidu.com)** | Major Chinese search engine — essential for China-focused OSINT | [baidu.com](https://www.baidu.com) | +| **[BeVigil](https://bevigil.com/search)** | Search subdomains, URLs, parameters from mobile applications | [bevigil.com](https://bevigil.com/search) | +| **[BGP.tools](https://bgp.tools)** | Modern BGP toolkit for network reconnaissance | [bgp.tools](https://bgp.tools) | +| **[BinaryEdge](https://www.binaryedge.io)** | Cyber risk and attack-surface intelligence | [binaryedge.io](https://www.binaryedge.io) | +| **[Bitquery](https://bitquery.io)** | Blockchain data APIs for on-chain investigation | [bitquery.io](https://bitquery.io) | +| **[Black Book Online](https://www.blackbookonline.info)** | Free nationwide directory of public-record lookups | [blackbookonline.info](https://www.blackbookonline.info) | +| **BlackEye** | 32+ phishing template builder for credential capture (lab-only) | `git clone https://github.com/An0nUD4Y/blackeye.git` | +| **[Brave Browser](https://brave.com)** | Privacy-focused browser with built-in Tor/IPFS support | [brave.com](https://brave.com) | +| **[Brave Search](https://search.brave.com)** | Independent, transparent, ad-free search engine | [search.brave.com](https://search.brave.com) | +| **[BreachForums Status](https://www.breachforums.cx)** | Status tracking for the rotating BreachForums mirrors | [breachforums.cx](https://www.breachforums.cx) | +| **[Breadcrumbs](https://breadcrumbs.app)** | Free crypto investigation platform — visualize transaction flows | [breadcrumbs.app](https://breadcrumbs.app) | +| **[BrightCloud Threat Intelligence](https://brightcloud.com)** | URL/IP/threat reputation database | [brightcloud.com](https://brightcloud.com) | +| **[BrightCloud URL/IP Lookup](https://brightcloud.com/tools/url-ip-lookup.php)** | Reputation, category, and threat checks for URLs/IPs | [brightcloud.com](https://brightcloud.com/tools/url-ip-lookup.php) | +| **[BscScan](https://bscscan.com)** | Binance Smart Chain explorer — same UX as Etherscan | [bscscan.com](https://bscscan.com) | +| **[CachedView](https://cachedview.com)** | View Google/Bing/Yandex cached versions of any page | [cachedview.com](https://cachedview.com) | +| **[Castrick](https://castrickclues.com)** | Find social media accounts via email, username, phone | [castrickclues.com](https://castrickclues.com) | +| **Censys CLI** | Official Python wrapper and CLI for Censys | `pip3 install censys` | +| **[CertKit Certificate Search](https://www.certkit.io/tools/ct-logs/)** | Fast search for public SSL/TLS certificate records | [certkit.io](https://www.certkit.io/tools/ct-logs/) | +| **[Chainabuse](https://www.chainabuse.com)** | Public crypto-scam reporting database | [chainabuse.com](https://www.chainabuse.com) | +| **[Chainalysis Reactor](https://www.chainalysis.com/product/reactor/)** | Premium blockchain investigation platform | [chainalysis.com](https://www.chainalysis.com/product/reactor/) | +| **[CheckUser](https://checkuser.vercel.app)** | Search username across multiple social networks | [checkuser.vercel.app](https://checkuser.vercel.app) | +| **[CIRCL Hashlookup](https://www.circl.lu/services/hashlookup)** | Free public hashlookup for known software files | [circl.lu](https://www.circl.lu/services/hashlookup) | +| **[Cisco Talos Intelligence](https://talosintelligence.com/reputation_center)** | IP and Domain Reputation Center for real-time detection | [talosintelligence.com](https://talosintelligence.com/reputation_center) | +| **[Clearbit Connect](https://connect.clearbit.com)** | Email finder browser extension with company data | [connect.clearbit.com](https://connect.clearbit.com) | +| **[Cloudflare Radar](https://radar.cloudflare.com)** | Internet traffic patterns, attacks, technology trends | [radar.cloudflare.com](https://radar.cloudflare.com) | +| **[Clustrmaps](https://clustrmaps.com)** | Find people and address information | [clustrmaps.com](https://clustrmaps.com) | +| **[Commander Search](https://www.commandersearch.com)** | Boolean search builder for OSINT investigators | [commandersearch.com](https://www.commandersearch.com) | +| **[Constella Intelligence](https://constellaintelligence.com)** | Identity threat intel from breaches and dark web | [constellaintelligence.com](https://constellaintelligence.com) | +| **[ContactOut](https://contactout.com)** | Find emails and phones for 300M+ professionals | [contactout.com](https://contactout.com) | +| **[CredenShow](https://credenshow.com)** | Identify your compromised credentials before others do | [credenshow.com](https://credenshow.com) | +| **CrossLinked** | LinkedIn enumeration — generate username lists from LinkedIn profiles | `pip3 install crosslinked` | +| **[DBpedia](https://www.dbpedia.org)** | Structured Wikipedia data — SPARQL endpoint | [dbpedia.org](https://www.dbpedia.org) | +| **[Digital Footprint Check](https://www.digitalfootprintcheck.com/free-checker.html)** | Free username check on hundreds of sites | [digitalfootprintcheck.com](https://www.digitalfootprintcheck.com/free-checker.html) | +| **dirsearch** | Web path scanner — advanced wordlist-based directory bruteforce | `pip3 install dirsearch` | +| **[Discord Lookup](https://discordlookup.com)** | Look up Discord user info via ID | [discordlookup.com](https://discordlookup.com) | +| **[DiscordHistory](https://disboard.org)** | Search public Discord servers and messages | [disboard.org](https://disboard.org) | +| **[DNS History](https://dnshistory.org)** | Historical DNS records lookup | [dnshistory.org](https://dnshistory.org) | +| **[DocumentCloud](https://www.documentcloud.org)** | Platform for analyzing, annotating, publishing documents | [documentcloud.org](https://www.documentcloud.org) | +| **[DomainEye Reverse WHOIS](https://domaineye.com/reverse-whois)** | Search domains by registrant data | [domaineye.com](https://domaineye.com/reverse-whois) | +| **dork-cli** | Run Google dorks from the command line | `git clone https://github.com/jgor/dork-cli.git` | +| **[DorkGenius](https://dorkgenius.com)** | AI-powered search query generator for Google, Bing, DuckDuckGo | [dorkgenius.com](https://dorkgenius.com) | +| **[Dorky](https://dorky.io)** | Online dork builder for Google/Bing/DuckDuckGo | [dorky.io](https://dorky.io) | +| **[Dune Analytics](https://dune.com)** | SQL queries over indexed blockchain data | [dune.com](https://dune.com) | +| **[Elliptic](https://www.elliptic.co)** | Crypto financial-crime detection and investigation | [elliptic.co](https://www.elliptic.co) | +| **[EmailRep.io](https://emailrep.io)** | Free email reputation API by Sublime Security | [emailrep.io](https://emailrep.io) | +| **[Epieos Tools](https://tools.epieos.com)** | Reverse-lookup email/phone for Google profile data | [tools.epieos.com](https://tools.epieos.com) | +| **[Epstein Exposed](https://epsteinexposed.com)** | Searchable database of 2M+ DOJ Epstein case docs and network graphs | [epsteinexposed.com](https://epsteinexposed.com) | +| **[ETDA APT Groups](https://apt.etda.or.th/cgi-bin/listgroups.cgi)** | Search threat-actor groups and their tools | [apt.etda.or.th](https://apt.etda.or.th/cgi-bin/listgroups.cgi) | +| **etherscan-py** | Python wrapper for Etherscan API | `pip3 install etherscan-python` | +| **[ExportData](https://www.exportdata.io)** | Historical tweet, follower, and trend export tool | [exportdata.io](https://www.exportdata.io) | +| **[FamilyTreeNow](https://familytreenow.com)** | Free genealogy search — addresses, phones, emails | [familytreenow.com](https://familytreenow.com) | +| **ffuf** | Fast Go-based web fuzzer — directory, parameter, vhost discovery | `go install github.com/ffuf/ffuf/v2@latest` | +| **[Filesec.io](https://filesec.io)** | Catalog of malicious file extensions, risks, OS-level mitigations | [filesec.io](https://filesec.io) | +| **Findomain** | Cross-platform subdomain enumerator with monitoring features | `git clone https://github.com/Findomain/Findomain.git` | +| **[Flickr](https://www.flickr.com)** | Photo-sharing — geosearch + license + camera EXIF intact | [flickr.com](https://www.flickr.com) | +| **[Foller.me](https://foller.me)** | Twitter analytics — bio, languages, hashtags, mentions | [foller.me](https://foller.me) | +| **[Forensically Beta](https://29a.ch/photo-forensics)** | Online image forensics — clone detection, level sweep | [29a.ch](https://29a.ch/photo-forensics) | +| **[FullContact](https://www.fullcontact.com)** | Identity-resolution API and person enrichment | [fullcontact.com](https://www.fullcontact.com) | +| **gau (getallurls)** | Fetch URLs from AlienVault OTX, Wayback, Common Crawl, URLScan | `go install github.com/lc/gau/v2/cmd/gau@latest` | +| **[Geocreepy](http://www.geocreepy.com)** | Geolocation aggregator — pulls geotagged posts across networks | [geocreepy.com](http://www.geocreepy.com) | +| **[GeoHints](https://geohints.com)** | Browser-based satellite/streetview geolocation training & investigation | [geohints.com](https://geohints.com) | +| **[GeoSpy Pro](https://geospy.ai/pro)** | Premium AI image geolocation by Graylark | [geospy.ai](https://geospy.ai/pro) | +| **[Get-Metadata.com](https://www.get-metadata.com)** | Online EXIF extractor — handles .DOCX/.PDF too | [get-metadata.com](https://www.get-metadata.com) | +| **gf** | Wrapper around grep with patterns for bug-bounty workflow | `go install github.com/tomnomnom/gf@latest` | +| **[Ghiro](https://www.getghiro.org)** | Automated digital image forensics | [getghiro.org](https://www.getghiro.org) | +| **git-hound** | Find sensitive data exposed via GitHub code search | `go install github.com/tillson/git-hound@latest` | +| **github_monitor** | Real-time tracking of GitHub user activity and repo changes | `git clone https://github.com/misiektoja/github_monitor.git` | +| **gitleaks** | Detect secrets, credentials, and API keys in git repos | `go install github.com/gitleaks/gitleaks/v8@latest` | +| **[Google Guide Advanced Operators](http://www.googleguide.com/advanced_operators_reference.html)** | Reference for Google search operators | [googleguide.com](http://www.googleguide.com/advanced_operators_reference.html) | +| **[Google Hacking Database (GHDB)](https://www.exploit-db.com/google-hacking-database)** | Index of dorks for finding publicly exposed info | [exploit-db.com](https://www.exploit-db.com/google-hacking-database) | +| **GoSpider** | Fast Go web spider for crawling/audit | `go install github.com/jaeles-project/gospider@latest` | +| **gowitness** | Modern Go-based web screenshot utility (Aquatone successor) | `go install github.com/sensepost/gowitness@latest` | +| **[GrayhatWarfare](https://grayhatwarfare.com)** | Index of open Amazon S3 buckets — find exposed cloud data | [grayhatwarfare.com](https://grayhatwarfare.com) | +| **GreyNoise CLI** | Command-line tool for GreyNoise mass-scanner intel | `pip3 install greynoise` | +| **[GreyNoise Visualizer](https://viz.greynoise.io)** | Tells you which IPs are noise vs targeted threats | [viz.greynoise.io](https://viz.greynoise.io) | +| **hakrawler** | Fast Go web crawler for endpoint and asset discovery | `go install github.com/hakluke/hakrawler@latest` | +| **[Hatching Triage](https://tria.ge)** | Modern malware sandbox with kernel-level monitoring | [tria.ge](https://tria.ge) | +| **[haveibeenzuckered](https://haveibeenzuckered.com)** | Check if a phone number is in the 533M Facebook breach | [haveibeenzuckered.com](https://haveibeenzuckered.com) | +| **[HIB Ransomed](https://haveibeenransom.com)** | Check if your data has been leaked by ransomware groups | [haveibeenransom.com](https://haveibeenransom.com) | +| **httprobe** | Take a list of domains and probe for working HTTP/HTTPS | `go install github.com/tomnomnom/httprobe@latest` | +| **[Hudson Rock](https://www.hudsonrock.com/free-tools)** | Free infostealer-compromise check tools (domain/email/IP) | [hudsonrock.com](https://www.hudsonrock.com/free-tools) | +| **[Hybrid Analysis](https://www.hybrid-analysis.com)** | Free advanced malware analysis service by CrowdStrike | [hybrid-analysis.com](https://www.hybrid-analysis.com) | +| **[IKnowYour.Dad](https://iknowyour.dad)** | Data breach search engine | [iknowyour.dad](https://iknowyour.dad) | +| **[Imgur](https://imgur.com)** | Image hosting — meme tracing and reverse search | [imgur.com](https://imgur.com) | +| **instagram_monitor** | Real-time tracking of Instagram users with email alerts and CSV logs | `git clone https://github.com/misiektoja/instagram_monitor.git` | +| **[Intelligence X (intelx.io)](https://intelx.io)** | Selective archive search — emails, leaks, paste sites, dark-web | [intelx.io](https://intelx.io) | +| **Interlace** | Easily turn single-threaded CLI apps into multi-threaded jobs | `git clone https://github.com/codingo/Interlace.git` | +| **[Joe Sandbox](https://www.joesandbox.com)** | Deep automated malware analysis (free tier) | [joesandbox.com](https://www.joesandbox.com) | +| **JSFinder** | Find JS files referenced from a URL — endpoints / API paths | `git clone https://github.com/Threezh1/JSFinder.git` | +| **[Kagi Search](https://kagi.com)** | Premium privacy-respecting search engine, no ads, no tracking | [kagi.com](https://kagi.com) | +| **knock** | Domain knock — security testing via DNS | `git clone https://github.com/guelfoweb/knock.git` | +| **Knockpy** | Subdomain enumeration scan with virtual host discovery | `pip3 install knock-subdomains` | +| **linkedin2username** | Generate usernames from a target's LinkedIn employees | `git clone https://github.com/initstring/linkedin2username.git` | +| **LinkedInDumper** | Dump/scrape company employees from LinkedIn API | `git clone https://github.com/l4rm4nd/LinkedInDumper.git` | +| **[Malpedia](https://malpedia.caad.fkie.fraunhofer.de)** | Threat-actor groups, malware families, and analysis by Fraunhofer | [malpedia.caad.fkie.fraunhofer.de](https://malpedia.caad.fkie.fraunhofer.de) | +| **[MalShare](https://malshare.com)** | Free malware sample repository for researchers | [malshare.com](https://malshare.com) | +| **massdns** | High-performance DNS stub resolver for bulk lookups | `git clone https://github.com/blechschmidt/massdns.git` | +| **meg** | Fetch many paths for many hosts without flooding | `go install github.com/tomnomnom/meg@latest` | +| **[Memento Time Travel](https://timetravel.mementoweb.org)** | Federated search across multiple web archives | [timetravel.mementoweb.org](https://timetravel.mementoweb.org) | +| **[Metadata2Go](https://www.metadata2go.com)** | Free online metadata extractor for any file | [metadata2go.com](https://www.metadata2go.com) | +| **[MetaDefender Cloud](https://metadefender.com)** | Multi-engine file/URL/IP scanning by OPSWAT | [metadefender.com](https://metadefender.com) | +| **[MetaSleuth](https://metasleuth.io)** | Free + paid crypto transaction tracing tool | [metasleuth.io](https://metasleuth.io) | +| **[MISP Galaxy](https://www.misp-galaxy.org)** | Adversary group identification used by SOCs/ISACs | [misp-galaxy.org](https://www.misp-galaxy.org) | +| **Mitaka** | Browser extension for OSINT — extract IoCs from highlighted text | `git clone https://github.com/ninoseki/mitaka.git` | +| **[Mnemonic Passive DNS](https://passivedns.mnemonic.no)** | Free passive-DNS query tool | [passivedns.mnemonic.no](https://passivedns.mnemonic.no) | +| **[Mojeek](https://www.mojeek.com)** | Independent search engine that doesn't track users | [mojeek.com](https://www.mojeek.com) | +| **[Mylnikov Geolocation](https://www.mylnikov.org)** | BSSID/Wi-Fi MAC to coordinates lookup | [mylnikov.org](https://www.mylnikov.org) | +| **Naabu** | Fast Go-based port scanner from ProjectDiscovery | `go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest` | +| **[Name Checkr](https://www.namecheckr.com)** | Check domain and username across many platforms | [namecheckr.com](https://www.namecheckr.com) | +| **[Name Checkup](https://namecheckup.com)** | Check username availability across social media | [namecheckup.com](https://namecheckup.com) | +| **[NameKetchup](https://nameketchup.com)** | Check domain + username on popular social media | [nameketchup.com](https://nameketchup.com) | +| **[Naver](https://www.naver.com)** | South Korean search engine — local content not on Google | [naver.com](https://www.naver.com) | +| **[NerdyData](https://nerdydata.com)** | Search engine for source code across the public web | [nerdydata.com](https://nerdydata.com) | +| **[Netcraft Site Report](https://sitereport.netcraft.com)** | Web technology, hosting history, takedown service | [sitereport.netcraft.com](https://sitereport.netcraft.com) | +| **Oblivion** | OSINT framework | `git clone https://github.com/loseys/Oblivion.git` | +| **[ODIN](https://search.odin.io)** | Search hosts, CVEs, exposed buckets — 10 free searches/day | [search.odin.io](https://search.odin.io) | +| **[Offshore Leaks Database](https://offshoreleaks.icij.org)** | Panama/Pandora/Paradise Papers searchable database | [offshoreleaks.icij.org](https://offshoreleaks.icij.org) | +| **[OnionLand Search](https://onionlandsearchengine.com)** | Search engine for dark-web content | [onionlandsearchengine.com](https://onionlandsearchengine.com) | +| **[Open-Source Intelligence (Reverse Image)](https://oosint.com)** | Yandex/Bing/TinEye combined reverse-image search | [oosint.com](https://oosint.com) | +| **[OpenCellID](https://opencellid.org)** | Largest public database of cell-tower IDs | [opencellid.org](https://opencellid.org) | +| **opencorporates-cli** | Command-line client for OpenCorporates API | `pip3 install opencorporates` | +| **[OpenPhish](https://openphish.com)** | Live phishing URL feed | [openphish.com](https://openphish.com) | +| **[OpenRailwayMap](https://www.openrailwaymap.org)** | Worldwide rail network map — rolling stock, infrastructure, signals | [openrailwaymap.org](https://www.openrailwaymap.org) | +| **[OpenSanctions](https://opensanctions.org)** | Consolidated database of sanctioned entities across 200+ sources | [opensanctions.org](https://opensanctions.org) | +| **[OXT (OpenXt)](https://oxt.me)** | Bitcoin transaction graph explorer with clustering | [oxt.me](https://oxt.me) | +| **[PassiveTotal (RiskIQ)](https://community.riskiq.com)** | Passive DNS, WHOIS, SSL cert pivots — now Microsoft Defender TI | [community.riskiq.com](https://community.riskiq.com) | +| **[Peekalink](https://www.peekalink.io)** | Preview any URL — title, description, screenshot via API | [peekalink.io](https://www.peekalink.io) | +| **[PhishStats](https://phishstats.info)** | Live phishing intelligence feed and search | [phishstats.info](https://phishstats.info) | +| **[PhishTank](https://phishtank.org)** | Anti-phishing community — verified phishing URLs | [phishtank.org](https://phishtank.org) | +| **[Picarta.ai](https://picarta.ai)** | AI-powered photo geolocation predictor | [picarta.ai](https://picarta.ai) | +| **[Pinterest](https://www.pinterest.com)** | Visual search engine — alternate reverse-image source | [pinterest.com](https://www.pinterest.com) | +| **[PolygonScan](https://polygonscan.com)** | Polygon (Matic) blockchain explorer | [polygonscan.com](https://polygonscan.com) | +| **[Predicta Search](https://predictasearch.com)** | Search social accounts by email or phone | [predictasearch.com](https://predictasearch.com) | +| **[Public Transport Maps](https://cipher387.github.io/public_transport_maps/)** | 20+ online public transport maps by country | [cipher387.github.io](https://cipher387.github.io/public_transport_maps/) | +| **[PublicWWW](https://publicwww.com)** | Search the web's source code (HTML/JS/CSS) for snippets, trackers, scripts | [publicwww.com](https://publicwww.com) | +| **[PullPush](https://pullpush.io)** | Index/retrieval service for Reddit (incl. deleted content) | [pullpush.io](https://pullpush.io) | +| **[Pushshift API](https://pushshift.io)** | Historical Reddit data — posts, comments, metadata | [pushshift.io](https://pushshift.io) | +| **[Quake (360.cn)](https://quake.360.net)** | Chinese internet asset search engine | [quake.360.net](https://quake.360.net) | +| **[RECAP Archive](https://www.courtlistener.com/recap/)** | Public archive of PACER court documents | [courtlistener.com](https://www.courtlistener.com/recap/) | +| **reconFTW** | Full-suite domain recon — subdomain enum, port scan, vuln scan in one pipeline | `git clone https://github.com/six2dez/reconftw.git` | +| **[RedditMetis](https://redditmetis.com)** | Reddit user analysis — summary, top posts, activity stats | [redditmetis.com](https://redditmetis.com) | +| **[RedditSearch.io](https://redditsearch.io)** | Search archived Reddit content via Pushshift mirror | [redditsearch.io](https://redditsearch.io) | +| **[Revealer.cc](https://revealer.cc)** | Discord-based account-checker & breach lookup | [revealer.cc](https://revealer.cc) | +| **[RocketReach](https://rocketreach.co)** | Find professional emails/phones for 700M+ profiles | [rocketreach.co](https://rocketreach.co) | +| **RustScan** | Modern port scanner — finds open ports, then pipes to Nmap | `git clone https://github.com/RustScan/RustScan.git` | +| **[ScamAdviser](https://www.scamadviser.com)** | Check website trustworthiness scores | [scamadviser.com](https://www.scamadviser.com) | +| **[Scribd](https://www.scribd.com)** | Search for documents, presentations, sheet music, ebooks | [scribd.com](https://www.scribd.com) | +| **[searchcode](https://searchcode.com)** | Search 75+ billion lines of public source code across GitHub/GitLab/Bitbucket | [searchcode.com](https://searchcode.com) | +| **Seeker** | Geolocation by phishing — collects precise GPS via WebRTC + browser geolocation | `git clone https://github.com/thewhiteh4t/seeker.git` | +| **[Shadowserver Dashboard](https://dashboard.shadowserver.org/)** | Global statistics on cyber threats by Shadowserver Foundation | [dashboard.shadowserver.org](https://dashboard.shadowserver.org/) | +| **Sherloq** | Open-source image forensics toolset | `git clone https://github.com/GuidoBartoli/sherloq.git` | +| **Shodan CLI** | Official Shodan command-line client | `pip3 install shodan` | +| **[SlideShare](https://www.slideshare.net)** | Search public PowerPoint/PDF presentations | [slideshare.net](https://www.slideshare.net) | +| **smap** | Drop-in replacement for nmap powered by shodan.io | `go install github.com/s0md3v/smap/cmd/smap@latest` | +| **[Snusbase API](https://snusbase.com/api)** | API access to breach data (premium) | [snusbase.com](https://snusbase.com/api) | +| **[SourceGraph](https://sourcegraph.com/search)** | Search code from millions of open-source repos | [sourcegraph.com](https://sourcegraph.com/search) | +| **[SpyCloud](https://spycloud.com)** | Account-takeover prevention + identity exposure data | [spycloud.com](https://spycloud.com) | +| **[Startpage](https://www.startpage.com)** | Privacy-focused search — Google results with no tracking | [startpage.com](https://www.startpage.com) | +| **[StealSeek](https://stealseek.io)** | Search engine for finding and analyzing data breaches | [stealseek.io](https://stealseek.io) | +| **[SubredditStats](https://subredditstats.com)** | Subreddit user-overlap, growth, top posts | [subredditstats.com](https://subredditstats.com) | +| **[Telegago](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg)** | Google CSE for finding public/private Telegram channels | [cse.google.com](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg) | +| **Telegram Nearby Map** | Find positions of nearby Telegram users via OSM | `git clone https://github.com/tejado/telegram-nearby-map.git` | +| **[Telegram Search (lyzem.com)](https://lyzem.com)** | Search public Telegram messages and channels | [lyzem.com](https://lyzem.com) | +| **[Telemetr](https://telemetr.io)** | Telegram channel/group analytics | [telemetr.io](https://telemetr.io) | +| **Telerecon** | Reconnaissance framework for investigating Telegram | `git clone https://github.com/sockysec/Telerecon.git` | +| **[Teleteg](https://teleteg.com)** | Telegram search engine — 10 free results | [teleteg.com](https://teleteg.com) | +| **[TGStat](https://tgstat.com)** | Telegram channel analytics — post stats, audience overlap | [tgstat.com](https://tgstat.com) | +| **[The Hidden Wiki](https://thehiddenwiki.org)** | Curated directory of dark-web sites (mirror-dependent) | [thehiddenwiki.org](https://thehiddenwiki.org) | +| **the-endorser** | Map LinkedIn endorsements/skills to draw out person relationships | `git clone https://github.com/eth0izzle/the-endorser.git` | +| **[TikTok Finder Country](https://tiktokfindercountry.xyz)** | Free OSINT lookup for TikTok account country/language | [tiktokfindercountry.xyz](https://tiktokfindercountry.xyz) | +| **TorghostNG** | Anonymize all OS traffic via Tor (Linux) | `git clone https://github.com/githacktools/TorghostNG.git` | +| **TOsint** | Extract info from Telegram bots and channels | `git clone https://github.com/drego85/tosint.git` | +| **[Trace](https://trace.manus.space)** | Search usernames, emails, phones across 600+ platforms with risk scoring | [trace.manus.space](https://trace.manus.space) | +| **[Transit Visualisation Client](https://tracker.geops.ch)** | Real-time public transport across 700+ cities | [tracker.geops.ch](https://tracker.geops.ch) | +| **[Trends24](https://trends24.in)** | Twitter trends history per country | [trends24.in](https://trends24.in) | +| **[TRM Labs](https://www.trmlabs.com)** | Crypto compliance and investigation platform | [trmlabs.com](https://www.trmlabs.com) | +| **[TweetBinder](https://www.tweetbinder.com)** | Twitter/X analytics dashboards | [tweetbinder.com](https://www.tweetbinder.com) | +| **[Twitch Search](https://www.twitch.tv/directory)** | Search live streams by category, language, viewer count | [twitch.tv](https://www.twitch.tv/directory) | +| **[Twiteur](https://twiteur.com)** | Twitter/X advanced search wrapper — geo, date, sentiment | [twiteur.com](https://twiteur.com) | +| **[U-Find](https://u-find.com)** | Reddit user comment / submission scraper | [u-find.com](https://u-find.com) | +| **uncover** | ProjectDiscovery — quickly find exposed hosts via Shodan/Censys/Fofa | `go install github.com/projectdiscovery/uncover/cmd/uncover@latest` | +| **URLCrazy** | Generate domain typos and check availability/registration | `git clone https://github.com/urbanadventurer/urlcrazy.git` | +| **[URLhaus (abuse.ch)](https://urlhaus.abuse.ch)** | Database of malicious URLs used for malware distribution | [urlhaus.abuse.ch](https://urlhaus.abuse.ch) | +| **[User-Searcher](https://www.user-searcher.com)** | Search a username across 2000+ websites | [user-searcher.com](https://www.user-searcher.com) | +| **[Vehicle Number Search Toolbox](https://cipher387.github.io/venicle_number_search_toolbox/)** | Search 14 country license plates from one page | [cipher387.github.io](https://cipher387.github.io/venicle_number_search_toolbox/) | +| **[Venacus](https://venacus.com)** | Search for your data breaches and get notified when compromised | [venacus.com](https://venacus.com) | +| **[Vigilante.pw](https://vigilante.pw)** | Index of dumped databases (educational) | [vigilante.pw](https://vigilante.pw) | +| **[VMRay Analyzer](https://www.vmray.com)** | Malware sandbox analysis platform | [vmray.com](https://www.vmray.com) | +| **[WalletExplorer](https://walletexplorer.com)** | Smart bitcoin block explorer — clusters addresses by entity | [walletexplorer.com](https://walletexplorer.com) | +| **waybackurls** | Fetch all URLs the Wayback Machine knows about a domain | `go install github.com/tomnomnom/waybackurls@latest` | +| **[Whoisology](https://whoisology.com)** | Reverse WHOIS — find domains by registrant | [whoisology.com](https://whoisology.com) | +| **[Whoxy](https://www.whoxy.com)** | WHOIS lookup with reverse-WHOIS, history, and bulk API | [whoxy.com](https://www.whoxy.com) | +| **[Wikidata](https://www.wikidata.org)** | Wikipedia's structured-data backbone — query via SPARQL | [wikidata.org](https://www.wikidata.org) | +| **[Wikipedia](https://en.wikipedia.org)** | Free encyclopedia — start of every people/place investigation | [en.wikipedia.org](https://en.wikipedia.org) | +| **[WorldLicensePlates](http://www.worldlicenseplates.com)** | Graphic index of license plates by country | [worldlicenseplates.com](http://www.worldlicenseplates.com) | +| **XeuleDoc** | Fetch info on Google Docs/Sheets/Slides/Drawings without auth | `pip3 install xeuledoc` | +| **[Yandex](https://www.yandex.com)** | Russian search engine — strong reverse-image and Cyrillic support | [yandex.com](https://www.yandex.com) | +| **[YARAify](https://yaraify.abuse.ch/scan/)** | Collaborative YARA engine for open threat intel via file pattern matching | [yaraify.abuse.ch](https://yaraify.abuse.ch/scan/) | +| **[Yumpu](https://www.yumpu.com)** | Document publishing — sometimes leaks via search | [yumpu.com](https://www.yumpu.com) | +| **[ZeroBounce](https://www.zerobounce.net)** | Email validation and deliverability service | [zerobounce.net](https://www.zerobounce.net) | +| **ZoomEye CLI** | Command-line interface for ZoomEye internet asset search | `pip3 install zoomeye` | + +--- + +## 50. 🇬🇪 Georgian OSINT Arsenal (500+ resources) + +> 🇬🇪 The most comprehensive OSINT resource collection for the country of Georgia (Sakartvelo). +> +> **28 sub-sections · 500+ verified resources** — government databases, public registries, investigative tools, open-data portals, Telegram bots & more. +> +> **Pro tip:** Pair this with my [Georgian-Wordlist](https://github.com/rawfilejson/Georgian-Wordlist) (760K Georgian words for security research) and [Wordlist-Generator](https://github.com/rawfilejson/Wordlist-Generator). + +> [!WARNING] +> **Educational and lawful investigative use only.** Respect Georgia's *Law on Personal Data Protection* and the GDPR. Authors are not responsible for any misuse. + +
+📋 Click to expand the full Georgian OSINT Arsenal (28 sub-sections) + +### 50.1 Government Registries & E-Government Portals + +The Georgian government has one of the most digitized public service systems in the post-Soviet space. Most services are accessible through centralized portals. +### Core Government Portals + +| Resource | URL | Description | +|---|---|---| +| my.gov.ge | [https://my.gov.ge](https://my.gov.ge) | Unified e-government portal -- birth/death certificates, property search, business registry, correspondence with agencies | +| Government of Georgia | [https://gov.ge](https://gov.ge) | Official government website with news, ministries, and policy documents | +| Parliament of Georgia | [https://parliament.ge](https://parliament.ge) | Parliamentary records, laws, MP profiles, committee meetings, voting records | +| President of Georgia | [https://president.gov.ge](https://president.gov.ge) | Presidential decrees, pardons, appointments, official statements | +| Ministry of Justice | [https://justice.gov.ge](https://justice.gov.ge) | Justice system information, legal aid, notary services | +| Ministry of Internal Affairs (MIA) | [https://police.ge](https://police.ge) | Police reports, wanted persons, crime statistics, press releases | +| Ministry of Finance | [https://mof.gov.ge](https://mof.gov.ge) | State budget, fiscal data, financial reports | +| Ministry of Foreign Affairs | [https://mfa.gov.ge](https://mfa.gov.ge) | Diplomatic information, consular services, international agreements | +| Ministry of Economy | [https://economy.ge](https://economy.ge) | Economic policy, trade data, investment climate | +| Ministry of Regional Development | [https://mrdi.gov.ge](https://mrdi.gov.ge) | Infrastructure projects, regional development data | + +### Public Registries & Databases + +| Resource | URL | Description | +|---|---|---| +| National Agency of Public Registry (NAPR) | [https://napr.gov.ge](https://napr.gov.ge) | Central hub for property, business, and civil registry -- 331 services | +| Entrepreneur Registry | [https://enreg.reestri.gov.ge](https://enreg.reestri.gov.ge) | Search any business entity -- name, ID, registration date, founders, directors | +| Property Registry | [https://napr.gov.ge/en/service/registers](https://napr.gov.ge/en/service/registers) | Search immovable property records by cadastral code or owner | +| Civil Registry | [https://napr.gov.ge](https://napr.gov.ge) | Birth, marriage, death, divorce records (restricted access) | +| Revenue Service (RS) | [https://rs.ge](https://rs.ge) | Tax identification lookup, customs data, VAT portal, business tax status | +| RS Taxpayer Search | [https://rs.ge/TaxPayer-en](https://rs.ge/TaxPayer-en) | Search taxpayers by name or identification number | +| RS E-Services | [https://rs.ge/Eservices-en](https://rs.ge/Eservices-en) | Auto/Moto levy calculator, customs duties calculator, property tax calculator | +| Legislative Herald (Matsne) | [https://matsne.gov.ge](https://matsne.gov.ge) | All Georgian legislation -- laws, decrees, regulations, international treaties (full text) | +| National Archives | [https://archive.gov.ge](https://archive.gov.ge) | Historical documents, electronic catalogues, digitized archives | +| Service Development Agency (SDA) | [https://sda.gov.ge](https://sda.gov.ge) | ID cards, passports, residence permits, citizenship, personal data services | +| Civil Service Bureau | [https://csb.gov.ge](https://csb.gov.ge) | Public servant registry, HR policy, ethics, training programs | +| State Inspector | [https://dis.gov.ge](https://dis.gov.ge) | Personal data protection authority, surveillance oversight | +| NSDI Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | National Spatial Data Infrastructure -- land parcels, addresses, cadastral maps | +| Data Exchange Agency (DEA) | [https://dea.gov.ge](https://dea.gov.ge) | Government interoperability platform, electronic document exchange | +| National Food Agency | [https://nfa.gov.ge](https://nfa.gov.ge) | Food safety registry, licensed food businesses, inspection results | +| National Environmental Agency | [https://nea.gov.ge](https://nea.gov.ge) | Environmental monitoring data, weather, seismic data | +| Competition Agency | [https://competition.ge](https://competition.ge) | Market concentration, merger decisions, anti-trust investigations | +| Insurance State Supervision | [https://insurance.gov.ge](https://insurance.gov.ge) | Licensed insurance companies, regulatory data | +| National Wine Agency | [https://wine.gov.ge](https://wine.gov.ge) | Georgian wine registry, appellation data, export statistics | + +### Key my.gov.ge Services for OSINT + +| Service | What You Can Find | +|---|---| +| Property Registry Search | Real estate ownership by cadastral code | +| Entrepreneur/Legal Entity Search | Business registration status, founders, directors | +| Birth/Death Certificates | (Restricted) Vital records verification | +| Correspondence with Agencies | Submit information requests to any government body | +| Tax Debt Information | Check individual tax debts (limited) | +| Enforcement Cases | Check for enforcement proceedings against individuals | +| Notary Registry | Registered notaries and their activities | + +--- +### 50.2 Person Search & Identity OSINT + +### Phone Number & Identity Lookup + +| Resource | URL | Description | Free/Paid | +|---|---|---|---| +| GetContact | [https://getcontact.com](https://getcontact.com) | Crowd-sourced caller ID -- see how a number is saved in others' phones | Freemium | +| TrueCaller | [https://truecaller.com](https://truecaller.com) | Caller ID and spam detection -- Georgian numbers work well | Freemium | +| Sync.me | [https://sync.me](https://sync.me) | Reverse phone lookup with social profile matching | Free | +| NumBuster | [https://numbuster.com](https://numbuster.com) | Phone number lookup popular in CIS countries | Free | +| Pipl | [https://pipl.com](https://pipl.com) | Deep people search engine, works with Georgian data | Paid | +| Nomrebi (Phone Book) | [https://phonebookoftheworld.com/tbilisi/](https://phonebookoftheworld.com/tbilisi/) | Tbilisi White Pages / Yellow Pages | Free | +| 114 Directory | Dial 114 from Georgian number | Georgian telephone directory assistance | Free | +| Eye of God (Глаз Бога) | Telegram: @EyeOfGodBot | CIS-focused person search by phone, name, car plate | Paid | +| Quick OSINT | Telegram: @QuickOSINT_bot | Person search across CIS databases | Paid | +| USSearcher | Telegram: @USSearcher_bot | Multi-database person lookup | Paid | + +### Email & Username OSINT + +| Tool | URL | Description | +|---|---|---| +| Hunter.io | [https://hunter.io](https://hunter.io) | Find email addresses associated with Georgian domains | +| EmailRep | [https://emailrep.io](https://emailrep.io) | Email reputation and breach exposure check | +| Have I Been Pwned | [https://haveibeenpwned.com](https://haveibeenpwned.com) | Check if Georgian email addresses appear in data breaches | +| Epieos | [https://epieos.com](https://epieos.com) | Email OSINT -- Google ID, linked accounts, profile pictures | +| Holehe | [https://github.com/megadose/holehe](https://github.com/megadose/holehe) | Check which platforms an email is registered on | +| Sherlock | [https://github.com/sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) | Username search across 400+ social platforms | +| Maigret | [https://github.com/soxoj/maigret](https://github.com/soxoj/maigret) | Advanced username search across 2500+ sites | +| WhatsMyName | [https://whatsmyname.app](https://whatsmyname.app) | Username enumeration on hundreds of sites | + +### Georgian-Specific Person Search + +| Method | Details | +|---|---| +| Facebook (Georgian users) | ~2.5M Georgian users. Search by name in Georgian script. Many profiles have phone numbers visible | +| VK.com | Popular among Russian-speaking Georgians and occupied territories | +| OK.ru (Odnoklassniki) | Popular among older Georgian demographic | +| Instagram | Very popular in Georgia, especially ages 18-35 | +| LinkedIn | Professional profiles, especially for business investigations | +| Google Search | `"name surname" site:facebook.com/` or `"name" "+995"` | + +--- +### 50.3 Company & Business Intelligence + +### Primary Business Registries + +| Resource | URL | Description | +|---|---|---| +| Entrepreneur Registry (NAPR) | [https://enreg.reestri.gov.ge](https://enreg.reestri.gov.ge) | Official business entity search -- name, ID number, legal form, status, founders, directors, address | +| RS Taxpayer Portal | [https://rs.ge/TaxPayer-en](https://rs.ge/TaxPayer-en) | Tax identification lookup, business activity status | +| OpenCorporates (Georgia) | [https://opencorporates.com/companies/ge](https://opencorporates.com/companies/ge) | International business search with Georgian companies | +| OpenSanctions (Georgian Registry) | [https://opensanctions.org/datasets/ext_ge_company_registry/](https://opensanctions.org/datasets/ext_ge_company_registry/) | Georgian company data in structured format | + +### Financial & Investment Data + +| Resource | URL | Description | +|---|---|---| +| National Bank of Georgia (NBG) | [https://nbg.gov.ge](https://nbg.gov.ge) | Banking supervision, exchange rates, financial statistics, AML sanctions | +| NBG AML/CFT Sanctions | [https://nbg.gov.ge/en/supervision/aml-cft](https://nbg.gov.ge/en/supervision/aml-cft) | Fines and sanctions on financial institutions for AML failures | +| Financial Monitoring Service (FMS) | [https://fms.gov.ge](https://fms.gov.ge) | Georgia's financial intelligence unit -- suspicious transaction reports | +| Georgian Stock Exchange | [https://gse.ge](https://gse.ge) | Listed companies, stock data, financial disclosures | +| GITA (Innovation & Tech Agency) | [https://gita.gov.ge](https://gita.gov.ge) | Tech company grants, startup ecosystem data | + +### Company Due Diligence + +| Data Point | How to Find | +|---|---| +| Company Name & ID | enreg.reestri.gov.ge -- search by name or 9/11-digit ID | +| Directors & Founders | NAPR extract -- shows current and historical directors | +| Tax Status | rs.ge -- check if company is active taxpayer | +| Property Owned | NAPR property registry -- search by company name | +| Procurement Contracts | tenders.procurement.gov.ge -- search by supplier name | +| Court Cases | ecd.court.ge -- search by company name or ID | +| Sanctions | opensanctions.org -- cross-reference with international sanctions | +| International Connections | OpenCorporates -- linked entities across jurisdictions | + +--- +### 50.4 Legal & Court Records + +### Court Databases + +| Resource | URL | Description | +|---|---|---| +| Unified Court Decisions Database | [https://ecd.court.ge](https://ecd.court.ge) | Search court decisions from all three instances (note: decisions after April 2020 may not be published) | +| Court Decisions Search | [https://ecd.court.ge/Decision](https://ecd.court.ge/Decision) | Search by case number, date, court name, category | +| Court Acts / Final Documents | [https://ecd.court.ge/FinalDocument](https://ecd.court.ge/FinalDocument) | Search by document barcode or case number | +| Public Notifications | [https://ecd.court.ge/PublicNotification](https://ecd.court.ge/PublicNotification) | Court public notifications -- useful for finding parties | +| Current Cases & Hearings | [https://ecd.court.ge/CurrentCase](https://ecd.court.ge/CurrentCase) | Ongoing cases with hearing dates and judges | +| E-Court Portal | [https://ecourt.ge](https://ecourt.ge) | Electronic court filing system (requires registration) | +| Supreme Court of Georgia | [https://supremecourt.ge](https://supremecourt.ge) | Supreme Court decisions, practice, and cassation rulings | +| Constitutional Court | [https://constcourt.ge](https://constcourt.ge) | Constitutional Court decisions and petitions | +| CourtWatch.ge | [https://courtwatch.ge](https://courtwatch.ge) | Independent court monitoring and judicial analysis | + +### Key Legal Resources + +| Resource | URL | Description | +|---|---|---| +| Matsne (Legislative Herald) | [https://matsne.gov.ge](https://matsne.gov.ge) | All Georgian laws in full text -- searchable database | +| Criminal Code of Georgia | [https://matsne.gov.ge/en/document/view/16426](https://matsne.gov.ge/en/document/view/16426) | Full text of criminal code | +| Civil Code of Georgia | [https://matsne.gov.ge/en/document/view/31702](https://matsne.gov.ge/en/document/view/31702) | Full text of civil code | +| Georgian Bar Association | [https://gba.ge](https://gba.ge) | Lawyer directory, disciplinary proceedings | +| GYLA (Georgian Young Lawyers) | [https://gyla.ge](https://gyla.ge) | Legal analysis, human rights reports, election monitoring | +| Prosecutor's Office | [https://pog.gov.ge](https://pog.gov.ge) | Prosecution data, high-profile cases, statistics | +| Probation Bureau | [https://probation.moj.gov.ge](https://probation.moj.gov.ge) | Probation data and offender supervision | +| Ombudsman (Public Defender) | [https://ombudsman.ge](https://ombudsman.ge) | Human rights reports, complaints, recommendations | + +### Searching Court Records -- Tips + +``` +1. Go to ecd.court.ge/Decision +2. Select court instance (First Instance / Appeals / Cassation) +3. Select court name (e.g., Tbilisi City Court) +4. Select case category (Civil / Criminal / Administrative) +### 50.5 Enter case number or date range + +### 50.6 Note: Personal data is anonymized in published decisions + +### 50.7 For cases after April 2020 -- many are NOT published online + +``` +5. Real Estate & Property OSINT +### Property Registries + +| Resource | URL | Description | +|---|---|---| +| NAPR Property Registry | [https://napr.gov.ge](https://napr.gov.ge) | Official immovable property registry -- ownership, mortgages, encumbrances | +| NAPR Extract Service | [https://napr.gov.ge/en/service/information-services/extract-public-register](https://napr.gov.ge/en/service/information-services/extract-public-register) | Order official property extracts (fee-based) | +| NSDI Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | Interactive map with cadastral boundaries, land parcels, addresses | +| my.gov.ge Property Search | [https://my.gov.ge](https://my.gov.ge) | Search property registry applications | + +### Real Estate Portals (OSINT Gold Mines) + +| Portal | URL | Description | +|---|---|---| +| SS.GE (Home) | [https://home.ss.ge](https://home.ss.ge) | Georgia's largest classifieds -- apartments, houses, commercial (with photos, prices, owner contacts) | +| MyHome.ge | [https://myhome.ge](https://myhome.ge) | Major real estate portal with detailed listings and agent contacts | +| Livo.ge | [https://livo.ge](https://livo.ge) | Real estate with 3D tours, auctions, property evaluation tools | +| Home.ge | [https://home.ge](https://home.ge) | Real estate portal with buying/selling/renting listings | +| Korter.ge | [https://korter.ge](https://korter.ge) | New construction and apartment search platform | +| TbilisiHome.ge | [https://tbilisihome.ge](https://tbilisihome.ge) | Tbilisi-focused real estate listings | +| HomeSearch.ge | [https://homesearch.ge](https://homesearch.ge) | Multi-language property search platform | +| Gavel.ge | [https://gavel.ge](https://gavel.ge) | Aggregates real estate auctions from Livo, eAuction.ge, Tbilisi Municipality | + +### Property OSINT Workflow + +``` +1. Get person's name or company ID +2. Search NAPR (napr.gov.ge) for registered properties +3. Cross-reference with ss.ge/myhome.ge for listings (may show photos, addresses) +4. Check nsdi.gov.ge for cadastral boundaries and neighbors +5. Search eauction.ge for any auctioned/seized properties +6. Check ecd.court.ge for property-related litigation +``` +6. Vehicle & Transport OSINT +### Vehicle Databases + +| Resource | URL | Description | +|---|---|---| +| RS Auto/Moto Levy Calculator | [https://rs.ge/Eservices-en](https://rs.ge/Eservices-en) | Calculate vehicle taxes by details | +| MyAuto.ge | [https://myauto.ge](https://myauto.ge) | Georgia's largest vehicle marketplace -- VIN check, Carfax reports, listing history | +| MyAuto VIN Check | [https://myauto.ge/en/vin](https://myauto.ge/en/vin) | Check vehicle history by VIN code (Carfax & ClearVin) | +| AutoPapa.ge | [https://autopapa.ge](https://autopapa.ge) | US auto auction imports -- vehicle history, photos, damage reports | +| Myparts.ge | [https://myparts.ge](https://myparts.ge) | Auto parts marketplace -- useful for identifying vehicles | +| SS.GE (Auto) | [https://auto.ss.ge](https://auto.ss.ge) | Vehicle classifieds with detailed specs and owner contacts | +| EverCar.ge | [https://evercar.ge](https://evercar.ge) | Vehicle marketplace with import history | + +### Transport Authority Data + +| Resource | URL | Description | +|---|---|---| +| Service Development Agency (SDA) | [https://sda.gov.ge](https://sda.gov.ge) | Vehicle registration, driving licenses, technical inspection data | +| Tbilisi City Hall Transport | [https://tbilisi.gov.ge](https://tbilisi.gov.ge) | City transport data, parking, traffic | +| Georgian Railway | [https://railway.ge](https://railway.ge) | Rail transport data, schedules | + + +| Georgian Airports | https://tbilisiairport.com | Flight data, passenger statistics | +|---|---|---| +| MIA Traffic Police | [https://patrol.gov.ge](https://patrol.gov.ge) | Traffic violation data, accident reports | + +### Georgian License Plate Format + +``` +### Georgian plates follow these formats: + +- Standard: AA-123-AA (two letters, three numbers, two letters) +- Government: GOV followed by numbers +- Diplomatic: D followed by numbers +- Military: GEO followed by numbers +- Regional codes vary by area + +### Note: Georgian plates use Latin letters + +``` +7. Financial Intelligence & Banking +### National Bank & Financial Regulators + +| Resource | URL | Description | +|---|---|---| +| National Bank of Georgia (NBG) | [https://nbg.gov.ge](https://nbg.gov.ge) | Central bank -- exchange rates, banking statistics, supervisory data | +| NBG Exchange Rates | [https://nbg.gov.ge/en/monetary-policy/currency](https://nbg.gov.ge/en/monetary-policy/currency) | Official GEL exchange rates (historical data available) | +| NBG Banking Supervision | [https://nbg.gov.ge/en/supervision](https://nbg.gov.ge/en/supervision) | Bank financial data, supervisory actions, licensed entities | +| NBG AML Sanctions | [https://nbg.gov.ge/en/supervision/aml-cft](https://nbg.gov.ge/en/supervision/aml-cft) | Fines on banks/entities for AML violations (names, amounts, reasons) | +| Financial Monitoring Service | [https://fms.gov.ge](https://fms.gov.ge) | Georgia's FIU -- anti-money laundering intelligence | +| Competition & Consumer Protection | [https://competition.ge](https://competition.ge) | Market concentration, mergers, consumer complaints | + +### Banks & Financial Institutions + +| Institution | URL | Description | +|---|---|---| +| Bank of Georgia | [https://bankofgeorgia.ge](https://bankofgeorgia.ge) | Largest bank -- financial reports, shareholder data | +| TBC Bank | [https://tbcbank.ge](https://tbcbank.ge) | Second largest bank -- public financial disclosures | +| Liberty Bank | [https://libertybank.ge](https://libertybank.ge) | Retail-focused bank | +| Basis Bank | [https://basisbank.ge](https://basisbank.ge) | Investment bank | +| Credo Bank | [https://credobank.ge](https://credobank.ge) | Regional bank | +| ProCredit Bank | [https://procreditbank.ge](https://procreditbank.ge) | SME-focused bank | +| Finca Bank | [https://finca.ge](https://finca.ge) | Microfinance bank | +| Crystal | [https://crystal.ge](https://crystal.ge) | Microfinance organization | + +### Financial OSINT Searches + +| Query | What You Find | +|---|---| +| Company name + rs.ge | Tax status, registration, debts | +| Person name + nbg.gov.ge | If they appear in AML sanctions | +| Company + opensanctions.org | International sanctions cross-reference | +| Company + offshore leaks | ICIJ Offshore Leaks Database -- Georgian entities | +| Company + tenders.procurement.gov.ge | Government contracts won | + +--- +### 50.8 Election & Political Data + +### Central Election Commission (CEC) + +| Resource | URL | Description | +|---|---|---| +| CEC of Georgia (CESKO) | [https://cesko.ge](https://cesko.ge) | Official election authority -- voter data, results, regulations | +| CEC Election Results | [https://cesko.ge](https://cesko.ge) (results section) | Detailed results by precinct, district, party -- all elections since 2008 | +| CEC Voter Information | [https://cesko.ge/en/amomrchevlebi](https://cesko.ge/en/amomrchevlebi) | Voter registration verification portal | +| CEC Annual Reports | [https://cesko.ge](https://cesko.ge) (publications) | Annual reports with detailed election statistics | + +### Political Data Sources + +| Resource | URL | Description | +|---|---|---| +| Parliament of Georgia | [https://parliament.ge](https://parliament.ge) | MP profiles, voting records, committee membership, bill tracking | +| Political Party Registry | [https://cesko.ge](https://cesko.ge) (parties section) | Registered political parties, financial disclosures, leadership | +| ISFED (Election Monitoring) | [https://isfed.ge](https://isfed.ge) | Independent election observation reports, violations database | +| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Political finance monitoring, corruption investigations | +| Civil Georgia | [https://civil.ge](https://civil.ge) | Independent news with detailed political analysis | +| CRRC Georgia | [https://crrc.ge](https://crrc.ge) | Caucasus Research Resource Center -- public opinion surveys, political polling | +| IPU Georgia | [https://data.ipu.org/parliament/GE](https://data.ipu.org/parliament/GE) | Inter-Parliamentary Union -- Georgian parliament data | +| NDI Georgia | [https://ndi.org/georgia](https://ndi.org/georgia) | National Democratic Institute -- political program data | + +2024 Georgian Parliamentary Election Data +| Data Point | Source | +|---|---| +| Official Results | cesko.ge -- full precinct-level data | +| Analysis & Claims | civil.ge/archives/631386 | +| ISFED Reports | isfed.ge -- real-time parallel vote tabulation | +| International Observers | OSCE/ODIHR reports | +| Wikipedia Overview | en.wikipedia.org/wiki/2024_Georgian_parliamentary_election | + +--- +### 50.9 Maps & Geospatial Intelligence + +### Georgian Mapping Services + +| Resource | URL | Description | +|---|---|---| +| NSDI Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | National Spatial Data Infrastructure -- cadastral maps, land parcels, addresses | +| Google Maps (Georgia) | [https://maps.google.com](https://maps.google.com) | Street View coverage in Georgia, satellite imagery, business listings | +| Yandex Maps (Georgia) | [https://yandex.com/maps/?ll=44.78,41.69](https://yandex.com/maps/?ll=44.78,41.69) | Alternative mapping with different satellite imagery and Russian-language data | +| OpenStreetMap Georgia | [https://www.openstreetmap.org/#map=8/42.0/43.5](https://www.openstreetmap.org/#map=8/42.0/43.5) | Community-maintained map with detailed Georgian mapping | +| Wikimapia | [https://wikimapia.org/#lang=en&lat=41.7&lon=44.8](https://wikimapia.org/#lang=en&lat=41.7&lon=44.8) | User-annotated satellite imagery -- useful for identifying unmarked buildings | +| Sentinel Hub (Copernicus) | [https://scihub.copernicus.eu](https://scihub.copernicus.eu) | Free satellite imagery for Georgia (EU Copernicus program) | +| Google Earth | [https://earth.google.com](https://earth.google.com) | Historical satellite imagery for Georgia dating back to early 2000s | +| Mapillary | [https://www.mapillary.com](https://www.mapillary.com) | Street-level imagery crowdsourced -- some Georgian coverage | + +### GIS Data Sources + +| Resource | URL | Description | +|---|---|---| +| NAPR GIS | [https://nsdi.gov.ge](https://nsdi.gov.ge) | Cadastral data, administrative boundaries, address registry | +| NEA (Environmental Agency) | [https://nea.gov.ge](https://nea.gov.ge) | Environmental monitoring stations, seismic data, weather stations | +| Geostat GIS Data | [https://geostat.ge](https://geostat.ge) | Census maps, demographic distribution by region | +| Tbilisi Municipality GIS | [https://tbilisi.gov.ge](https://tbilisi.gov.ge) | City planning, zoning, infrastructure maps | + +### Geolocation Tips for Georgia + +``` +### Key visual identifiers for geolocating imagery in Georgia: + +- Georgian script (mkhedruli) on signs -- unique alphabet +- Mountain terrain (Caucasus) with distinctive tower-houses in Svaneti/Tusheti +- Soviet-era apartment blocks (khrushchyovka) in cities +- Distinctive church architecture (Georgian Orthodox cross-dome style) +- License plates: AA-123-AA format +- Phone prefix: +995 +- Currency: GEL (Georgian Lari) -- prices on signs +- Bilingual signs (Georgian + English) in Tbilisi +- Unique tower-houses in mountainous regions (Svaneti, Tusheti, Khevsureti) +``` +### 50.10 Media Landscape & News OSINT + +### Major Georgian News Sources + +| Source | URL | Language | Orientation | +|---|---|---|---| +| Civil Georgia | [https://civil.ge](https://civil.ge) | EN/GE | Independent, pro-Western | +| Interpressnews | [https://interpressnews.ge](https://interpressnews.ge) | GE/EN | News agency | +| Agenda.ge | [https://agenda.ge](https://agenda.ge) | EN | State-adjacent (government-funded) | +| Georgia Today | [https://georgiatoday.ge](https://georgiatoday.ge) | EN | Independent English-language | +| OC Media | [https://oc-media.org](https://oc-media.org) | EN | Independent Caucasus-wide | +| JAM News | [https://jam-news.net](https://jam-news.net) | EN/GE/RU/AZ/AM | Regional news agency | +| Netgazeti | [https://netgazeti.ge](https://netgazeti.ge) | GE | Independent digital | +| Publika | [https://publika.ge](https://publika.ge) | GE | Independent | +| Tabula | [https://tabula.ge](https://tabula.ge) | GE | Liberal | +| Liberali | [https://liberali.ge](https://liberali.ge) | GE | Liberal | +| BMG (Business Media Georgia) | [https://bm.ge](https://bm.ge) | GE/EN | Business news | +| Forbes Georgia | [https://forbes.ge](https://forbes.ge) | GE/EN | Business | +| Commersant.ge | [https://commersant.ge](https://commersant.ge) | GE | Business | + +### Television & Radio + +| Channel | URL | Notes | +|---|---|---| +| Georgian Public Broadcaster (GPB) | [https://1tv.ge](https://1tv.ge) | State public broadcaster | +| Rustavi 2 | [https://rustavi2.ge](https://rustavi2.ge) | Pro-government (ownership changed) | +| Imedi TV | [https://imedinews.ge](https://imedinews.ge) | Pro-government | +| Mtavari Arkhi | [https://mtavari.tv](https://mtavari.tv) | Opposition-leaning | +| TV Pirveli | [https://tvpirveli.ge](https://tvpirveli.ge) | Independent | +| Formula TV | [https://formulanews.ge](https://formulanews.ge) | Independent | +| Kavkasia TV | [https://kavkasia.ge](https://kavkasia.ge) | Independent | +| Radio Tavisupleba (RFE/RL) | [https://radiotavisupleba.ge](https://radiotavisupleba.ge) | Georgian service of Radio Free Europe | +| Voice of America Georgian | [https://amerikiskhma.com](https://amerikiskhma.com) | VOA Georgian service | + +### Investigative Journalism + +| Organization | URL | Description | +|---|---|---| +| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Anti-corruption investigations, asset monitoring, political finance | +| IDFI | [https://idfi.ge](https://idfi.ge) | Information freedom, public data access, FOI requests | +| Studio Monitor | [https://studiomonitori.ge](https://studiomonitori.ge) | Investigative journalism | +| Batumelebi | [https://batumelebi.netgazeti.ge](https://batumelebi.netgazeti.ge) | Ajara-focused investigations | +| CATAGI | [https://catagi.ge](https://catagi.ge) | Analytical research, power structure investigations | +| Who Owned Georgia (TI) | [https://transparency.ge](https://transparency.ge) | Research on business/media ownership | + +--- +### 50.11 Data Leaks & Breaches + +### Major Georgian Data Breaches + +| Incident | Year | Records | Details | Sources | +|---|---|---|---|---| +| 4.9 Million Citizens Leak | 2020 | 4,934,863 | Full names, DOB, gender, ID numbers, phone numbers -- posted on a hacking forum in a 1.04GB Microsoft Access file | ZDNet | +| Ghost Database (Cybernews) | 2025 | ~7 million | Personal records appeared on German cloud provider -- unsecured, then vanished. Full names, DOB, gender, ID numbers, phone numbers | Cybernews | +| CEC Voter Database | 2020 | ~3.5 million | Voter registration data linked to the 2020 leak | OC Media | + +### Breach Search Tools (Check Georgian Data) + +| Tool | URL | Description | Free/Paid | +|---|---|---|---| +| Have I Been Pwned | [https://haveibeenpwned.com](https://haveibeenpwned.com) | Check email exposure in known breaches | Free | +| LeakCheck | [https://leakcheck.io](https://leakcheck.io) | Search by email, phone, username -- CIS data included | Freemium | +| DeHashed | [https://dehashed.com](https://dehashed.com) | Search breached databases by name, email, phone, IP | Paid | +| IntelX | [https://intelx.io](https://intelx.io) | Intelligence search engine -- pastes, leaks, darknet | Freemium | +| Snusbase | [https://snusbase.com](https://snusbase.com) | Breach database search | Paid | +| BreachDirectory | [https://breachdirectory.org](https://breachdirectory.org) | Partial password hash lookup | Free | +| Hudson Rock Cavalier | [https://cavalier.hudsonrock.com](https://cavalier.hudsonrock.com) | Infostealer data -- compromised credentials | Free tier | +| CheckLeaked | [https://checkleaked.cc](https://checkleaked.cc) | Breach data search including WhatsApp leaks | Paid | +| Leak-Lookup | [https://leak-lookup.com](https://leak-lookup.com) | Multi-database breach search | Paid | +| h8mail | [https://github.com/khast3x/h8mail](https://github.com/khast3x/h8mail) | Email breach hunting command-line tool | Free (OSS) | + +### Important Context + +``` +The 2020 Georgian data leak is one of the largest per-capita data breaches ever: +- 4.9 million records from a country of ~3.7 million living citizens +- Includes deceased citizens' records +- Originally suspected to be a CEC voter database leak +- Data was published on a hacking forum over a weekend +- Georgian authorities investigated but never publicly identified the source +- The 2025 "ghost database" on a German cloud provider may be related + +### Impact: Georgian personal data (name, DOB, ID number, phone) + +circulates on multiple forums and breach databases. +``` +### 50.12 Phone & Telecom OSINT + +### Georgian Mobile Operators + +| Operator | URL | Market Share | Network | +|---|---|---|---| +| MagtiCom | [https://magticom.ge](https://magticom.ge) | ~40% | 2G/3G/4G/5G -- best coverage | +| Silknet (formerly Geocell) | [https://silknet.com](https://silknet.com) | ~35% | 2G/3G/4G/5G | +| Cellfie (formerly Beeline) | [https://cellfie.ge](https://cellfie.ge) | ~25% | 2G/3G/4G/5G | + +### Georgian Phone Number Format + +``` +### Country code: +995 + +### Format: +995 XXX XXX XXX (9 digits after country code) + + +### Mobile prefixes: + +- 5XX: Mobile numbers (all operators) + - 555, 557, 558: MagtiCom + - 551, 571, 574, 577, 578: Silknet + - 568, 591, 592, 593, 595, 596, 597, 598, 599: Various + +### Landline prefixes: + +- 32: Tbilisi +- 422: Batumi (Ajara) +- 431: Kutaisi (Imereti) +- 352: Rustavi +- 370: Gori +- 495: Zugdidi (Samegrelo) + +### Emergency: 112 (universal) + +### Directory: 114 + +``` +### Phone OSINT Techniques for Georgian Numbers + +| Technique | Tool/Method | Description | +|---|---|---| +| Caller ID Lookup | GetContact / TrueCaller | See how the number is saved in other people's phones | +| WhatsApp Check | WhatsApp app | Check if number has WhatsApp -- profile photo, status, last seen | +| Telegram Check | Telegram app | Search by phone number -- username, profile photo, bio | +| Viber Check | Viber app | Very popular in Georgia -- check profile info | +| Google Search | `"+995XXXXXXXXX"` | Find where the number appears online (ads, forums, social media) | +| Facebook Reverse | FB search by phone | Find Facebook account linked to phone number | +| HIBP / LeakCheck | haveibeenpwned.com / leakcheck.io | Check if phone number appears in breach databases | + +--- +### 50.13 Social Media & Platform OSINT + +### Georgian Social Media Landscape + +| Platform | Georgian Users (est.) | OSINT Value | Notes | +|---|---|---|---| +| Facebook | ~2.5 million | Very High | THE dominant social platform in Georgia. Many profiles are public with phone numbers visible | +| Instagram | ~1.5 million | High | Popular for ages 18-35, especially in Tbilisi | +| TikTok | ~1 million | Medium | Growing rapidly, especially youth | +| YouTube | ~2 million | High | Georgian content creators, news channels, investigations | +| Telegram | ~1.5 million | Very High | News channels, political groups, leak channels, bots | +| Twitter/X | ~200K | Medium | Used by journalists, politicians, NGOs | +| LinkedIn | ~300K | Medium | Professional profiles, business intelligence | +| VK.com | ~150K | Medium | Russian-speaking Georgians, Abkhazia/South Ossetia | +| OK.ru | ~100K | Low | Older demographic | +| Reddit r/Sakartvelo | ~100K | Low | English-speaking Georgian community | + +### Georgian Facebook OSINT + +``` +Facebook is the #1 OSINT source for Georgian individuals: + +### Search techniques: + +1. Search by name in Georgian script: "გიორგი" "ბერიძე" +2. Search by phone: Enter +995XXXXXXXXX in Facebook search +3. Search by workplace: "Bank of Georgia" employees +4. Search by school: "Tbilisi State University" graduates +5. Search by location: People in "Tbilisi" +6. Use Facebook Graph Search remnants via Google: + site:facebook.com "name" "lives in Tbilisi" +7. Check "People You May Know" from a Georgian account +8. Many Georgian users have public profiles with: + - Phone numbers in About section + - Workplace history + - Education history + - Family relationships + - Check-in locations +``` +### Platform-Specific Tools + +| Tool | URL | Description | +|---|---|---| +| Facebook Search | [https://facebook.com/search](https://facebook.com/search) | Native search with filters | +| Who Posted What | [https://whopostedwhat.com](https://whopostedwhat.com) | Facebook keyword search by date | +| Social Searcher | [https://social-searcher.com](https://social-searcher.com) | Free social media search engine | +| SocialBlade | [https://socialblade.com](https://socialblade.com) | Stats for YouTube/Instagram/Twitter accounts | +| Twint | [https://github.com/twintproject/twint](https://github.com/twintproject/twint) | Twitter scraper (archived) | +| Instaloader | [https://github.com/instaloader/instaloader](https://github.com/instaloader/instaloader) | Instagram profile and post downloader | +| TikTok Scraper | [https://github.com/drawrowfly/tiktok-scraper](https://github.com/drawrowfly/tiktok-scraper) | TikTok data extraction | + +--- +### 50.14 Open Data & Statistics Portals + +### National Statistics + +| Resource | URL | Description | +|---|---|---| +| GeoStat (National Statistics Office) | [https://geostat.ge](https://geostat.ge) | Official Georgian statistics -- population, economy, trade, crime, health, education | +| GeoStat Database | [https://geostat.ge/ka/modules/categories/858/monatsemta-baza](https://geostat.ge/ka/modules/categories/858/monatsemta-baza) | Downloadable statistical databases | +| Census 2024 | [https://census2024.geostat.ge](https://census2024.geostat.ge) | 2024 Population and Agricultural Census data | +| Census 2014 Results | [https://geostat.ge/en/modules/categories/735/population-census](https://geostat.ge/en/modules/categories/735/population-census) | Previous census results with detailed demographic breakdowns | + +### Open Data Portals + +| Resource | URL | Description | +|---|---|---| +| data.gov.ge | [https://data.gov.ge](https://data.gov.ge) | Georgian open data portal -- government datasets in machine-readable format | +| OpenData SPA | [https://opendata.spa.ge](https://opendata.spa.ge) | Open procurement data in OCDS format (2011-present) | +| OGP Georgia | [https://ogpgeorgia.gov.ge](https://ogpgeorgia.gov.ge) | Open Government Partnership -- transparency commitments and progress | +| IDFI Public Information Database | [https://idfi.ge](https://idfi.ge) | Public information requests and responses database | +| World Bank Georgia | [https://data.worldbank.org/country/georgia](https://data.worldbank.org/country/georgia) | World Bank development indicators for Georgia | +| UN Data Georgia | [https://data.un.org](https://data.un.org) | UN statistics on Georgia | +| OECD Georgia | [https://data.oecd.org](https://data.oecd.org) (search Georgia) | Economic and social indicators | +| IMF Georgia | [https://imf.org/en/Countries/GEO](https://imf.org/en/Countries/GEO) | IMF economic assessments and data | + +### Key Statistical Datasets + +| Dataset | URL/Source | Contents | +|---|---|---| +| Population by Region | geostat.ge | Population counts by municipality, age, gender | +| Crime Statistics | geostat.ge | Crimes by type, region, year | +| Economic Data | geostat.ge | GDP, inflation, trade, employment | +| Education Statistics | geostat.ge | Schools, students, universities by region | +| Health Statistics | geostat.ge + ncdc.ge | Disease incidence, mortality, healthcare facilities | +| Tourism Statistics | gnta.ge | Visitor counts by country, spending data | + +--- +### 50.15 Procurement & Government Spending + +### Procurement Platforms + +| Resource | URL | Description | +|---|---|---| +| State Procurement Agency (SPA) | [https://procurement.gov.ge](https://procurement.gov.ge) | Georgia's unified electronic procurement system | +| Tenders Portal | [https://tenders.procurement.gov.ge](https://tenders.procurement.gov.ge) | Search and browse all government tenders -- live and historical | +| OpenData SPA (OCDS) | [https://opendata.spa.ge](https://opendata.spa.ge) | All procurement data in Open Contracting Data Standard format since 2011 | +| OCDS API | [https://odapi.spa.ge](https://odapi.spa.ge) | API access to procurement data | +| Global Public Procurement (Georgia) | [https://globalpublicprocurementdata.org/gppd/country_profile/GE](https://globalpublicprocurementdata.org/gppd/country_profile/GE) | Georgia's procurement profile in global context | + +### What You Can Find + +``` +Georgia's procurement system is considered one of the most transparent in Europe/Central Asia: + +### Searchable by: + +- Contracting organization name +- Supplier/vendor name +- Tender number +- Contract value range +- Procurement type (electronic tender, simplified, consolidated) +- Date range +- CPV code (product/service category) + +### Available data: + +- Full tender documents +- Bid submissions and bidder names +- Contract awards with prices +- Subcontractor information +- Procurement plans +- Complaint/dispute records +``` +### Budget Transparency + +| Resource | URL | Description | +|---|---|---| +| Ministry of Finance Budget | [https://mof.gov.ge](https://mof.gov.ge) | State budget documents, execution reports | +| Budget.ge | [https://budget.ge](https://budget.ge) | Interactive budget visualization tool | +| BOOST Georgia (World Bank) | [https://boost.worldbank.org](https://boost.worldbank.org) | Detailed budget expenditure data | +| State Audit Office | [https://sao.ge](https://sao.ge) | Government audit reports, financial compliance | + +--- +### 50.16 Domain & IP & Network Intelligence + +.GE Domain Intelligence +| Resource | URL | Description | +|---|---|---| +| NIC.GE (Registry) | [https://nic.ge](https://nic.ge) | Georgian domain registry -- .ge TLD management | +| NIC.GE WHOIS | [https://nic.ge/en/domains/whois](https://nic.ge/en/domains/whois) | Official WHOIS lookup for .ge domains | +| DomainTools .GE | [https://research.domaintools.com/statistics/tldpedia/ge](https://research.domaintools.com/statistics/tldpedia/ge) | .GE TLD statistics and data | +| SecurityTrails | [https://securitytrails.com](https://securitytrails.com) | DNS history, subdomains, related domains for .ge sites | +| crt.sh | [https://crt.sh](https://crt.sh) | Certificate Transparency logs -- find subdomains of .ge sites | +| DNSDumpster | [https://dnsdumpster.com](https://dnsdumpster.com) | DNS reconnaissance for .ge domains | +| ViewDNS | [https://viewdns.info](https://viewdns.info) | Reverse IP, WHOIS, DNS records, port scanning | +| Shodan | [https://shodan.io](https://shodan.io) | Search for internet-connected devices in Georgia | + +### Georgian ASN & Network Data + +| Resource | URL | Description | +|---|---|---| +| BGP.he.net Georgia | [https://bgp.he.net/country/GE](https://bgp.he.net/country/GE) | All Georgian AS Numbers and networks (138 ASNs) | +| IPinfo.io Georgia | [https://ipinfo.io/countries/ge](https://ipinfo.io/countries/ge) | Georgian IP ranges, ISPs, geolocation data | +| NirSoft Georgia IPs | [https://nirsoft.net/countryip/ge_total.html](https://nirsoft.net/countryip/ge_total.html) | Complete list of IP blocks allocated to Georgia | +| IPIP.NET Georgia | [https://whois.ipip.net/iso/GE](https://whois.ipip.net/iso/GE) | Georgian ASN directory | + +### Major Georgian ISP ASNs + +| ISP | ASN | Description | +|---|---|---| +| MagtiCom | AS16010, AS28751 | Largest mobile/ISP | +| Silknet | AS35805 | Second largest, DSL/fiber/mobile | +| Caucasus Online | AS20771 | Major fiber backbone | +| GRENA | AS20545 | Georgian Research and Education Network | +| SIACOM | AS198150 | Business ISP | +| Delta Net | AS56844 | Regional ISP | +| Akhali Kselebi | AS44569 | Regional ISP | +| Caucasus Digital Network | AS57516 | CDN/hosting provider | + +### Useful Shodan/Censys Queries for Georgia + +``` +### Shodan: + +- country:GE (all devices in Georgia) +- country:GE port:80 (web servers) +- country:GE port:22 (SSH servers) +- country:GE port:3389 (RDP servers) +- country:GE port:21 (FTP servers) +- country:GE screenshot.label:webcam (webcams) +- country:GE org:"Magticom" (MagtiCom devices) +- country:GE org:"Silknet" (Silknet devices) +- country:GE has_screenshot:true (devices with screenshots) + +### Censys: + +- location.country_code:GE +- location.city:Tbilisi +``` +### 50.17 Education & Academic Databases + +### Education Portals + +| Resource | URL | Description | +|---|---|---| +| Ministry of Education | [https://mes.gov.ge](https://mes.gov.ge) | Education policy, school data, exam information | +| EMIS (Education Management) | [https://emis.ge](https://emis.ge) | Education Management Information System -- school data, teacher registry | +| Schools Portal | [https://skolebi.emis.ge](https://skolebi.emis.ge) | Search Georgian schools by name, region, type -- interactive map | +| Student Portal | [https://students.emis.ge](https://students.emis.ge) | University student registration portal | +| E-Library (MES) | [https://elibrary.emis.ge](https://elibrary.emis.ge) | Textbooks and educational materials | +| EQE (Quality Enhancement) | [https://eqe.ge](https://eqe.ge) | Accredited programs, institutional evaluations, quality standards | +| National Exam Center | [https://naec.ge](https://naec.ge) | Unified National Exams data, university admission statistics | + +### Universities (Major) + +| University | URL | OSINT Value | +|---|---|---| +| Tbilisi State University (TSU) | [https://tsu.ge](https://tsu.ge) | Faculty directories, research databases, theses | +| Georgian Technical University (GTU) | [https://gtu.ge](https://gtu.ge) | Faculty, research, publications | +| Ilia State University | [https://iliauni.edu.ge](https://iliauni.edu.ge) | Research, library databases | +| Free University of Tbilisi | [https://freeuni.edu.ge](https://freeuni.edu.ge) | Staff directory, programs | +| Caucasus University | [https://cu.edu.ge](https://cu.edu.ge) | Faculty, publications | +| University of Georgia (UG) | [https://ug.edu.ge](https://ug.edu.ge) | Programs, staff | +| Business and Technology University (BTU) | [https://btu.edu.ge](https://btu.edu.ge) | Tech programs, staff | +| Agricultural University | [https://agruni.edu.ge](https://agruni.edu.ge) | Agricultural research data | + +### Academic Search + +| Resource | URL | Description | +|---|---|---| +| National Library of Georgia | [https://nplg.gov.ge](https://nplg.gov.ge) | Digital library, historical documents, periodicals archive | +| OpenLibrary.ge | [https://openlibrary.ge](https://openlibrary.ge) | Georgian academic publications, theses, dissertations | +| Ilia University Library | [https://library.iliauni.edu.ge](https://library.iliauni.edu.ge) | Access to scientific databases | +| TSU Digital Library | [https://digitallibrary.tsu.ge](https://digitallibrary.tsu.ge) | Academic theses and dissertations | + +--- +### 50.18 Health & Medical Databases + +### Health Authorities + +| Resource | URL | Description | +|---|---|---| +| NCDC (Disease Control) | [https://ncdc.ge](https://ncdc.ge) | National Center for Disease Control -- epidemiological data, disease surveillance, statistics | +| Ministry of Health | [https://moh.gov.ge](https://moh.gov.ge) | Health policy, hospital data, healthcare workforce | +| Health Regulation Agency | [https://hra.gov.ge](https://hra.gov.ge) | Licensed medical facilities, pharmaceutical registry | +| Social Service Agency | [https://ssa.gov.ge](https://ssa.gov.ge) | Social assistance data, disability statistics, healthcare coverage | + +### Medical OSINT + +| Resource | What You Can Find | +|---|---| +| ncdc.ge/statistics | Disease incidence by region, mortality data, vaccination rates | +| Hospital Registry | Licensed hospitals and clinics with addresses and specializations | +| Pharmacy Registry | Licensed pharmacies across Georgia | +| Doctor Licensing | Medical professional licensing (through Ministry of Health) | +| GeoStat Health Data | [https://geostat.ge](https://geostat.ge) -- health statistics section | + +--- +### 50.19 NGO & Civil Society & Watchdogs + +### Key Georgian NGOs (OSINT Resources) + +| Organization | URL | Focus Area | OSINT Value | +|---|---|---|---| +| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Anti-corruption, asset monitoring | Asset declarations, political finance, ownership investigations | +| IDFI | [https://idfi.ge](https://idfi.ge) | Information freedom, open data | Public information requests, government transparency monitoring | +| GYLA | [https://gyla.ge](https://gyla.ge) | Legal reform, human rights | Court monitoring, legal analysis, election observation | +| ISFED | [https://isfed.ge](https://isfed.ge) | Election monitoring | Real-time election monitoring, violations database | +| TI Georgia - Who Owns Georgia | [https://transparency.ge](https://transparency.ge) | Media ownership | Detailed investigations into who controls Georgian media | +| Social Justice Center | [https://socialjustice.org.ge](https://socialjustice.org.ge) | Social rights, economic justice | Labor, housing, economic data | +| Media Development Foundation | [https://mdfgeorgia.ge](https://mdfgeorgia.ge) | Media freedom | Media monitoring, financial transparency of media | +| CRRC Georgia | [https://crrc.ge](https://crrc.ge) | Research, polling | Public opinion surveys, research datasets | +| Partnership for Human Rights | [https://phr.ge](https://phr.ge) | Human rights monitoring | Human rights reports | +| Democracy Research Institute | [https://democracyresearch.ge](https://democracyresearch.ge) | Democracy monitoring | Democratic indicators, political analysis | +| CATAGI | [https://catagi.ge](https://catagi.ge) | Power structure analysis | Investigations into informal power networks | + +--- +### 50.20 Fact-Checking & Disinformation Tracking + +### Fact-Checking Organizations + +| Organization | URL | Description | +|---|---|---| +| Myth Detector | [https://mythdetector.com](https://mythdetector.com) | Media Development Foundation's fact-checking portal -- disinformation database | +| FactCheck.ge | [https://factcheck.ge](https://factcheck.ge) | GRASS initiative -- rates accuracy of public officials' statements | +| GeoFacts | [https://geofacts.ge](https://geofacts.ge) | Fact-checking platform | +| MythDetector Database | [https://mythdetector.com/en/factchecker-db/](https://mythdetector.com/en/factchecker-db/) | Searchable database of fact-checked claims | + +### Disinformation Monitoring + +| Resource | URL | Description | +|---|---|---| +| ISFED Social Media Monitoring | [https://isfed.ge](https://isfed.ge) | Monitors Russian information operations in Georgian social media | +| MDF Annual Reports | [https://mdfgeorgia.ge](https://mdfgeorgia.ge) | Detailed media monitoring and disinformation analysis | +| DFRLab (Atlantic Council) | [https://atlanticcouncil.org/programs/digital-forensic-research-lab/](https://atlanticcouncil.org/programs/digital-forensic-research-lab/) | Digital forensic analysis including Georgia-related disinformation | +| EU vs Disinfo | [https://euvsdisinfo.eu](https://euvsdisinfo.eu) | EU database of pro-Kremlin disinformation -- includes Georgia | +| Hamilton 2.0 (Alliance for Securing Democracy) | [https://securingdemocracy.gmfus.org/hamilton-dashboard/](https://securingdemocracy.gmfus.org/hamilton-dashboard/) | Tracks Russian/Chinese state media narratives on Georgia | + +--- +### 50.21 Archives & Historical Databases + +### National Archives & Libraries + +| Resource | URL | Description | +|---|---|---| +| National Archives of Georgia | [https://archive.gov.ge](https://archive.gov.ge) | Historical documents, electronic catalogues, digitized materials, reading room reservation | +| National Archives Electronic Catalogues | [https://archive.gov.ge](https://archive.gov.ge) (catalogues section) | Searchable index of archived documents | +| National Library of Georgia | [https://nplg.gov.ge](https://nplg.gov.ge) | National library -- digital collections, rare books, periodicals archive | +| National Parliamentary Library | [https://nplg.gov.ge](https://nplg.gov.ge) | Legislative history, parliamentary debates archive | +| Internet Archive (Georgia) | [https://archive.org/details/1989-tbilisi-1_202408](https://archive.org/details/1989-tbilisi-1_202408) | Archive of Sakartvelo collection on Internet Archive | +| Wayback Machine (.ge sites) | [https://web.archive.org/web/*/*.ge](https://web.archive.org/web/*/*.ge) | Cached versions of Georgian websites -- historical snapshots | + +### Historical & Cultural Databases + +| Resource | URL | Description | +|---|---|---| +| Georgian National Museum | [https://museum.ge](https://museum.ge) | Museum collections, archaeological data, cultural artifacts | +| National Agency for Cultural Heritage | [https://heritage.gov.ge](https://heritage.gov.ge) | Cultural heritage monuments, protected sites database | +| Georgian Cinema Database | [https://georgiancinema.ge](https://georgiancinema.ge) | Georgian film history, directors, actors | +| OpenLibrary.ge | [https://openlibrary.ge](https://openlibrary.ge) | Academic publications, dissertations, historical texts | + +### Archival OSINT Tips + +``` +### Wayback Machine queries for Georgian sites: + +- https://web.archive.org/web/*/napr.gov.ge (old property data) +- https://web.archive.org/web/*/rs.ge (old tax data) +- https://web.archive.org/web/*/cesko.ge (old election data) +- https://web.archive.org/web/*/parliament.ge (old MP profiles) + +Use these to find information that may have been removed from current sites. +``` +### 50.22 Auctions & Seized Property + +### Government Auction Platforms + +| Resource | URL | Description | +|---|---|---| +| eAuction.ge | [https://eauction.ge](https://eauction.ge) | Official state property auction platform -- seized assets, government surplus, real estate, vehicles | +| Gavel.ge | [https://gavel.ge](https://gavel.ge) | Aggregates auctions from Livo, eAuction.ge, and Tbilisi Municipality (11,000+ lots) | +| Livo Auctions | [https://livo.ge](https://livo.ge) (auction section) | Real estate auctions with 3D tours | +| Tbilisi Municipality Auctions | [https://tbilisi.gov.ge](https://tbilisi.gov.ge) | Municipal property sales | +| LEPL National Bureau of Enforcement | [https://nbe.gov.ge](https://nbe.gov.ge) | Enforcement/seized property auctions | + +### What You Can Find in Auction Data + +``` +eAuction.ge reveals: +- Seized properties of individuals/companies (with owner names) +- Government surplus equipment +- Bank foreclosure properties +- Court-ordered asset sales +- Detailed property descriptions with photos +- Starting prices and bid history +- Buyer information (in completed auctions) + +### OSINT value: Shows who lost property and why (debt, crime, tax evasion) + +``` +### 50.23 Job Markets & Classifieds + +### Job Portals + +| Portal | URL | Description | +|---|---|---| +| Jobs.ge | [https://jobs.ge](https://jobs.ge) | Georgia's largest job board -- employer names, salaries, positions | +| HR.ge | [https://hr.ge](https://hr.ge) | Professional job portal with CV database | +| LinkedIn (Georgia) | [https://linkedin.com](https://linkedin.com) (filter by Georgia) | Professional networking, company pages | +| Myjobs.ge | [https://myjobs.ge](https://myjobs.ge) | Additional job listings | +| CV.ge | [https://cv.ge](https://cv.ge) | Resume/CV platform | + +### Classifieds (Multi-Category) + +| Portal | URL | Description | +|---|---|---| +| SS.GE | [https://ss.ge](https://ss.ge) | Georgia's BIGGEST classifieds -- real estate, vehicles, electronics, jobs, services (OSINT goldmine) | +| MyMarket.ge | [https://mymarket.ge](https://mymarket.ge) | Second-hand goods marketplace -- seller profiles, locations, phone numbers | +| MyAuto.ge | [https://myauto.ge](https://myauto.ge) | Vehicle classifieds | +| MyHome.ge | [https://myhome.ge](https://myhome.ge) | Real estate classifieds | +| MyParts.ge | [https://myparts.ge](https://myparts.ge) | Auto parts marketplace | +| Extra.ge | [https://extra.ge](https://extra.ge) | General classifieds and marketplace | +| Makler.ge | [https://makler.ge](https://makler.ge) | Service provider marketplace | + +### OSINT Value of Classifieds + +``` +### Georgian classifieds often reveal: + +- Real phone numbers of sellers +- Physical addresses +- Photos of properties/vehicles (with metadata) +- Business names and registration details +- Price history (for repeated listings) +- Location data from listings + +SS.GE in particular is a treasure trove: +- Most Georgians have used SS.GE at some point +- Old listings are often still accessible +- Google cache: site:ss.ge "phone number" "name" +``` +### 50.24 Asset Declarations & Anti-Corruption + +### Public Official Asset Declarations + +| Resource | URL | Description | +|---|---|---| +| Civil Service Bureau Declarations | [https://csb.gov.ge](https://csb.gov.ge) | Asset declarations of public officials -- income, property, securities, debts | +| Anti-Corruption Bureau | [https://acb.gov.ge](https://acb.gov.ge) | Asset declaration monitoring department | +| OpenSanctions (Georgia Declarations) | [https://opensanctions.org/datasets/ge_declarations/](https://opensanctions.org/datasets/ge_declarations/) | Structured data from Georgian official asset declarations | +| Transparency International Georgia | [https://transparency.ge](https://transparency.ge) | Analysis and monitoring of official asset declarations | + +### What's in Asset Declarations + +``` +### Georgian public officials must declare annually: + +- Real estate (addresses, values) +- Vehicles (make, model, year) +- Securities (company shares, stock holdings) +- Bank deposits and cash +- Income sources (salary, business income, gifts) +- Debts and liabilities +- Family members' assets +- Gifts over 1,000 GEL + +### Available for: MPs, ministers, judges, prosecutors, mayors, high-ranking + +civil servants, and their family members. + +OpenSanctions.org provides this data in machine-readable format. +``` +### 50.25 Georgian Wordlists & Password Tools + +### Georgian Language Wordlists + +| Resource | Description | Use Case | +|---|---|---| +| Georgian Wordlist (geowordlist.txt) | 11.9 MB dictionary of Georgian words and common passwords | Password cracking, security auditing | +| make_wordlist.py | Python script for generating custom Georgian wordlists from rules | Custom wordlist generation for Georgian targets | +| Georgian Keyboard Layout Patterns | Common keyboard patterns in Georgian layout | Password generation | +| Georgian Name Combinations | First name + last name + year patterns common in Georgia | Targeted password lists | + +### Common Georgian Password Patterns + +``` +### Most common Georgian password structures: + +- Name + birth year: giorgi1990, nino1985 +- Georgian words in Latin: tbilisi, sakartvelo, gamarjoba +- Phone number as password: 555123456, 577987654 +- ID number as password: 01001012345 +- Georgian words in Georgian script: პაროლი, თბილისი +- Common substitutions: @ for a, 3 for e, 0 for o +- Name + 123: giorgi123, nino123 +- Football teams: dinamo, torpedo +- Georgian places: batumi, kutaisi, borjomi + +### Password cracking tools: + +- Hashcat: hashcat -m 0 hash.txt geowordlist.txt +- John the Ripper: john --wordlist=geowordlist.txt hash.txt +``` +### Generating Georgian Wordlists + +```bash +# Using make_wordlist.py (from uploaded tools) +python3 make_wordlist.py --language georgian --output geo_custom.txt + +# Using crunch for Georgian patterns +crunch 8 12 abcdefghijklmnopqrstuvwxyz0123456789 -t @@@@%%%% -o patterns.txt + +# Combining Georgian names with years +for name in giorgi nino dato mari luka ana; do + for year in $(seq 1980 2005); do + echo "${name}${year}" + done +done > georgian_names_years.txt +``` +### 50.26 Telegram OSINT for Georgia + +### Georgian News & Political Channels + +| Channel | Handle | Description | +|---|---|---| +| Formula News | @formulanewstv | Independent TV news channel | +| Mtavari Arkhi | @mtavariarkhi | Opposition-leaning TV channel | +| Netgazeti | @netgazeti | Independent online news | +| Tabula | @tabormagazine | Liberal news/analysis | +| Civil Georgia | @CivilGe | Independent English-language news | +| Radio Tavisupleba | @radiotavisupleba | RFE/RL Georgian service | +| Various Political Groups | Search "Georgia politics" | Political discussion groups | + +### OSINT Telegram Bots (Work with Georgian Data) + +| Bot | Handle | Description | Free/Paid | +|---|---|---|---| +| Eye of God | @EyeOfGodBot | Person search by phone, name, car -- CIS + Georgia data | Paid | +| Quick OSINT | @QuickOSINT_bot | Multi-database person lookup | Paid | +| GetContact Bot | @getcontact_bot | Caller ID lookup | Freemium | +| Phone Number Search | @PhoneNumber_SearchBot | Phone number OSINT | Freemium | +| Email Search | @mailsearchbot | Email breach lookup | Freemium | +| Leak OSINT | @leak_osint_bot | Breach data search | Paid | +| Search4Faces | @search4aboringface_bot | Facial recognition search | Freemium | + +### Russian-Language OSINT Channels (Relevant to Georgia) + +| Channel | Handle | Description | +|---|---|---| +| overbafer1 | @overbafer1 | OSINT tools and techniques | +| overlamer1 | @overlamer1 | Hacking and security | +| Social Engineering | @Social_engineering | Social engineering techniques | +| Cyberbezopasno | @cyberbezopasno | Cybersecurity news | + +### Telegram OSINT Techniques for Georgia + +``` +1. Search by phone number: Enter +995XXXXXXXXX in Telegram search + - Find if the person has Telegram + - See their username, profile photo, bio + +2. Search Georgian groups/channels: + - Use tgstat.com to search for Georgian channels + - Search for Georgian keywords in channel search + +3. Forward message analysis: + - Check "forwarded from" headers to trace information flow + +4. Telegram Scraping Tools: + - telegram-scraper (GitHub) + - Telethon (Python library) + - tg-archive for archiving channels +``` +### 50.27 Investigation Frameworks & Communities + +### OSINT Frameworks with Georgian Coverage + +| Framework | URL | Description | +|---|---|---| +| OSINT Framework | [https://osintframework.com](https://osintframework.com) | Web-based OSINT tool directory | +| Bellingcat OSINT Toolkit | [https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ](https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ) | Comprehensive OSINT tool spreadsheet | +| UNISHKA Georgia OSINT Guide | [https://unishka.substack.com/p/osint-of-georgia](https://unishka.substack.com/p/osint-of-georgia) | Dedicated Georgia OSINT methodology guide | +| Start.me OSINT Pages | [https://start.me](https://start.me) | Curated OSINT resource collections | +| Awesome OSINT (GitHub) | [https://github.com/jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) | Curated list of OSINT tools | +| OSINT Dojo | [https://www.osintdojo.com](https://www.osintdojo.com) | OSINT learning platform | + +### Investigative Communities + +| Community | Platform | Description | +|---|---|---| +| Bellingcat | [https://bellingcat.com](https://bellingcat.com) | Open source investigations -- has covered Georgia-related stories | +| OCCRP | [https://occrp.org](https://occrp.org) | Organized Crime and Corruption Reporting Project -- Georgia investigations | +| ICIJ | [https://icij.org](https://icij.org) | International investigative journalism -- Pandora Papers, Panama Papers (Georgian entries) | +| GIJN | [https://gijn.org](https://gijn.org) | Global Investigative Journalism Network | + +### ICIJ Databases (Georgian Entries) + +| Database | URL | Description | +|---|---|---| +| Offshore Leaks Database | [https://offshoreleaks.icij.org](https://offshoreleaks.icij.org) | Search for Georgian individuals/companies in Panama Papers, Paradise Papers, Pandora Papers | +| ICIJ Data | [https://icij.org/investigations/](https://icij.org/investigations/) | Full investigation archives with searchable databases | + +--- +### 50.28 Google Dorking for Georgia + +### Government & Official Sites + +``` +site:gov.ge filetype:pdf +site:gov.ge filetype:xlsx +site:gov.ge filetype:docx +site:gov.ge filetype:csv +site:napr.gov.ge +site:rs.ge +site:parliament.ge +site:cesko.ge +site:geostat.ge filetype:xlsx +site:matsne.gov.ge +``` +### Personal Information Discovery + +``` +"+995" site:facebook.com +"+995" site:linkedin.com +"@gmail.com" site:gov.ge +"@yahoo.com" site:.ge +intext:"+995" filetype:xlsx +intext:"+995" filetype:csv +allintext:"tbilisi" "phone" "email" filetype:xlsx +"პირადი ნომერი" filetype:pdf site:gov.ge +"საიდენტიფიკაციო" filetype:xlsx +``` +### Business & Corporate Intelligence + +``` +site:enreg.reestri.gov.ge +site:rs.ge "taxpayer" +"შპს" filetype:pdf site:gov.ge +"სს" OR "შპს" "+995" filetype:xlsx +site:tenders.procurement.gov.ge +"ხელშეკრულება" filetype:pdf site:gov.ge +``` +### Credential & Sensitive Data Discovery + +``` +allintext:"@gmail.com" "password" filetype:xlsx site:.ge +allintext:"username" "password" filetype:csv site:.ge +inurl:admin site:.ge +inurl:login site:.ge +inurl:wp-admin site:.ge +inurl:cpanel site:.ge +intitle:"index of" site:.ge +intitle:"index of" "parent directory" site:.ge +inurl:".env" site:.ge +inurl:"wp-config.php" site:.ge +site:.ge filetype:sql +site:.ge filetype:log +site:.ge filetype:bak +``` +### Educational & Academic + +``` +site:tsu.ge filetype:pdf +site:gtu.ge filetype:pdf +site:iliauni.edu.ge filetype:pdf +site:emis.ge +"student" OR "სტუდენტი" filetype:xlsx site:.ge +"dissertation" OR "სადისერტაციო" site:.ge filetype:pdf +``` +### Media & Social + +``` +site:civil.ge "investigation" +site:transparency.ge "report" +site:idfi.ge "public information" +site:interpressnews.ge +"tbilisi" OR "თბილისი" site:instagram.com +"sakartvelo" site:youtube.com +``` +### Camera & IoT Discovery + +``` +inurl:/view/index.shtml site:.ge +inurl:/live/cam.html site:.ge +intitle:"webcam" site:.ge +inurl:"view/viewer_index.shtml" country:ge +inurl:/mjpg/video.mjpg site:.ge +"Server: yawcam" site:.ge +``` +### Infrastructure & Network + +``` +site:.ge inurl:phpMyAdmin +site:.ge intitle:"Apache2 Ubuntu Default Page" +site:.ge intitle:"Welcome to nginx" +site:.ge "powered by WordPress" +site:.ge "Joomla" +"*.ge" site:crt.sh +"*.gov.ge" site:shodan.io +``` +### Advanced Combinations + +``` +# Find exposed databases +site:.ge filetype:sql "INSERT INTO" "VALUES" + +# Find configuration files +site:.ge filetype:xml "password" +site:.ge filetype:ini "password" +site:.ge filetype:conf "server" + +# Find exposed directories +intitle:"index of" "parent directory" site:.ge filetype:pdf + +# Find email lists +"@" filetype:csv site:.ge +"email" "phone" filetype:xlsx site:.ge + +# Find Georgian government reports with data +site:gov.ge "report" "2024" filetype:pdf +site:gov.ge "statistics" filetype:xlsx +``` +### Appendix A: Georgian Alphabet Quick Reference + +``` +### Georgian script (Mkhedruli) -- 33 letters: + + +ა ბ გ დ ე ვ ზ თ ი კ ლ მ ნ ო პ ჟ რ ს ტ უ ფ ქ ღ ყ შ ჩ ც ძ წ ჭ ხ ჯ ჰ + +### Transliteration: + +a b g d e v z t' i k l m n o p zh r s t u p' k' gh q' sh ch ts dz ts' ch' kh j h + +### Useful for searching Georgian names in Latin script when researching + +Georgian individuals in international databases. +``` +### Appendix B: OSINT Investigation Workflow for Georgia + +``` +STEP 1: IDENTIFY THE TARGET + - Name (Georgian + Latin spelling) + - Personal ID number (11 digits) + - Phone number (+995 XXX XXX XXX) + - Email address + - Date of birth + - Company name/ID + +### STEP 2: GOVERNMENT DATABASES + + [ ] NAPR (napr.gov.ge) -- property, business, civil registry + [ ] RS (rs.ge) -- tax status, business activity + [ ] Entrepreneur Registry -- company details, directors + [ ] ecd.court.ge -- court cases + [ ] cesko.ge -- voter registration + [ ] csb.gov.ge -- if public official, check asset declarations + +### STEP 3: SOCIAL MEDIA & ONLINE PRESENCE + + [ ] Facebook (Georgian name + Latin name) + [ ] Instagram + [ ] LinkedIn + [ ] Telegram (search by phone number) + [ ] Google search: "name" "+995" / "name" "tbilisi" + [ ] SS.GE (classifieds -- may have phone number, property listings) + +### STEP 4: FINANCIAL & BUSINESS + + [ ] enreg.reestri.gov.ge -- company ownership/directorship + [ ] tenders.procurement.gov.ge -- government contracts + [ ] nbg.gov.ge -- banking/AML sanctions + [ ] offshoreleaks.icij.org -- offshore connections + [ ] opensanctions.org -- sanctions cross-reference + +### STEP 5: BREACH & LEAK DATA + + [ ] haveibeenpwned.com -- email breaches + [ ] leakcheck.io -- email/phone breach search + [ ] dehashed.com -- comprehensive breach search + [ ] Known Georgian data leaks (4.9M citizen leak) + +### STEP 6: PHONE OSINT + + [ ] GetContact -- caller ID lookup + [ ] TrueCaller -- caller ID + [ ] WhatsApp profile check + [ ] Viber profile check + [ ] Telegram profile check + [ ] Google: "+995XXXXXXXXX" + +### STEP 7: PROPERTY & VEHICLES + + [ ] NAPR property registry + [ ] nsdi.gov.ge -- cadastral map lookup + [ ] SS.GE / MyHome.ge -- property listings + [ ] MyAuto.ge -- vehicle listings + [ ] eauction.ge -- seized property + +### STEP 8: ADVANCED + + [ ] Google dorking: site:.ge "target name" + [ ] Wayback Machine: web.archive.org/web/*/.ge + [ ] Shodan: country:GE + [ ] Certificate Transparency: crt.sh + [ ] OSINT Telegram bots (Eye of God, Quick OSINT) +``` +### Appendix C: Key URLs Quick Reference + +| Category | URL | +|---|---| +| E-Government Portal | [https://my.gov.ge](https://my.gov.ge) | +| Property Registry | [https://napr.gov.ge](https://napr.gov.ge) | +| Business Registry | [https://enreg.reestri.gov.ge](https://enreg.reestri.gov.ge) | +| Tax Authority | [https://rs.ge](https://rs.ge) | +| Court Decisions | [https://ecd.court.ge](https://ecd.court.ge) | +| Legislation | [https://matsne.gov.ge](https://matsne.gov.ge) | +| Elections | [https://cesko.ge](https://cesko.ge) | +| Statistics | [https://geostat.ge](https://geostat.ge) | +| Procurement | [https://tenders.procurement.gov.ge](https://tenders.procurement.gov.ge) | +| Open Data | [https://data.gov.ge](https://data.gov.ge) | +| Domain WHOIS | [https://nic.ge/en/domains/whois](https://nic.ge/en/domains/whois) | +| Geoportal | [https://nsdi.gov.ge](https://nsdi.gov.ge) | +| Education | [https://emis.ge](https://emis.ge) | +| Health | [https://ncdc.ge](https://ncdc.ge) | +| National Archives | [https://archive.gov.ge](https://archive.gov.ge) | +| National Library | [https://nplg.gov.ge](https://nplg.gov.ge) | +| Classifieds | [https://ss.ge](https://ss.ge) | +| Vehicles | [https://myauto.ge](https://myauto.ge) | +| Real Estate | [https://myhome.ge](https://myhome.ge) | +| Auctions | [https://eauction.ge](https://eauction.ge) | +| Jobs | [https://jobs.ge](https://jobs.ge) | +| Asset Declarations | [https://csb.gov.ge](https://csb.gov.ge) | +| Fact-Checking | [https://factcheck.ge](https://factcheck.ge) | +| Anti-Disinfo | [https://mythdetector.com](https://mythdetector.com) | +| Investigative | [https://transparency.ge](https://transparency.ge) | +| Open Data Procurement | [https://opendata.spa.ge](https://opendata.spa.ge) | + +--- +![OSINT Arsenal Logo](https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/assets/logo.jpg) +🔍 AWESOME OSINT ARSENAL +The Ultimate Open-Source Intelligence Toolkit + +--- + + + +
+ +--- +## 🤝 Contributing & Issues + +Found a dead link? Tool that should be here? Just open an issue or PR. + +- **Found something broken** → [open an issue](https://github.com/rawfilejson/awesome-osint-arsenal/issues/new) +- **Want to add a tool** → fork, add it to the right section in alphabetical order, PR +- **No time to PR?** → leave the tool name + URL in an issue, I'll add it + +Verify install commands on a fresh Kali VM before submitting. --- @@ -1572,3 +3466,84 @@ This repository is provided for **educational and authorized security research p
+ + + + +new.md +
+ +OSINT Arsenal Logo + +
+ +# 🔍 AWESOME OSINT ARSENAL + +### The Ultimate Open-Source Intelligence + Offensive/Defensive Security Toolkit + +
+ +[![Tools](https://img.shields.io/badge/Tools-658+-FF4444?style=for-the-badge&logo=target&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![Categories](https://img.shields.io/badge/Categories-26-0066CC?style=for-the-badge&logo=buffer&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![Version](https://img.shields.io/badge/Version-3.4-00CC66?style=for-the-badge&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![Updated](https://img.shields.io/badge/Updated-2026--05--09-FF8800?style=for-the-badge&logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal) +[![License](https://img.shields.io/badge/License-MIT-FFCC00?style=for-the-badge&logoColor=black)](LICENSE) +[![Stars](https://img.shields.io/github/stars/rawfilejson/awesome-osint-arsenal?style=for-the-badge&color=gold&logo=github)](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers) + +
+ +> **658 verified tools · 26 categories · OSINT + Red Team + Blue Team + Forensics + Hardware + Training** +> +> *The most comprehensive OSINT and offensive/defensive security toolkit on the internet — every tool with installation instructions or verified link.* + +Buy Me a Coffee + +
+ +--- + +> [!IMPORTANT] +> ## ⚠️ Maintainer's note — please read before forking +> +> This repository contains **658 tools across 26 categories**. That's a *lot* to keep current — links rot, repos get archived, install commands change, new tools appear weekly. +> +> **Maintaining this alone is hard.** If nobody helps, parts of this list will go stale faster than I can fix them. +> +> **How you can help:** +> - ⭐ Star the repo (signal boost = more eyes = more contributors) +> - 🐛 Open an issue when you spot a dead link or broken install command +> - 🔁 Submit a PR — see [CONTRIBUTING.md](CONTRIBUTING.md) for the schema +> - ☕ [Buy me a coffee](https://www.buymeacoffee.com/rawfilejson) so I can spend more weekends on this +> - 📢 Share it — every star/fork helps justify keeping this maintained +> +> If you spot something wrong: **don't just complain — open an issue or PR. That's how this stays useful.** + +--- + +> [!WARNING] +> **DISCLAIMER:** This repository is for **educational and authorized security research only**. +> Always obtain written permission before testing systems you do not own. +> The authors are **not responsible** for any misuse of the tools or techniques listed here. +> See the full [Legal Disclaimer](#legal-disclaimer) at the bottom. + +--- + +--- + +
+ +### ⭐ Star this repo if you found it useful — it really helps with motivation to keep this maintained. + +
+ +Buy Me a Coffee + +
+ +[![GitHub stars](https://img.shields.io/github/stars/rawfilejson/awesome-osint-arsenal?style=social)](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers) +[![GitHub forks](https://img.shields.io/github/forks/rawfilejson/awesome-osint-arsenal?style=social)](https://github.com/rawfilejson/awesome-osint-arsenal/network/members) + +*Built for the OSINT and security research community.* +*Knowledge is power — use it responsibly.* + +
diff --git a/blueteam.sh b/blueteam.sh new file mode 100644 index 0000000..699531d --- /dev/null +++ b/blueteam.sh @@ -0,0 +1,149 @@ +#!/usr/bin/env bash +# =================================================================== +# 🛡️ Blue team / defensive + threat intel +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: 🛰️ Threat Intel Platforms (2 tools)" +install_docker opencti/platform OpenCTI # OpenCTI +install_git https://github.com/yeti-platform/yeti.git yeti # Yeti + +echo; say "Installing: 🛡️ Blue Team & Defensive Security (20 tools)" +install_git https://github.com/redcanaryco/atomic-red-team.git atomic-red-team # Atomic Red Team +install_git https://github.com/WithSecureLabs/chainsaw.git chainsaw # Chainsaw +install_docker thehiveproject/cortex:latest 'Cortex (TheHive)' # Cortex (TheHive) +install_docker docker.elastic.co/elasticsearch/elasticsearch:latest 'Elastic Stack (ELK)' # Elastic Stack (ELK) +install_git https://github.com/falcosecurity/falco.git falco # Falco +install_docker graylog/graylog:latest Graylog # Graylog +install_git https://github.com/Yamato-Security/hayabusa.git hayabusa # Hayabusa +install_git https://github.com/Neo23x0/Loki.git Loki # Loki +install_git https://github.com/mitre/caldera.git caldera # MITRE CALDERA +pkg_install osquery # osquery +install_git https://github.com/activecm/rita.git rita # RITA +install_git https://github.com/SigmaHQ/sigma.git sigma # Sigma +install_pip sigma-cli # sigma-cli +pkg_install snort # Snort +pkg_install suricata # Suricata +install_docker strangebee/thehive:latest TheHive # TheHive +install_git https://github.com/aquasecurity/tracee.git tracee # Tracee +install_git https://github.com/Velocidex/velociraptor.git velociraptor # Velociraptor +install_git https://github.com/wazuh/wazuh.git wazuh # Wazuh +pkg_install zeek # Zeek (Bro) + +print_summary diff --git a/extras.sh b/extras.sh new file mode 100644 index 0000000..1fdcc1c --- /dev/null +++ b/extras.sh @@ -0,0 +1,132 @@ +#!/usr/bin/env bash +# =================================================================== +# 🔧 Misc / catch-all +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: 📚 Learning Resources (2 tools)" +install_git https://github.com/cipher387/linux-for-OSINT-21-days.git linux-for-OSINT-21-days # Linux for OSINT (cipher387) +install_git https://github.com/cipher387/python-for-OSINT-21-days.git python-for-OSINT-21-days # Python for OSINT (cipher387) + +echo; say "Installing: 🔧 Miscellaneous / Niche Tools (3 tools)" +install_git https://github.com/RedSiege/EyeWitness.git EyeWitness # EyeWitness +install_pip opencv-python # OpenCV +install_pip trufflehog # trufflehog + +print_summary diff --git a/forensics.sh b/forensics.sh new file mode 100644 index 0000000..1d6aa7f --- /dev/null +++ b/forensics.sh @@ -0,0 +1,136 @@ +#!/usr/bin/env bash +# =================================================================== +# 🔬 Digital forensics & RE +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: 🔬 Digital Forensics & Reverse Engineering (11 tools)" +install_git https://github.com/rizinorg/cutter.git cutter # Cutter +install_pip dissect # Dissect +install_git https://github.com/NationalSecurityAgency/ghidra.git ghidra # Ghidra +pkg_install testdisk # PhotoRec +install_pip plaso # Plaso (log2timeline) +pkg_install radare2 # radare2 +install_git https://github.com/keydet89/RegRipper3.0.git RegRipper3.0 # RegRipper +install_pip rekall # Rekall +install_git https://github.com/rizinorg/rizin.git rizin # rizin +pkg_install sleuthkit # The Sleuth Kit +install_pip volatility3 # Volatility 3 + +print_summary diff --git a/hardware.sh b/hardware.sh new file mode 100644 index 0000000..d73453d --- /dev/null +++ b/hardware.sh @@ -0,0 +1,135 @@ +#!/usr/bin/env bash +# =================================================================== +# 🔌 Hardware hacking & SDR +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: 🔌 Hardware Hacking & SDR (10 tools)" +install_git https://github.com/firmadyne/firmadyne.git firmadyne # Firmadyne +install_git https://github.com/craigz28/firmwalker.git firmwalker # firmwalker +pkg_install flashrom # flashrom +pkg_install gnuradio # GNU Radio +pkg_install gqrx-sdr # Gqrx SDR +pkg_install hackrf # HackRF One +pkg_install openocd # OpenOCD +install_git https://github.com/RfidResearchGroup/proxmark3.git proxmark3 # Proxmark3 +pkg_install rtl-sdr # RTL-SDR +pkg_install ubertooth # Ubertooth One + +print_summary diff --git a/install.sh b/install.sh new file mode 100644 index 0000000..4225eb7 --- /dev/null +++ b/install.sh @@ -0,0 +1,42 @@ +#!/usr/bin/env bash +# =================================================================== +# Awesome OSINT Arsenal — install everything +# Runs each category installer in order. +# Best support: Kali / Debian / Ubuntu / Parrot. +# Partial: Arch / Manjaro / Fedora / RHEL. +# For Android, use: bash termux.sh +# =================================================================== +set -uo pipefail +cd "$(dirname "$0")" + +if [ "$EUID" -ne 0 ]; then + echo "Run me as root: sudo bash install.sh" + exit 1 +fi + +INSTALLERS=( + "osint.sh" + "redteam.sh" + "blueteam.sh" + "forensics.sh" + "hardware.sh" + "labs.sh" + "extras.sh" +) + +LOGFILE="$HOME/osint-install-errors.log" +: > "$LOGFILE" + +for inst in "${INSTALLERS[@]}"; do + echo + echo "===========================================" + echo " Running: $inst" + echo "===========================================" + bash "$inst" +done + +echo +echo "===========================================" +echo " ALL DONE" +echo " Failures (if any) logged to: $LOGFILE" +echo "===========================================" diff --git a/install_osint_arsenal.sh b/install_osint_arsenal.sh deleted file mode 100644 index 572b503..0000000 --- a/install_osint_arsenal.sh +++ /dev/null @@ -1,422 +0,0 @@ -#!/bin/bash -# ============================================================ -# AWESOME OSINT ARSENAL - Kali Linux Full Installer -# Source: github.com/rawfilejson/awesome-osint-arsenal -# For authorized security research & OSINT only -# ============================================================ - -RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m' -CYAN='\033[0;36m'; NC='\033[0m'; BOLD='\033[1m' - -ok() { echo -e "${GREEN}[✔]${NC} $1"; } -warn() { echo -e "${YELLOW}[!]${NC} $1"; } -info() { echo -e "${CYAN}[*]${NC} $1"; } -fail() { echo -e "${RED}[✘]${NC} $1"; } - -TOOLS_DIR="/opt/osint-arsenal" -ERRORS=() -LOG_FILE="/var/log/osint-arsenal-install.log" -START_TIME=$(date +%s) - -banner() { -cat << 'EOF' - ___ ____ ___ _ _ _____ _ ____ ____ _____ - / _ \/ ___|_ _| \ | |_ _| / \ | _ \/ ___|| ____| -| | | \___ \| || \| | | | / _ \ | |_) \___ \| _| -| |_| |___) | || |\ | | | / ___ \| _ < ___) | |___ - \___/|____/___|_| \_| |_| /_/ \_\_| \_\____/|_____| - - Awesome OSINT Arsenal - Kali Linux Installer - For authorized security research only. -EOF -} - -check_root() { - if [[ $EUID -ne 0 ]]; then - warn "Not running as root. Some installs may fail. Re-run with: sudo bash $0" - fi -} - -run() { - # run "description" command... - local desc="$1"; shift - if "$@" &>/dev/null; then - ok "$desc" - else - fail "$desc" - ERRORS+=("$desc") - fi -} - -# ── 1. SYSTEM UPDATE ────────────────────────────────────── -step_apt() { - info "── STEP 1: System update & apt packages ──" - apt-get update -y &>/dev/null && apt-get upgrade -y &>/dev/null - ok "System updated" - - APT_TOOLS=( - # Core utilities - git curl wget python3 python3-pip golang-go ruby-full build-essential - # Network / scanning - nmap masscan wireshark tcpdump netcat-openbsd - # Web recon - nikto dirb gobuster whatweb wfuzz feroxbuster - # Password & brute force - hydra john hashcat medusa cewl crunch - # Wireless - aircrack-ng kismet wifite reaver hcxtools fern-wifi-cracker - bettercap ettercap-common - # OSINT pre-installed - theharvester recon-ng maltego spiderfoot set - # Web app - sqlmap burpsuite - # Vuln scanners - openvas - # Forensics - binwalk foremost bulk-extractor scalpel - # Misc - macchanger libimage-exiftool-perl apktool jadx - dnsrecon - ) - - for pkg in "${APT_TOOLS[@]}"; do - if apt-get install -y "$pkg" &>/dev/null; then - ok "apt: $pkg" - else - warn "apt: $pkg (skipped/unavailable)" - fi - done -} - -# ── 2. PYTHON (pip) TOOLS ───────────────────────────────── -step_pip() { - info "── STEP 2: Python pip tools ──" - pip3 install --upgrade --break-system-packages pip &>/dev/null - - PIP_TOOLS=( - # Username / social OSINT - sherlock-project maigret blackbird-osint nexfil - social-analyzer socid-extractor osrframework - socialscan holehe gitrecon - # Email OSINT - h8mail theHarvester mailto-analyzer - # Phone OSINT - phoneinfoga ignorant - # DNS / domain - dnsrecon sublist3r - # Social media scrapers - instaloader snscrape twayback toutatis - telepathy telethon - # Forensics / metadata - volatility3 metagoofil - # AI / face - deepface face_recognition opencv-python - # Web / fuzzing - wfuzz paramspider - # Misc - spiderfoot recon-ng - # Mobile - frida-tools objection - ) - - for pkg in "${PIP_TOOLS[@]}"; do - if pip3 install --break-system-packages "$pkg" &>/dev/null; then - ok "pip: $pkg" - else - warn "pip: $pkg (skipped/failed)" - fi - done -} - -# ── 3. GO TOOLS ─────────────────────────────────────────── -step_go() { - info "── STEP 3: Go-based tools ──" - export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin:/root/go/bin - export GOPATH=$HOME/go - - GO_TOOLS=( - "github.com/owasp-amass/amass/v4/...@master" - "github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest" - "github.com/projectdiscovery/httpx/cmd/httpx@latest" - "github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest" - "github.com/projectdiscovery/katana/cmd/katana@latest" - "github.com/OJ/gobuster/v3@latest" - "github.com/s-rah/onionscan@latest" - "github.com/kgretzky/evilginx2@latest" - "github.com/drk1wi/Modlishka@latest" - ) - - for pkg in "${GO_TOOLS[@]}"; do - name=$(basename "${pkg%%@*}") - if go install "$pkg" &>/dev/null; then - ok "go: $name" - else - warn "go: $name (failed)" - fi - done -} - -# ── 4. RUBY GEMS ────────────────────────────────────────── -step_gems() { - info "── STEP 4: Ruby gems ──" - run "gem: wpscan" gem install wpscan -} - -# ── 5. GIT CLONE TOOLS ──────────────────────────────────── -step_git() { - info "── STEP 5: Git clone tools → $TOOLS_DIR ──" - mkdir -p "$TOOLS_DIR" - cd "$TOOLS_DIR" || exit 1 - - declare -A REPOS=( - # Username / social - ["userrecon"]="https://github.com/wishihab/userrecon.git" - # Email - ["EmailAnalyzer"]="https://github.com/keraattin/EmailAnalyzer.git" - ["MailHeaderDetective"]="https://github.com/akajhon/MailHeaderDetective.git" - ["WhatMail"]="https://github.com/z0m31en7/WhatMail.git" - ["Infoga"]="https://github.com/m4ll0k/Infoga.git" - # Domain / IP - ["IPGeoLocation"]="https://github.com/maldevel/IPGeoLocation.git" - # Image / forensics - ["Depix"]="https://github.com/beurtschipper/Depix.git" - # Social media - ["Osintgram"]="https://github.com/Datalux/Osintgram.git" - ["TeleGram-OSINTer"]="https://github.com/Alb-310/TeleGram-OSINTer.git" - # Credential / password - ["LaZagne"]="https://github.com/AlessandroZ/LaZagne.git" - ["Responder"]="https://github.com/lgandx/Responder.git" - # Dark web - ["OSINT-SPY"]="https://github.com/SharadKumar97/OSINT-SPY.git" - ["pwndb"]="https://github.com/coj337/pwndb.git" - # Privacy / anon - ["kali-anonsurf"]="https://github.com/Und3rf10w/kali-anonsurf.git" - ["Anon-SMS"]="https://github.com/HACK3RY2J/Anon-SMS.git" - # Web app scanning - ["LinkFinder"]="https://github.com/GerbenJavado/LinkFinder.git" - ["Photon"]="https://github.com/s0md3v/Photon.git" - ["URLCADIZ"]="https://github.com/PerezMascato/URLCADIZ.git" - ["webhack"]="https://github.com/yan4ikyt/webhack.git" - # Phishing / social engineering - ["zphisher"]="https://github.com/htr-tech/zphisher.git" - ["nexphisher"]="https://github.com/htr-tech/nexphisher.git" - ["Storm-Breaker"]="https://github.com/ultrasecurity/Storm-Breaker.git" - ["shorturl"]="https://github.com/htr-tech/shorturl.git" - ["SocialFish"]="https://github.com/UndeadSec/SocialFish.git" - ["AdvPhishing"]="https://github.com/Ignitetch/AdvPhishing.git" - # Vuln / exploitation - ["commix"]="https://github.com/commixproject/commix.git" - # Wireless - ["fluxion"]="https://github.com/FluxionNetwork/fluxion.git" - ["bluemaho"]="https://github.com/pysec/bluemaho.git" - # Mobile - ["PhoneSploit"]="https://github.com/aerosol-can/PhoneSploit.git" - ["AhMyth-Android-RAT"]="https://github.com/AhMyth/AhMyth-Android-RAT.git" - ["msfpc"]="https://github.com/g0tmi1k/msfpc.git" - # Financial OSINT - ["Orbit"]="https://github.com/s0md3v/Orbit.git" - # All-in-one frameworks - ["fsociety"]="https://github.com/Manisso/fsociety.git" - ["hackingtool"]="https://github.com/Z4nzu/hackingtool.git" - ["lscript"]="https://github.com/arismelachroinos/lscript.git" - # Wordlists - ["SecLists"]="https://github.com/danielmiessler/SecLists.git" - ["cupp"]="https://github.com/Mebus/cupp.git" - # Google dorking - ["pagodo"]="https://github.com/opsdisk/pagodo.git" - ["GooFuzz"]="https://github.com/m3n0sd0n4ld/GooFuzz.git" - ["dorkScanner"]="https://github.com/madhavmehndiratta/dorkScanner.git" - # ReconAIzer (Burp extension) - ["ReconAIzer"]="https://github.com/hisxo/ReconAIzer.git" - ) - - for name in "${!REPOS[@]}"; do - url="${REPOS[$name]}" - if [[ -d "$name" ]]; then - warn "git: $name already exists, pulling latest" - git -C "$name" pull &>/dev/null && ok "git: $name (updated)" || warn "git: $name (pull failed)" - else - if git clone --depth=1 "$url" "$name" &>/dev/null; then - ok "git: $name" - else - fail "git: $name" - ERRORS+=("git clone $name") - fi - fi - done - - # Install pip requirements where available - info "Installing per-repo pip requirements..." - for dir in IPGeoLocation Photon LinkFinder Osintgram OSINT-SPY webhack commix; do - if [[ -f "$TOOLS_DIR/$dir/requirements.txt" ]]; then - pip3 install --break-system-packages -r "$TOOLS_DIR/$dir/requirements.txt" &>/dev/null \ - && ok "requirements: $dir" || warn "requirements: $dir (partial)" - fi - done -} - -# ── 6. SPECIAL INSTALLS ─────────────────────────────────── -step_special() { - info "── STEP 6: Special installs ──" - - # Metasploit (if not present) - if ! command -v msfconsole &>/dev/null; then - info "Installing Metasploit Framework..." - curl -s https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb \ - | sed 's/apt-get/apt-get -y/g' | bash &>/dev/null \ - && ok "Metasploit installed" || warn "Metasploit (failed - install manually)" - else - ok "Metasploit already installed" - fi - - # PhoneInfoga binary - if ! command -v phoneinfoga &>/dev/null; then - info "Installing PhoneInfoga binary..." - curl -sSL https://raw.githubusercontent.com/sundowndev/phoneinfoga/master/support/scripts/install \ - | bash &>/dev/null && ok "phoneinfoga binary" || warn "phoneinfoga binary (failed)" - else - ok "phoneinfoga already installed" - fi - - # AnonSurf - if [[ -d "$TOOLS_DIR/kali-anonsurf" ]]; then - cd "$TOOLS_DIR/kali-anonsurf" && bash installer.sh &>/dev/null \ - && ok "anonsurf installed" || warn "anonsurf (manual install needed)" - fi - - # Nuclei templates - if command -v nuclei &>/dev/null; then - nuclei -update-templates &>/dev/null && ok "nuclei templates updated" - fi -} - -# ── 7. ADDITIONAL TOOLS (suggested extras) ──────────────── -step_extras() { - info "── STEP 7: Extra tools not in original list ──" - - # These complement the OSINT arsenal nicely - EXTRA_PIP=( - trufflehog # Git secret scanning - git-dumper # Dump exposed .git repos - waybackpy # Wayback Machine API client - dnstwist # Domain phishing detection - shodan # Shodan CLI - censys # Censys CLI - xeuledoc # Google Docs OSINT - redditsfinder # Find Reddit accounts by email - linkedin2username # Generate username lists from LinkedIn - ) - - EXTRA_APT=( - tor # Tor daemon (for dark web tools) - proxychains4 # Route traffic through proxies/tor - steghide # Steganography analysis - stegseek # Fast steghide cracker - exiv2 # Alternative metadata tool - jq # JSON parsing (useful for API tools) - whois # WHOIS lookups - dnsutils # dig, nslookup - traceroute # Network path tracing - beef-xss # Browser Exploitation Framework - ) - - EXTRA_GIT=( - "EyeWitness|https://github.com/RedSiege/EyeWitness.git" # Web screenshots - "gitrob|https://github.com/michenriksen/gitrob.git" # GitHub secret scanner - "GitLeaks|https://github.com/gitleaks/gitleaks.git" # Git secret leaks - "theHarvester|https://github.com/laramies/theHarvester.git" # Email/domain (latest) - "crosslinked|https://github.com/m8sec/CrossLinked.git" # LinkedIn name scraper - "recon-ng|https://github.com/lanmaster53/recon-ng.git" # Latest recon-ng - "spiderfoot|https://github.com/smicallef/spiderfoot.git" # Latest SpiderFoot - "osmedeus|https://github.com/j3ssie/osmedeus.git" # Full recon workflow - "finalrecon|https://github.com/thewhiteh4t/FinalRecon.git" # All-in-one web recon - "URLextractor|https://github.com/eschultze/URLextractor.git" # URL extraction - "phoneinfoga-web|https://github.com/sundowndev/phoneinfoga.git" # PhoneInfoga web UI - ) - - for pkg in "${EXTRA_APT[@]%%#*}"; do - pkg=$(echo "$pkg" | xargs) - apt-get install -y "$pkg" &>/dev/null && ok "extra apt: $pkg" || warn "extra apt: $pkg" - done - - for pkg in "${EXTRA_PIP[@]%%#*}"; do - pkg=$(echo "$pkg" | xargs) - pip3 install --break-system-packages "$pkg" &>/dev/null && ok "extra pip: $pkg" || warn "extra pip: $pkg" - done - - cd "$TOOLS_DIR" || exit 1 - for entry in "${EXTRA_GIT[@]}"; do - name="${entry%%|*}" - url="${entry##*|}" - if [[ ! -d "$name" ]]; then - git clone --depth=1 "$url" "$name" &>/dev/null && ok "extra git: $name" || warn "extra git: $name" - else - ok "extra git: $name (already exists)" - fi - done - - # Shodan CLI setup hint - if command -v shodan &>/dev/null; then - warn "Remember to init Shodan: shodan init YOUR_API_KEY" - fi - - # Tor config for dark web tools - if command -v tor &>/dev/null; then - systemctl enable tor &>/dev/null - systemctl start tor &>/dev/null - ok "Tor service enabled (SOCKS proxy on 127.0.0.1:9050)" - fi -} - -# ── SUMMARY ─────────────────────────────────────────────── -summary() { - local END_TIME=$(date +%s) - local DURATION=$(( END_TIME - START_TIME )) - local MINS=$(( DURATION / 60 )) - local SECS=$(( DURATION % 60 )) - echo "" - echo -e "${BOLD}════════════════════════════════════════${NC}" - echo -e "${GREEN} Install complete!${NC}" - echo -e " Duration: ${CYAN}${MINS}m ${SECS}s${NC}" - echo -e " Log file: ${CYAN}$LOG_FILE${NC}" - echo -e " Tools directory: ${CYAN}$TOOLS_DIR${NC}" - echo "" - if [[ ${#ERRORS[@]} -gt 0 ]]; then - echo -e "${YELLOW} Failed installs (${#ERRORS[@]}):${NC}" - for e in "${ERRORS[@]}"; do echo " - $e"; done - else - echo -e "${GREEN} No errors!${NC}" - fi - echo "" - echo -e "${YELLOW} Quick-start commands:${NC}" - echo " sherlock USERNAME" - echo " maigret USERNAME" - echo " theHarvester -d domain.com -b all" - echo " recon-ng" - echo " spiderfoot -l 127.0.0.1:5001" - echo " nuclei -u https://target.com" - echo " subfinder -d domain.com" - echo " amass enum -d domain.com" - echo -e "${BOLD}════════════════════════════════════════${NC}" -} - -# ── MAIN ────────────────────────────────────────────────── -banner -exec > >(tee -a "$LOG_FILE") 2>&1 -check_root - -echo "" -echo -e "${BOLD}This will install 100+ OSINT & security tools.${NC}" -echo -e "${YELLOW}Use only on systems you own or have authorization to test.${NC}" -echo "" -read -rp "Continue? [y/N]: " confirm -[[ "$confirm" =~ ^[Yy]$ ]] || { echo "Aborted."; exit 0; } - -step_apt -step_pip -step_go -step_gems -step_git -step_special -step_extras -summary diff --git a/labs.sh b/labs.sh new file mode 100644 index 0000000..e401484 --- /dev/null +++ b/labs.sh @@ -0,0 +1,129 @@ +#!/usr/bin/env bash +# =================================================================== +# 🎓 Training / vulnerable apps +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: 🎓 Training, Labs & CTF (4 tools)" +install_git https://github.com/digininja/DVWA.git DVWA # DVWA +install_docker bkimminich/juice-shop 'OWASP Juice Shop' # OWASP Juice Shop +install_docker webgoat/webgoat 'OWASP WebGoat' # OWASP WebGoat +install_git https://github.com/practisec/pwnedhub.git pwnedhub # PwnedHub + +print_summary diff --git a/osint.sh b/osint.sh new file mode 100644 index 0000000..98f150f --- /dev/null +++ b/osint.sh @@ -0,0 +1,360 @@ +#!/usr/bin/env bash +# =================================================================== +# 🔍 OSINT toolkit +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: 👤 Username & Social Media OSINT (33 tools)" +install_git https://github.com/ArthurHeitmann/arctic_shift.git arctic_shift # Arctic Shift +install_pip blackbird-osint # Blackbird +install_git https://github.com/misiektoja/github_monitor.git github_monitor # github_monitor +install_pip gitrecon # Gitrecon +install_go github.com/ibnaleem/gosearch@latest gosearch # GoSearch +install_pip holehe # Holehe +install_git https://github.com/misiektoja/instagram_monitor.git instagram_monitor # instagram_monitor +install_pip instaloader # Instaloader +install_go github.com/tdh8316/investigo@latest investigo # Investigo +install_git https://github.com/l4rm4nd/LinkedInDumper.git LinkedInDumper # LinkedInDumper +install_pip maigret # Maigret +install_pip nexfil # NExfil +install_git https://github.com/Datalux/Osintgram.git Osintgram # Osintgram +install_pip osrframework # OSRFramework +install_git https://github.com/seekr-osint/seekr.git seekr # Seekr +install_pip sherlock-project # Sherlock +install_pip snoop # Snoop +install_pip snscrape # snscrape +install_pip social-analyzer # Social Analyzer +install_pip socialscan # socialscan +install_pip socid-extractor # Socid-extractor +install_git https://github.com/tejado/telegram-nearby-map.git telegram-nearby-map # Telegram Nearby Map +install_git https://github.com/Alb-310/TeleGram-OSINTer.git TeleGram-OSINTer # TeleGram-OSINTer +install_pip telepathy # Telepathy +install_git https://github.com/sockysec/Telerecon.git Telerecon # Telerecon +install_pip telethon # Telethon +install_git https://github.com/eth0izzle/the-endorser.git the-endorser # the-endorser +install_git https://github.com/drego85/tosint.git tosint # TOsint +install_pip toutatis # Toutatis +install_pip twayback # Twayback +install_pip twint # Twint +install_git https://github.com/kaifcodec/user-scanner.git user-scanner # user-scanner +install_git https://github.com/wishihab/userrecon.git userrecon # UserRecon + +echo; say "Installing: 📧 Email & Phone Intelligence (13 tools)" +install_git https://github.com/keraattin/EmailAnalyzer.git EmailAnalyzer # EmailAnalyzer +install_git https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python.git EmailHeader-Analyzer-CLI-Python # EmailHeader-Analyzer +install_pip ghunt # GHunt +install_pip h8mail # h8mail +install_pip ignorant # Ignorant +install_git https://github.com/m4ll0k/Infoga.git Infoga # Infoga +install_git https://github.com/akajhon/MailHeaderDetective.git MailHeaderDetective # MailHeaderDetective +install_pip mailto-analyzer # mailtoanalyzer +install_pip phoneinfoga # PhoneInfoga +install_git https://github.com/aerosol-can/PhoneSploit.git PhoneSploit # PhoneSploit +install_git https://github.com/nettitude/Prowl.git Prowl # Prowl +install_pip theHarvester # theHarvester +install_git https://github.com/z0m31en7/WhatMail.git WhatMail # WhatMail + +echo; say "Installing: 🌐 Domain & IP / Network Recon (68 tools)" +pkg_install aircrack-ng # Aircrack-ng +install_pip py-altdns # altdns +install_go github.com/owasp-amass/amass/v4/...@master ... # Amass +install_go github.com/tomnomnom/anew@latest anew # anew +install_go github.com/michenriksen/aquatone@latest aquatone # Aquatone +install_go github.com/tomnomnom/assetfinder@latest assetfinder # assetfinder +install_pip git # AutoRecon +install_git https://github.com/pry0cc/axiom.git axiom # Axiom +install_pip bbot # BBOT +pkg_install bettercap # Bettercap +install_git https://github.com/commixproject/commix.git commix # Commix +pkg_install dirb # Dirb +install_pip dirsearch # dirsearch +install_pip dnsrecon # dnsrecon +install_pip dnstwist # dnstwist +pkg_install ettercap-common # Ettercap +pkg_install fern-wifi-cracker # Fern Wifi Cracker +pkg_install feroxbuster # Feroxbuster +install_go github.com/ffuf/ffuf/v2@latest v2 # ffuf +install_git https://github.com/Findomain/Findomain.git Findomain # Findomain +install_git https://github.com/FluxionNetwork/fluxion.git fluxion # Fluxion +install_go github.com/lc/gau/v2/cmd/gau@latest gau # gau (getallurls) +install_go github.com/tomnomnom/gf@latest gf # gf +install_go github.com/OJ/gobuster/v3@latest v3 # Gobuster +install_git https://github.com/jseidl/GoldenEye.git GoldenEye # GoldenEye +install_go github.com/jaeles-project/gospider@latest gospider # GoSpider +install_go github.com/sensepost/gowitness@latest gowitness # gowitness +install_go github.com/hakluke/hakrawler@latest hakrawler # hakrawler +pkg_install hcxtools # hcxtools +install_go github.com/tomnomnom/httprobe@latest httprobe # httprobe +install_go github.com/projectdiscovery/httpx/cmd/httpx@latest httpx # HTTPx +install_git https://github.com/codingo/Interlace.git Interlace # Interlace +install_git https://github.com/maldevel/IPGeoLocation.git IPGeoLocation # IPGeoLocation +install_git https://github.com/Threezh1/JSFinder.git JSFinder # JSFinder +install_go github.com/projectdiscovery/katana/cmd/katana@latest katana # Katana +pkg_install kismet # Kismet +install_git https://github.com/guelfoweb/knock.git knock # knock +install_pip knock-subdomains # Knockpy +install_git https://github.com/GerbenJavado/LinkFinder.git LinkFinder # LinkFinder +pkg_install masscan # Masscan +install_git https://github.com/blechschmidt/massdns.git massdns # massdns +install_go github.com/tomnomnom/meg@latest meg # meg +pkg_install metasploit-framework # Metasploit +install_go github.com/projectdiscovery/naabu/v2/cmd/naabu@latest naabu # Naabu +pkg_install netcat-openbsd # Netcat +pkg_install nikto # Nikto +pkg_install nmap # Nmap +install_go github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest nuclei # Nuclei +pkg_install openvas # OpenVAS +install_pip paramspider # ParamSpider +install_git https://github.com/s0md3v/Photon.git Photon # Photon +pkg_install reaver # Reaver +install_git https://github.com/six2dez/reconftw.git reconftw # reconFTW +install_git https://github.com/RustScan/RustScan.git RustScan # RustScan +install_pip shodan # Shodan +install_go github.com/s0md3v/smap/cmd/smap@latest smap # smap +install_git https://github.com/1N3/Sn1per.git Sn1per # Sn1per +pkg_install sqlmap # SQLMap +install_go github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest subfinder # Subfinder +install_pip sublist3r # Sublist3r +pkg_install tcpdump # tcpdump +install_git https://github.com/urbanadventurer/urlcrazy.git urlcrazy # URLCrazy +install_go github.com/tomnomnom/waybackurls@latest waybackurls # waybackurls +install_git https://github.com/yan4ikyt/webhack.git webhack # WebHack +install_pip wfuzz # Wfuzz +pkg_install whatweb # Whatweb +pkg_install wifite # Wifite +pkg_install wireshark # Wireshark + +echo; say "Installing: 🖼️ Image & Facial Recognition (6 tools)" +install_pip deepface # DeepFace +install_git https://github.com/beurtschipper/Depix.git Depix # Depix +pkg_install libimage-exiftool-perl # ExifTool +install_pip face_recognition # facerecognition +install_git https://github.com/ElevenPaths/FOCA.git FOCA # FOCA +install_git https://github.com/GuidoBartoli/sherloq.git sherloq # Sherloq + +echo; say "Installing: 🕶️ Dark Web & Tor Intelligence (5 tools)" +install_git https://github.com/itsmehacker/DarkScrape.git DarkScrape # DarkScrape +install_go github.com/s-rah/onionscan@latest onionscan # OnionScan +install_pip onionsearch # OnionSearch +install_git https://github.com/SharadKumar97/OSINT-SPY.git OSINT-SPY # OSINT-SPY +install_git https://github.com/githacktools/TorghostNG.git TorghostNG # TorghostNG + +echo; say "Installing: 💥 Data Breach & Leak Detection (11 tools)" +pkg_install cewl # CeWL +pkg_install crunch # Crunch +install_git https://github.com/Mebus/cupp.git cupp # Cupp +pkg_install hashcat # Hashcat +pkg_install hydra # Hydra +pkg_install john # John the Ripper +install_git https://github.com/AlessandroZ/LaZagne.git LaZagne # LaZagne +pkg_install medusa # Medusa +install_git https://github.com/gentilkiwi/mimikatz.git mimikatz # Mimikatz +install_git https://github.com/lgandx/Responder.git Responder # Responder +install_git https://github.com/danielmiessler/SecLists.git SecLists # SecLists + +echo; say "Installing: 🏢 Company & Business Intel (2 tools)" +install_pip opencorporates # opencorporates-cli +install_git https://github.com/s0md3v/Orbit.git Orbit # Orbit + +echo; say "Installing: ₿ Cryptocurrency & Blockchain (1 tools)" +install_pip etherscan-python # etherscan-py + +echo; say "Installing: 🦠 Malware & Threat Intelligence (2 tools)" +install_git https://github.com/MISP/MISP.git MISP # MISP +pkg_install yara # YARA + +echo; say "Installing: 🔍 Search & Dorking Tools (6 tools)" +install_pip censys # Censys CLI +install_git https://github.com/jgor/dork-cli.git dork-cli # dork-cli +install_git https://github.com/m3n0sd0n4ld/GooFuzz.git GooFuzz # GooFuzz +install_git https://github.com/opsdisk/pagodo.git pagodo # Pagodo +install_pip shodan # Shodan CLI +install_go github.com/projectdiscovery/uncover/cmd/uncover@latest uncover # uncover + +echo; say "Installing: 📄 Document & Metadata Analysis (10 tools)" +pkg_install autopsy # Autopsy +pkg_install binwalk # Binwalk +pkg_install bulk-extractor # Bulk Extractor +pkg_install foremost # Foremost +install_go github.com/tillson/git-hound@latest git-hound # git-hound +install_go github.com/gitleaks/gitleaks/v8@latest v8 # gitleaks +install_pip metagoofil # Metagoofil +pkg_install scalpel # Scalpel +install_pip volatility3 # Volatility +install_pip xeuledoc # XeuleDoc + +echo; say "Installing: 🧑 People & Identity OSINT (16 tools)" +install_git https://github.com/Ignitetch/AdvPhishing.git AdvPhishing # AdvPhishing +install_git https://github.com/An0nUD4Y/blackeye.git blackeye # BlackEye +install_pip crosslinked # CrossLinked +install_git https://github.com/daprofiler/DaProfiler.git DaProfiler # DaProfiler +install_go github.com/kgretzky/evilginx2@latest evilginx2 # Evilginx2 +install_git https://github.com/initstring/linkedin2username.git linkedin2username # linkedin2username +install_go github.com/drk1wi/Modlishka@latest Modlishka # Modlishka +install_git https://github.com/Lucksi/Mr.Holmes.git Mr.Holmes # Mr.Holmes +install_git https://github.com/htr-tech/nexphisher.git nexphisher # NexPhisher +install_git https://github.com/thewhiteh4t/seeker.git seeker # Seeker +pkg_install set # SET (Social Engineering Toolkit) +install_git https://github.com/UndeadSec/SocialFish.git SocialFish # SocialFish +install_git https://github.com/ultrasecurity/Storm-Breaker.git Storm-Breaker # Storm-Breaker +install_git https://github.com/PerezMascato/URLCADIZ.git URLCADIZ # URLCADIZ +install_pip zehef # Zehef +install_git https://github.com/htr-tech/zphisher.git zphisher # Zphisher + +echo; say "Installing: 📡 IoT & Device Intelligence (10 tools)" +install_git https://github.com/AhMyth/AhMyth-Android-RAT.git AhMyth-Android-RAT # AhMyth Android RAT +pkg_install apktool # Apktool +install_pip frida-tools # Frida +install_pip greynoise # GreyNoise CLI +pkg_install jadx # jadx +install_git https://github.com/g0tmi1k/msfpc.git msfpc # MSFPC +install_pip objection # Objection +install_pip shodan # Shodan (IoT) +install_git https://github.com/shubhamrooter/ShodanSpider.git ShodanSpider # ShodanSpider +install_pip zoomeye # ZoomEye CLI + +echo; say "Installing: 🧰 Frameworks & All-in-One Platforms (12 tools)" +install_git https://github.com/thewhiteh4t/FinalRecon.git FinalRecon # FinalRecon +install_git https://github.com/Manisso/fsociety.git fsociety # fsociety +install_git https://github.com/Z4nzu/hackingtool.git hackingtool # Hackingtool +install_pip harpoon # Harpoon +pkg_install maltego # Maltego +install_git https://github.com/ninoseki/mitaka.git mitaka # Mitaka +install_git https://github.com/loseys/Oblivion.git Oblivion # Oblivion +install_git https://github.com/Bafomet666/OSINT-SAN.git OSINT-SAN # OSINT-SAN +install_git https://github.com/j3ssie/osmedeus.git osmedeus # osmedeus +install_pip recon-ng # Recon-ng +pkg_install sn0int # sn0int +install_pip spiderfoot # SpiderFoot + +echo; say "Installing: 🔒 Free VPN & Privacy Tools (12 tools)" +install_git https://github.com/trailofbits/algo.git algo # Algo VPN +install_git https://github.com/HACK3RY2J/Anon-SMS.git Anon-SMS # Anon-SMS +install_git https://github.com/Und3rf10w/kali-anonsurf.git kali-anonsurf # Anonsurf +pkg_install bleachbit # BleachBit +pkg_install macchanger # MAC Changer +pkg_install mullvad-vpn # Mullvad VPN +pkg_install openvpn # OpenVPN +install_pip protonvpn-cli # Proton VPN Free +pkg_install riseup-vpn # RiseupVPN +pkg_install torbrowser-launcher # Tor Browser +pkg_install veracrypt # VeraCrypt +pkg_install wireguard # WireGuard + +print_summary diff --git a/redteam.sh b/redteam.sh new file mode 100644 index 0000000..ad5205f --- /dev/null +++ b/redteam.sh @@ -0,0 +1,156 @@ +#!/usr/bin/env bash +# =================================================================== +# ⚔️ Red team / offensive +# Part of awesome-osint-arsenal v3.4 +# Auto-detects: Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS / +# Arch / Manjaro / EndeavourOS / +# Fedora / RHEL / CentOS / Rocky / Alma +# Best support: Kali / Debian / Ubuntu (apt-based) +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; CYN="\033[0;36m"; NC="\033[0m" +LOGFILE="${LOGFILE:-$HOME/osint-install-errors.log}" +INSTALLED=${INSTALLED:-0}; SKIPPED=${SKIPPED:-0}; FAILED=${FAILED:-0} +declare -ga FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +require_root() { + if [ "$EUID" -ne 0 ]; then echo "Please run as root: sudo bash $0"; exit 1; fi +} + +detect_distro() { + if [ -f /etc/os-release ]; then + . /etc/os-release + case "${ID,,}" in + kali|debian|ubuntu|parrot|raspbian|linuxmint|pop|elementary) PKG="apt" ;; + arch|manjaro|endeavouros|garuda|artix) PKG="pacman" ;; + fedora|rhel|centos|rocky|almalinux|ol) PKG="dnf" ;; + *) PKG="unknown" ;; + esac + else + PKG="unknown" + fi + export PKG + echo -e "${CYN}[i]${NC} Detected package manager: $PKG" + if [ "$PKG" = "unknown" ]; then + echo -e "${YLW}[!]${NC} Unknown distro — git/pip/go installs will work, system-package installs will be skipped." + fi +} + +pkg_install() { + local pkg="$1" + case "$PKG" in + apt) + if dpkg -s "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if apt install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (apt)"; else fail "$pkg (apt)"; fi + ;; + pacman) + if pacman -Qi "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if pacman -S --noconfirm --needed "$pkg" >/dev/null 2>&1; then ok "$pkg (pacman)"; else fail "$pkg (pacman — may not be in repo, try AUR)"; fi + ;; + dnf) + if rpm -q "$pkg" >/dev/null 2>&1; then skip "$pkg already installed"; return; fi + if dnf install -y "$pkg" >/dev/null 2>&1; then ok "$pkg (dnf)"; else fail "$pkg (dnf — may not be in repo)"; fi + ;; + *) + fail "$pkg — unknown package manager, install manually" + ;; + esac +} + +install_pip() { + local pkg="$1" + if pip3 show "$pkg" >/dev/null 2>&1; then skip "$pkg (pip) already installed"; return; fi + if pip3 install --break-system-packages "$pkg" >/dev/null 2>&1; then ok "$pkg (pip)"; else fail "$pkg (pip)"; fi +} +install_go() { + local mod="$1" name="$2" + if ! command -v go >/dev/null 2>&1; then fail "$name — go not installed"; return; fi + if command -v "$name" >/dev/null 2>&1; then skip "$name already installed"; return; fi + if go install "$mod" >/dev/null 2>&1; then ok "$name (go)"; else fail "$name (go)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p /opt/osint-arsenal + if [ -d "/opt/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "/opt/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} +install_docker() { + local image="$1" name="$2" + if ! command -v docker >/dev/null 2>&1; then fail "$name — docker not installed"; return; fi + if docker image inspect "$image" >/dev/null 2>&1; then skip "$name (docker) already pulled"; return; fi + if docker pull "$image" >/dev/null 2>&1; then ok "$name (docker)"; else fail "$name (docker)"; fi +} + +bootstrap_basics() { + case "$PKG" in + apt) + apt update -y >/dev/null 2>&1 || true + apt install -y python3 python3-pip git curl wget golang-go >/dev/null 2>&1 || true + ;; + pacman) + pacman -Sy --noconfirm >/dev/null 2>&1 || true + pacman -S --noconfirm --needed python python-pip git curl wget go >/dev/null 2>&1 || true + ;; + dnf) + dnf install -y python3 python3-pip git curl wget golang >/dev/null 2>&1 || true + ;; + esac +} + +print_summary() { + echo + echo "=============================================" + echo -e " Installed: ${GRN}$INSTALLED${NC}" + echo -e " Skipped: ${YLW}$SKIPPED${NC}" + echo -e " Failed: ${RED}$FAILED${NC}" + echo "=============================================" + if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[@]:-}" + echo "See $LOGFILE for details." + fi +} + +require_root +detect_distro +bootstrap_basics + +echo; say "Installing: ⚔️ Red Team & Offensive Security (31 tools)" +install_git https://github.com/infosecn1nja/AD-Attack-Defense.git AD-Attack-Defense # AD Attack & Defense +install_pip arjun # Arjun +install_git https://github.com/BloodHoundAD/BloodHound.git BloodHound # BloodHound +install_docker specterops/bloodhound:latest 'BloodHound CE' # BloodHound CE +install_pip certipy-ad # Certipy +install_pip crackmapexec # CrackMapExec +install_go github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest crlfuzz # CRLFuzz +install_go github.com/hahwul/dalfox/v2@latest v2 # Dalfox +pkg_install evil-winrm # Evil-WinRM +install_git https://github.com/r0oth3x49/ghauri.git ghauri # Ghauri +install_go github.com/KathanP19/Gxss@latest Gxss # Gxss +install_git https://github.com/HavocFramework/Havoc.git Havoc # Havoc +install_pip impacket # Impacket +install_go github.com/ropnop/kerbrute@latest kerbrute # Kerbrute +install_go github.com/assetnote/kiterunner/cmd/kr@latest kr # kiterunner +install_go github.com/Ne0nd0g/merlin@latest merlin # Merlin +pkg_install metasploit-framework # Metasploit Framework +install_git https://github.com/its-a-feature/Mythic.git Mythic # Mythic +install_pip git # NetExec (nxc) +install_git https://github.com/codingo/NoSQLMap.git NoSQLMap # NoSQLMap +install_git https://github.com/projectdiscovery/nuclei-templates.git nuclei-templates # Nuclei Templates +install_git https://github.com/PortSwigger/param-miner.git param-miner # ParamMiner (Burp ext) +install_git https://github.com/swisskyrepo/PayloadsAllTheThings.git PayloadsAllTheThings # PayloadsAllTheThings +install_git https://github.com/topotam/PetitPotam.git PetitPotam # PetitPotam +install_git https://github.com/BC-SECURITY/Empire.git Empire # PowerShell Empire +install_git https://github.com/GhostPack/Rubeus.git Rubeus # Rubeus +install_git https://github.com/BloodHoundAD/SharpHound.git SharpHound # SharpHound +install_go github.com/bishopfox/sliver/server@latest server # Sliver +install_git https://github.com/swisskyrepo/SSRFmap.git SSRFmap # SSRFmap +install_git https://github.com/t3l3machus/Villain.git Villain # Villain +install_git https://github.com/s0md3v/XSStrike.git XSStrike # XSStrike + +print_summary diff --git a/termux.sh b/termux.sh new file mode 100644 index 0000000..1137b9a --- /dev/null +++ b/termux.sh @@ -0,0 +1,93 @@ +#!/usr/bin/env bash +# =================================================================== +# Awesome OSINT Arsenal — Termux (Android) installer +# Subset of tools known to work on Termux. +# Run from Termux: +# pkg install -y git && git clone && cd && bash install-termux.sh +# =================================================================== +set -uo pipefail + +RED="\033[0;31m"; GRN="\033[0;32m"; YLW="\033[1;33m"; BLU="\033[0;34m"; NC="\033[0m" +LOGFILE="$HOME/osint-install-errors.log" +: > "$LOGFILE" +INSTALLED=0; SKIPPED=0; FAILED=0 +declare -a FAILED_TOOLS=() + +say() { echo -e "${BLU}[*]${NC} $*"; } +ok() { echo -e "${GRN}[✓]${NC} $*"; INSTALLED=$((INSTALLED+1)); } +skip() { echo -e "${YLW}[~]${NC} $*"; SKIPPED=$((SKIPPED+1)); } +fail() { echo -e "${RED}[✗]${NC} $*"; FAILED=$((FAILED+1)); FAILED_TOOLS+=("$1"); echo "FAIL: $*" >> "$LOGFILE"; } + +install_pkg() { + local p="$1" + if dpkg -s "$p" >/dev/null 2>&1; then skip "$p already installed"; return; fi + if pkg install -y "$p" >/dev/null 2>&1; then ok "$p (pkg)"; else fail "$p (pkg)"; fi +} +install_pip() { + local p="$1" + if pip show "$p" >/dev/null 2>&1; then skip "$p (pip) already installed"; return; fi + if pip install "$p" >/dev/null 2>&1; then ok "$p (pip)"; else fail "$p (pip)"; fi +} +install_git() { + local repo="$1" dst="$2" + mkdir -p "$HOME/osint-arsenal" + if [ -d "$HOME/osint-arsenal/$dst" ]; then skip "$dst already cloned"; return; fi + if git clone --depth=1 "$repo" "$HOME/osint-arsenal/$dst" >/dev/null 2>&1; then ok "$dst (git)"; else fail "$dst (git)"; fi +} + +say "Updating Termux..." +pkg update -y >/dev/null 2>&1 || true +pkg upgrade -y >/dev/null 2>&1 || true + +say "Installing core packages..." +pkg install -y python python-pip git curl wget openssh nmap hydra perl >/dev/null 2>&1 || true +termux-setup-storage 2>/dev/null || true + +say "Installing Termux-compatible tools..." +install_pkg aircrack-ng # Aircrack-ng +install_pip blackbird-osint # Blackbird +install_pip censys # Censys CLI +install_pip dnsrecon # dnsrecon +install_pip dnstwist # dnstwist +install_pkg libimage-exiftool-perl # ExifTool +install_git https://github.com/Manisso/fsociety.git fsociety # fsociety +install_pip gitrecon # Gitrecon +install_pip h8mail # h8mail +install_pip holehe # Holehe +install_pkg hydra # Hydra +install_pip instaloader # Instaloader +install_git https://github.com/maldevel/IPGeoLocation.git IPGeoLocation # IPGeoLocation +install_pkg john # John the Ripper +install_pip maigret # Maigret +install_pip metagoofil # Metagoofil +install_git https://github.com/htr-tech/nexphisher.git nexphisher # NexPhisher +install_pkg nmap # Nmap +install_git https://github.com/s0md3v/Orbit.git Orbit # Orbit +install_pip phoneinfoga # PhoneInfoga +install_git https://github.com/aerosol-can/PhoneSploit.git PhoneSploit # PhoneSploit +install_pip sherlock-project # Sherlock +install_pip shodan # Shodan +install_pip shodan # Shodan CLI +install_pip snoop # Snoop +install_pip snscrape # snscrape +install_pip social-analyzer # Social Analyzer +install_git https://github.com/ultrasecurity/Storm-Breaker.git Storm-Breaker # Storm-Breaker +install_pip sublist3r # Sublist3r +install_pip theHarvester # theHarvester +install_pip trufflehog # trufflehog +install_git https://github.com/wishihab/userrecon.git userrecon # UserRecon +install_git https://github.com/htr-tech/zphisher.git zphisher # Zphisher + +echo +echo "=============================================" +echo -e " Installed: ${GRN}$INSTALLED${NC}" +echo -e " Skipped: ${YLW}$SKIPPED${NC}" +echo -e " Failed: ${RED}$FAILED${NC}" +echo "=============================================" +if (( FAILED > 0 )); then + echo -e "${RED}Failed tools:${NC} ${FAILED_TOOLS[*]}" + echo "See $LOGFILE for details." +fi +echo +echo "Tools cloned to: $HOME/osint-arsenal/" +echo "For more tools, see the README.md — many require x86 Linux and won't run on Android." \ No newline at end of file diff --git a/tools.json b/tools.json new file mode 100644 index 0000000..405d06f --- /dev/null +++ b/tools.json @@ -0,0 +1,17624 @@ +[ + { + "id": "0xdf-hacks", + "name": "0xdf hacks stuff", + "description": "HTB writeups and pentesting writeups", + "category": "learning-resources", + "url": "https://0xdf.gitlab.io", + "install": { + "method": "web", + "kali": "", + "raw": "[0xdf.gitlab.io](https://0xdf.gitlab.io)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "abusech-hunting", + "name": "abuse.ch Hunting", + "description": "Hunt across all abuse.ch malware platforms with one query", + "category": "malware-threat-intel", + "url": "https://hunting.abuse.ch", + "install": { + "method": "web", + "kali": "", + "raw": "[hunting.abuse.ch](https://hunting.abuse.ch)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "abuseipdb", + "name": "AbuseIPDB", + "description": "IP address reputation database", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "AbuseIPDB", + "raw": "AbuseIPDB" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "AbuseIPDB" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "ad-attack-defense", + "name": "AD Attack & Defense", + "description": "Comprehensive Active Directory attack reference", + "category": "red-team-offensive", + "url": "https://github.com/infosecn1nja/AD-Attack-Defense", + "install": { + "method": "git", + "kali": "git clone https://github.com/infosecn1nja/AD-Attack-Defense.git", + "raw": "`git clone https://github.com/infosecn1nja/AD-Attack-Defense.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ads-b-exchange", + "name": "ADS-B Exchange", + "description": "Unfiltered flight tracking data", + "category": "vehicle-aviation-maritime", + "url": "", + "install": { + "method": "manual", + "kali": "ADS-B Exchange", + "raw": "ADS-B Exchange" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "ADS-B Exchange" + ], + "sections_seen": [ + "Vehicle, Aviation & Maritime" + ], + "archived": false + }, + { + "id": "advphishing", + "name": "AdvPhishing", + "description": "Advanced phishing tool", + "category": "people-identity", + "url": "https://github.com/Ignitetch/AdvPhishing", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Ignitetch/AdvPhishing`", + "raw": "`git clone https://github.com/Ignitetch/AdvPhishing`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "ahmia", + "name": "Ahmia", + "description": "Clearnet search engine for dark web", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "Ahmia", + "raw": "Ahmia" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Ahmia" + ], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "ahmyth-android-rat", + "name": "AhMyth Android RAT", + "description": "Android remote access tool", + "category": "iot-devices", + "url": "https://github.com/AhMyth/AhMyth-Android-RAT", + "install": { + "method": "git", + "kali": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`", + "raw": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "ai-or-not", + "name": "AI or Not", + "description": "Detect AI-generated images", + "category": "image-facial", + "url": "https://aiornot.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[aiornot.com](https://aiornot.com/)" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "AI or Not" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "aircrack-ng", + "name": "Aircrack-ng", + "description": "Wi-Fi security auditing suite", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install aircrack-ng`", + "raw": "`apt install aircrack-ng`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Aircrack-ng" + ], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "aleph-occrp", + "name": "Aleph (OCCRP)", + "description": "Global corporate & public records", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "Aleph (OCCRP)", + "raw": "Aleph (OCCRP)" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Aleph (OCCRP)" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "aleph-open-search", + "name": "Aleph Open Search", + "description": "Dark-web search engine by Aleph Networks", + "category": "dark-web", + "url": "https://open-search.aleph-networks.eu", + "install": { + "method": "web", + "kali": "", + "raw": "[open-search.aleph-networks.eu](https://open-search.aleph-networks.eu)" + }, + "tags": [ + "dark-web", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "aletheia-research", + "name": "Aletheia (image forensics)", + "description": "Detect manipulated/AI-generated images", + "category": "image-facial", + "url": "https://www.aletheia.ai", + "install": { + "method": "web", + "kali": "", + "raw": "[www.aletheia.ai](https://www.aletheia.ai)" + }, + "tags": [ + "image-facial", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "alfa-network", + "name": "Alfa Network Adapters", + "description": "Wi-Fi adapters known to support monitor/inject mode (AWUS036ACH etc.)", + "category": "hardware-hacking", + "url": "https://www.alfa.com.tw", + "install": { + "method": "web", + "kali": "", + "raw": "[www.alfa.com.tw](https://www.alfa.com.tw)" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "algo-vpn", + "name": "Algo VPN", + "description": "Self-hosted cloud VPN — sets up WireGuard/IPsec automatically", + "category": "vpn-privacy", + "url": "https://github.com/trailofbits/algo", + "install": { + "method": "git", + "kali": "`git clone https://github.com/trailofbits/algo`", + "raw": "`git clone https://github.com/trailofbits/algo`" + }, + "tags": [ + "vpn-privacy", + "free-tier:Free (self-hosted on cloud)", + "open-source:✅", + "no-log:✅", + "protocols:WireGuard, IPsec" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Algo VPN" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "alienvault-otx", + "name": "AlienVault OTX", + "description": "Open threat exchange platform", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "manual", + "kali": "AlienVault OTX", + "raw": "AlienVault OTX" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "AlienVault OTX" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "altdns", + "name": "altdns", + "description": "Generates permutations, alterations and mutations of subdomains", + "category": "domain-ip-network", + "url": "https://github.com/infosec-au/altdns", + "install": { + "method": "pip", + "kali": "pip3 install py-altdns", + "raw": "`pip3 install py-altdns`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "amass", + "name": "Amass", + "description": "In-depth DNS enumeration and network mapping", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/owasp-amass/amass/v4/...@master`", + "raw": "`go install github.com/owasp-amass/amass/v4/...@master`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Amass" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "anew-tomnomnom", + "name": "anew", + "description": "Append lines from stdin to a file only if not already there", + "category": "domain-ip-network", + "url": "https://github.com/tomnomnom/anew", + "install": { + "method": "go", + "kali": "go install github.com/tomnomnom/anew@latest", + "raw": "`go install github.com/tomnomnom/anew@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "anomali", + "name": "Anomali ThreatStream", + "description": "Enterprise threat intel aggregation platform", + "category": "threat-intel-platforms", + "url": "https://www.anomali.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.anomali.com](https://www.anomali.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "anon-sms", + "name": "Anon-SMS", + "description": "Anonymous SMS sending", + "category": "vpn-privacy", + "url": "https://github.com/HACK3RY2J/Anon-SMS.git", + "install": { + "method": "git", + "kali": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`", + "raw": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "anonsurf", + "name": "Anonsurf", + "description": "Anonymize entire OS traffic through Tor", + "category": "vpn-privacy", + "url": "https://github.com/Und3rf10w/kali-anonsurf", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Und3rf10w/kali-anonsurf`", + "raw": "`git clone https://github.com/Und3rf10w/kali-anonsurf`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Anonsurf" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "any-run", + "name": "ANY.RUN", + "description": "Interactive online malware sandbox", + "category": "malware-threat-intel", + "url": "https://any.run", + "install": { + "method": "web", + "kali": "", + "raw": "[any.run](https://any.run)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "apktool", + "name": "Apktool", + "description": "Android APK decompiler/rebuilder", + "category": "iot-devices", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install apktool`", + "raw": "`apt install apktool`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "apollo-io", + "name": "Apollo.io", + "description": "B2B phone/email finder — 1200 free credits/yr", + "category": "people-identity", + "url": "https://www.apollo.io", + "install": { + "method": "web", + "kali": "", + "raw": "[www.apollo.io](https://www.apollo.io)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "apt-groups", + "name": "APT Groups and Operations", + "description": "Spreadsheet of threat actors, sponsoring countries, TTPs", + "category": "malware-threat-intel", + "url": "https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml", + "install": { + "method": "web", + "kali": "", + "raw": "[docs.google.com](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "aquatone", + "name": "Aquatone", + "description": "Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers)", + "category": "domain-ip-network", + "url": "https://github.com/michenriksen/aquatone", + "install": { + "method": "go", + "kali": "go install github.com/michenriksen/aquatone@latest", + "raw": "`go install github.com/michenriksen/aquatone@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "archive-today", + "name": "Archive.today", + "description": "Web archive — saves snapshots even when robots.txt blocks Wayback", + "category": "document-metadata", + "url": "https://archive.ph", + "install": { + "method": "web", + "kali": "", + "raw": "[archive.ph](https://archive.ph)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "arctic-shift", + "name": "Arctic Shift", + "description": "Tool for accessing large dumps of Reddit data via API/web", + "category": "username-social", + "url": "https://github.com/ArthurHeitmann/arctic_shift", + "install": { + "method": "git", + "kali": "git clone https://github.com/ArthurHeitmann/arctic_shift.git", + "raw": "`git clone https://github.com/ArthurHeitmann/arctic_shift.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "arin-whois", + "name": "ARIN WHOIS", + "description": "IP registration database", + "category": "domain-ip-network", + "url": "https://whois.arin.net/", + "install": { + "method": "web", + "kali": "", + "raw": "[whois.arin.net](https://whois.arin.net/)" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "arjun", + "name": "Arjun", + "description": "HTTP parameter discovery suite", + "category": "red-team-offensive", + "url": "https://github.com/s0md3v/Arjun", + "install": { + "method": "pip", + "kali": "pip3 install arjun", + "raw": "`pip3 install arjun`" + }, + "tags": [ + "red-team-offensive", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "arkham", + "name": "Arkham Intelligence", + "description": "On-chain intel — labels, entities, historical flows", + "category": "crypto-blockchain", + "url": "https://www.arkhamintelligence.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.arkhamintelligence.com](https://www.arkhamintelligence.com)" + }, + "tags": [ + "crypto-blockchain", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "assetfinder", + "name": "assetfinder", + "description": "Find domains and subdomains related to a given domain", + "category": "domain-ip-network", + "url": "https://github.com/tomnomnom/assetfinder", + "install": { + "method": "go", + "kali": "go install github.com/tomnomnom/assetfinder@latest", + "raw": "`go install github.com/tomnomnom/assetfinder@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "atomic-red-team", + "name": "Atomic Red Team", + "description": "Library of small detection-test scripts mapped to MITRE ATT&CK", + "category": "blue-team-defensive", + "url": "https://github.com/redcanaryco/atomic-red-team", + "install": { + "method": "git", + "kali": "git clone https://github.com/redcanaryco/atomic-red-team.git", + "raw": "`git clone https://github.com/redcanaryco/atomic-red-team.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "attify-badge", + "name": "Attify Badge", + "description": "Hardware tool for IoT firmware/UART/JTAG analysis", + "category": "hardware-hacking", + "url": "https://www.attify-store.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.attify-store.com](https://www.attify-store.com)" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "autocheck", + "name": "AutoCheck", + "description": "Vehicle history reports", + "category": "vehicle-aviation-maritime", + "url": "https://autocheck.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[autocheck.com](https://autocheck.com/)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "autopsy", + "name": "Autopsy", + "description": "Full digital forensics platform", + "category": "document-metadata", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install autopsy`", + "raw": "`apt install autopsy`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Autopsy" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "autorecon", + "name": "AutoRecon", + "description": "Multi-threaded network reconnaissance and enumeration framework", + "category": "domain-ip-network", + "url": "https://github.com/Tib3rius/AutoRecon", + "install": { + "method": "pip", + "kali": "pip3 install git+https://github.com/Tib3rius/AutoRecon.git", + "raw": "`pip3 install git+https://github.com/Tib3rius/AutoRecon.git`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "awesome-hacking-resources", + "name": "awesome-hacking-resources", + "description": "Beginner-friendly hacking learning resources", + "category": "learning-resources", + "url": "https://github.com/vitalysim/Awesome-Hacking-Resources", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com](https://github.com/vitalysim/Awesome-Hacking-Resources)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "awesome-incident-response", + "name": "awesome-incident-response", + "description": "Curated list of IR tools and resources", + "category": "learning-resources", + "url": "https://github.com/meirwah/awesome-incident-response", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com](https://github.com/meirwah/awesome-incident-response)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "awesome-malware-analysis", + "name": "awesome-malware-analysis", + "description": "Curated list of malware-analysis tools", + "category": "learning-resources", + "url": "https://github.com/rshipp/awesome-malware-analysis", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com](https://github.com/rshipp/awesome-malware-analysis)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "awesome-pentest", + "name": "awesome-pentest", + "description": "Massive curated list of pentesting tools and resources", + "category": "learning-resources", + "url": "https://github.com/enaqx/awesome-pentest", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com](https://github.com/enaqx/awesome-pentest)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "axiom", + "name": "Axiom", + "description": "Dynamic infra framework for parallel cloud-based recon", + "category": "domain-ip-network", + "url": "https://github.com/pry0cc/axiom", + "install": { + "method": "git", + "kali": "git clone https://github.com/pry0cc/axiom.git", + "raw": "`git clone https://github.com/pry0cc/axiom.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "backgroundchecks", + "name": "BackgroundChecks.com", + "description": "Background check aggregator (BeenVerified family)", + "category": "people-identity", + "url": "https://www.backgroundchecks.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.backgroundchecks.com](https://www.backgroundchecks.com)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "baidu", + "name": "Baidu", + "description": "Major Chinese search engine — essential for China-focused OSINT", + "category": "search-dorking", + "url": "https://www.baidu.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.baidu.com](https://www.baidu.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bbh-list-public", + "name": "Public Bug Bounty Programs (chaos)", + "description": "ProjectDiscovery's free BBH program list", + "category": "bug-bounty", + "url": "https://chaos.projectdiscovery.io", + "install": { + "method": "web", + "kali": "", + "raw": "[chaos.projectdiscovery.io](https://chaos.projectdiscovery.io)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bbot", + "name": "BBOT", + "description": "Recursive internet scanner for attack surface", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install bbot`", + "raw": "`pip3 install bbot`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "BBOT" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "beenverified", + "name": "BeenVerified", + "description": "People search & background check", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "BeenVerified", + "raw": "BeenVerified" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "BeenVerified" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "bettercap", + "name": "Bettercap", + "description": "MITM framework (ARP, DNS, HTTP)", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install bettercap`", + "raw": "`apt install bettercap`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "bevigil", + "name": "BeVigil", + "description": "Search subdomains, URLs, parameters from mobile applications", + "category": "domain-ip-network", + "url": "https://bevigil.com/search", + "install": { + "method": "web", + "kali": "", + "raw": "[bevigil.com](https://bevigil.com/search)" + }, + "tags": [ + "domain-ip-network", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bgp-toolkit", + "name": "BGP Toolkit", + "description": "BGP/ASN/IP intelligence", + "category": "domain-ip-network", + "url": "https://bgp.he.net/", + "install": { + "method": "web", + "kali": "", + "raw": "[bgp.he.net](https://bgp.he.net/)" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "bgp-tools", + "name": "BGP.tools", + "description": "Modern BGP toolkit for network reconnaissance", + "category": "domain-ip-network", + "url": "https://bgp.tools", + "install": { + "method": "web", + "kali": "", + "raw": "[bgp.tools](https://bgp.tools)" + }, + "tags": [ + "domain-ip-network", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "binary-ninja", + "name": "Binary Ninja", + "description": "Modern reverse engineering platform with API", + "category": "digital-forensics", + "url": "https://binary.ninja", + "install": { + "method": "web", + "kali": "", + "raw": "[binary.ninja](https://binary.ninja)" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "binaryedge", + "name": "BinaryEdge", + "description": "Cyber risk and attack-surface intelligence", + "category": "iot-devices", + "url": "https://www.binaryedge.io", + "install": { + "method": "web", + "kali": "", + "raw": "[www.binaryedge.io](https://www.binaryedge.io)" + }, + "tags": [ + "iot-devices", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bincheck", + "name": "BinCheck", + "description": "Bank card BIN lookup", + "category": "company-business", + "url": "https://bincheck.io/", + "install": { + "method": "web", + "kali": "", + "raw": "[bincheck.io](https://bincheck.io/)" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "binwalk", + "name": "Binwalk", + "description": "Firmware analysis & extraction", + "category": "document-metadata", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install binwalk`", + "raw": "`apt install binwalk`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Binwalk" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "bitquery", + "name": "Bitquery", + "description": "Blockchain data APIs for on-chain investigation", + "category": "crypto-blockchain", + "url": "https://bitquery.io", + "install": { + "method": "web", + "kali": "", + "raw": "[bitquery.io](https://bitquery.io)" + }, + "tags": [ + "crypto-blockchain", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "blackbird", + "name": "Blackbird", + "description": "Fast username search tool across 600+ websites", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install blackbird-osint`", + "raw": "`pip install blackbird-osint`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Blackbird" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "blackbookonline", + "name": "Black Book Online", + "description": "Free nationwide directory of public-record lookups", + "category": "people-identity", + "url": "https://www.blackbookonline.info", + "install": { + "method": "web", + "kali": "", + "raw": "[www.blackbookonline.info](https://www.blackbookonline.info)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "blackeye", + "name": "BlackEye", + "description": "32+ phishing template builder for credential capture (lab-only)", + "category": "people-identity", + "url": "https://github.com/An0nUD4Y/blackeye", + "install": { + "method": "git", + "kali": "git clone https://github.com/An0nUD4Y/blackeye.git", + "raw": "`git clone https://github.com/An0nUD4Y/blackeye.git`" + }, + "tags": [ + "people-identity", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bleachbit", + "name": "BleachBit", + "description": "Digital footprint cleaner", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install bleachbit`", + "raw": "`apt install bleachbit`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "BleachBit" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "blockchain.com", + "name": "Blockchain.com", + "description": "Bitcoin explorer", + "category": "company-business", + "url": "https://blockchain.com/explorer", + "install": { + "method": "web", + "kali": "", + "raw": "[blockchain.com/explorer](https://blockchain.com/explorer)" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "blockchain.com-explorer", + "name": "Blockchain.com Explorer", + "description": "Bitcoin blockchain explorer", + "category": "crypto-blockchain", + "url": "", + "install": { + "method": "manual", + "kali": "Blockchain.com Explorer", + "raw": "Blockchain.com Explorer" + }, + "tags": [ + "crypto-blockchain" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Blockchain.com Explorer" + ], + "sections_seen": [ + "Cryptocurrency & Blockchain" + ], + "archived": false + }, + { + "id": "blockchair", + "name": "Blockchair", + "description": "Universal blockchain explorer & search", + "category": "crypto-blockchain", + "url": "", + "install": { + "method": "manual", + "kali": "Blockchair", + "raw": "Blockchair" + }, + "tags": [ + "crypto-blockchain" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Blockchair" + ], + "sections_seen": [ + "Cryptocurrency & Blockchain" + ], + "archived": false + }, + { + "id": "bloodhound", + "name": "BloodHound", + "description": "AD attack-path graph analysis", + "category": "red-team-offensive", + "url": "https://github.com/BloodHoundAD/BloodHound", + "install": { + "method": "git", + "kali": "git clone https://github.com/BloodHoundAD/BloodHound.git", + "raw": "`git clone https://github.com/BloodHoundAD/BloodHound.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bloodhound-ce", + "name": "BloodHound CE", + "description": "Community Edition of BloodHound — modernized stack", + "category": "red-team-offensive", + "url": "https://github.com/SpecterOps/BloodHound", + "install": { + "method": "docker", + "kali": "docker pull specterops/bloodhound:latest", + "raw": "`docker pull specterops/bloodhound:latest`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "brandwatch", + "name": "BrandWatch", + "description": "Social listening platform", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "💰 Paid", + "raw": "💰 Paid" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "BrandWatch" + ], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "brave-browser", + "name": "Brave Browser", + "description": "Privacy-focused browser with built-in Tor/IPFS support", + "category": "vpn-privacy", + "url": "https://brave.com", + "install": { + "method": "web", + "kali": "", + "raw": "[brave.com](https://brave.com)" + }, + "tags": [ + "vpn-privacy", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "brave-search", + "name": "Brave Search", + "description": "Independent, transparent, ad-free search engine", + "category": "search-dorking", + "url": "https://search.brave.com", + "install": { + "method": "web", + "kali": "", + "raw": "[search.brave.com](https://search.brave.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "breachdirectory", + "name": "BreachDirectory", + "description": "Free breach search", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟢 Free", + "raw": "🟢 Free" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "BreachDirectory" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "breachforums-mirror", + "name": "BreachForums Status", + "description": "Status tracking for the rotating BreachForums mirrors", + "category": "data-breach", + "url": "https://www.breachforums.cx", + "install": { + "method": "web", + "kali": "", + "raw": "[www.breachforums.cx](https://www.breachforums.cx)" + }, + "tags": [ + "data-breach", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "breadcrumbs", + "name": "Breadcrumbs", + "description": "Free crypto investigation platform — visualize transaction flows", + "category": "crypto-blockchain", + "url": "https://breadcrumbs.app", + "install": { + "method": "web", + "kali": "", + "raw": "[breadcrumbs.app](https://breadcrumbs.app)" + }, + "tags": [ + "crypto-blockchain", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "brightcloud", + "name": "BrightCloud URL/IP Lookup", + "description": "Reputation, category, and threat checks for URLs/IPs", + "category": "malware-threat-intel", + "url": "https://brightcloud.com/tools/url-ip-lookup.php", + "install": { + "method": "web", + "kali": "", + "raw": "[brightcloud.com](https://brightcloud.com/tools/url-ip-lookup.php)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "brightcloud-url", + "name": "BrightCloud Threat Intelligence", + "description": "URL/IP/threat reputation database", + "category": "search-dorking", + "url": "https://brightcloud.com", + "install": { + "method": "web", + "kali": "", + "raw": "[brightcloud.com](https://brightcloud.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "brute-ratel", + "name": "Brute Ratel C4", + "description": "Premium C2 with strong AV/EDR evasion", + "category": "red-team-offensive", + "url": "https://bruteratel.com", + "install": { + "method": "web", + "kali": "", + "raw": "[bruteratel.com](https://bruteratel.com)" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bscscan", + "name": "BscScan", + "description": "Binance Smart Chain explorer — same UX as Etherscan", + "category": "crypto-blockchain", + "url": "https://bscscan.com", + "install": { + "method": "web", + "kali": "", + "raw": "[bscscan.com](https://bscscan.com)" + }, + "tags": [ + "crypto-blockchain", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "btfm-blueteam", + "name": "BTFM: Blue Team Field Manual", + "description": "Concise blue-team incident response reference", + "category": "learning-resources", + "url": "https://www.amazon.com/dp/154101636X", + "install": { + "method": "web", + "kali": "", + "raw": "[www.amazon.com](https://www.amazon.com/dp/154101636X)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bugbase", + "name": "Bugbase", + "description": "Indian-origin bug-bounty + vulnerability disclosure platform", + "category": "bug-bounty", + "url": "https://bugbase.ai", + "install": { + "method": "web", + "kali": "", + "raw": "[bugbase.ai](https://bugbase.ai)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bugbountyhunter", + "name": "BugBountyHunter", + "description": "Web hacking training and labs", + "category": "training-ctf", + "url": "https://www.bugbountyhunter.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.bugbountyhunter.com](https://www.bugbountyhunter.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "bugcrowd", + "name": "Bugcrowd", + "description": "Crowdsourced security platform — bug bounty + pentesting", + "category": "bug-bounty", + "url": "https://bugcrowd.com", + "install": { + "method": "web", + "kali": "", + "raw": "[bugcrowd.com](https://bugcrowd.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "builtwith", + "name": "BuiltWith", + "description": "Web technology profiler", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "BuiltWith", + "raw": "BuiltWith" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "BuiltWith" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "bulk-extractor", + "name": "Bulk Extractor", + "description": "Extract features from disk images", + "category": "document-metadata", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install bulk-extractor`", + "raw": "`apt install bulk-extractor`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Bulk Extractor" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "burp-suite", + "name": "Burp Suite", + "description": "Web app security testing proxy", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "`burpsuite`", + "raw": "`burpsuite`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Burp Suite" + ], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "bus-pirate", + "name": "Bus Pirate", + "description": "Universal serial-protocol probe (I2C, SPI, UART, JTAG)", + "category": "hardware-hacking", + "url": "http://dangerousprototypes.com/docs/Bus_Pirate", + "install": { + "method": "web", + "kali": "", + "raw": "[dangerousprototypes.com](http://dangerousprototypes.com/docs/Bus_Pirate)" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cachedview", + "name": "CachedView", + "description": "View Google/Bing/Yandex cached versions of any page", + "category": "document-metadata", + "url": "https://cachedview.com", + "install": { + "method": "web", + "kali": "", + "raw": "[cachedview.com](https://cachedview.com)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "caldera", + "name": "MITRE CALDERA", + "description": "Cyber adversary emulation platform", + "category": "blue-team-defensive", + "url": "https://github.com/mitre/caldera", + "install": { + "method": "git", + "kali": "git clone https://github.com/mitre/caldera.git", + "raw": "`git clone https://github.com/mitre/caldera.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "calleridtest", + "name": "CallerIDTest", + "description": "Reverse phone lookup", + "category": "email-phone", + "url": "https://calleridtest.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[calleridtest.com](https://calleridtest.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "calyxvpn", + "name": "CalyxVPN", + "description": "Free VPN by Calyx Institute — no accounts required", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Website", + "raw": "Website" + }, + "tags": [ + "vpn-privacy", + "free-tier:Unlimited, no account needed", + "open-source:✅", + "no-log:✅", + "protocols:OpenVPN (Bitmask)" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "CalyxVPN" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "canary-tokens", + "name": "Canary Tokens", + "description": "Tracking tokens (URL, email, DNS, files)", + "category": "geolocation", + "url": "https://canarytokens.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[canarytokens.org](https://canarytokens.org/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "IP Tracking & Geolocation Links" + ], + "archived": false + }, + { + "id": "castrick", + "name": "Castrick", + "description": "Find social media accounts via email, username, phone", + "category": "people-identity", + "url": "https://castrickclues.com", + "install": { + "method": "web", + "kali": "", + "raw": "[castrickclues.com](https://castrickclues.com)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "censys", + "name": "Censys", + "description": "Internet-wide scan search", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Censys", + "raw": "Censys" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Censys" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "censys-cli", + "name": "Censys CLI", + "description": "Official Python wrapper and CLI for Censys", + "category": "search-dorking", + "url": "https://github.com/censys/censys-python", + "install": { + "method": "pip", + "kali": "pip3 install censys", + "raw": "`pip3 install censys`" + }, + "tags": [ + "search-dorking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "certipy", + "name": "Certipy", + "description": "Active Directory Certificate Services enumeration and abuse", + "category": "red-team-offensive", + "url": "https://github.com/ly4k/Certipy", + "install": { + "method": "pip", + "kali": "pip3 install certipy-ad", + "raw": "`pip3 install certipy-ad`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "certkit", + "name": "CertKit Certificate Search", + "description": "Fast search for public SSL/TLS certificate records", + "category": "domain-ip-network", + "url": "https://www.certkit.io/tools/ct-logs/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.certkit.io](https://www.certkit.io/tools/ct-logs/)" + }, + "tags": [ + "domain-ip-network", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cewl", + "name": "CeWL", + "description": "Custom wordlist generator from website", + "category": "data-breach", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install cewl`", + "raw": "`apt install cewl`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "CeWL" + ], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "chainabuse", + "name": "Chainabuse", + "description": "Public crypto-scam reporting database", + "category": "crypto-blockchain", + "url": "https://www.chainabuse.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.chainabuse.com](https://www.chainabuse.com)" + }, + "tags": [ + "crypto-blockchain", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "chainalysis", + "name": "Chainalysis", + "description": "Blockchain analytics & investigation", + "category": "crypto-blockchain", + "url": "", + "install": { + "method": "manual", + "kali": "Chainalysis", + "raw": "Chainalysis" + }, + "tags": [ + "crypto-blockchain" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Chainalysis" + ], + "sections_seen": [ + "Cryptocurrency & Blockchain" + ], + "archived": false + }, + { + "id": "chainalysis-reactor", + "name": "Chainalysis Reactor", + "description": "Premium blockchain investigation platform", + "category": "crypto-blockchain", + "url": "https://www.chainalysis.com/product/reactor/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.chainalysis.com](https://www.chainalysis.com/product/reactor/)" + }, + "tags": [ + "crypto-blockchain", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "chainsaw", + "name": "Chainsaw", + "description": "Hunt threats in Windows event logs — fast forensics", + "category": "blue-team-defensive", + "url": "https://github.com/WithSecureLabs/chainsaw", + "install": { + "method": "git", + "kali": "git clone https://github.com/WithSecureLabs/chainsaw.git", + "raw": "`git clone https://github.com/WithSecureLabs/chainsaw.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "chatgpt", + "name": "ChatGPT", + "description": "OpenAI's AI assistant", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ GPT-4o mini", + "raw": "✅ GPT-4o mini" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "checkleaked", + "name": "CheckLeaked", + "description": "Leak search engine (15B+ accounts)", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "checkuser", + "name": "CheckUser", + "description": "Search username across multiple social networks", + "category": "username-social", + "url": "https://checkuser.vercel.app", + "install": { + "method": "web", + "kali": "", + "raw": "[checkuser.vercel.app](https://checkuser.vercel.app)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "checkusernames", + "name": "CheckUserNames", + "description": "Check username across multiple platforms", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "CheckUserNames", + "raw": "CheckUserNames" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "CheckUserNames" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "cisco-talos", + "name": "Cisco Talos Intelligence", + "description": "IP and Domain Reputation Center for real-time detection", + "category": "malware-threat-intel", + "url": "https://talosintelligence.com/reputation_center", + "install": { + "method": "web", + "kali": "", + "raw": "[talosintelligence.com](https://talosintelligence.com/reputation_center)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "claude", + "name": "Claude", + "description": "Best for reasoning & analysis", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free tier", + "raw": "✅ Free tier" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "clearbit", + "name": "Clearbit Connect", + "description": "Email finder browser extension with company data", + "category": "people-identity", + "url": "https://connect.clearbit.com", + "install": { + "method": "web", + "kali": "", + "raw": "[connect.clearbit.com](https://connect.clearbit.com)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cloudflare-radar", + "name": "Cloudflare Radar", + "description": "Internet traffic patterns, attacks, technology trends", + "category": "domain-ip-network", + "url": "https://radar.cloudflare.com", + "install": { + "method": "web", + "kali": "", + "raw": "[radar.cloudflare.com](https://radar.cloudflare.com)" + }, + "tags": [ + "domain-ip-network", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "clustrmaps", + "name": "Clustrmaps", + "description": "Find people and address information", + "category": "people-identity", + "url": "https://clustrmaps.com", + "install": { + "method": "web", + "kali": "", + "raw": "[clustrmaps.com](https://clustrmaps.com)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cobalt-strike", + "name": "Cobalt Strike", + "description": "Premium adversary simulation / red team framework", + "category": "red-team-offensive", + "url": "https://www.cobaltstrike.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.cobaltstrike.com](https://www.cobaltstrike.com)" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "commandersearch", + "name": "Commander Search", + "description": "Boolean search builder for OSINT investigators", + "category": "search-dorking", + "url": "https://www.commandersearch.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.commandersearch.com](https://www.commandersearch.com)" + }, + "tags": [ + "search-dorking", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "commentpicker-tg", + "name": "Telemetr", + "description": "Telegram channel/group analytics", + "category": "username-social", + "url": "https://telemetr.io", + "install": { + "method": "web", + "kali": "", + "raw": "[telemetr.io](https://telemetr.io)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "commix", + "name": "Commix", + "description": "Command injection exploiter", + "category": "domain-ip-network", + "url": "https://github.com/commixproject/commix", + "install": { + "method": "git", + "kali": "`git clone https://github.com/commixproject/commix`", + "raw": "`git clone https://github.com/commixproject/commix`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "companies-house-uk", + "name": "Companies House (UK)", + "description": "UK company register", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "Companies House (UK)", + "raw": "Companies House (UK)" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Companies House (UK)" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "constella-intel", + "name": "Constella Intelligence", + "description": "Identity threat intel from breaches and dark web", + "category": "people-identity", + "url": "https://constellaintelligence.com", + "install": { + "method": "web", + "kali": "", + "raw": "[constellaintelligence.com](https://constellaintelligence.com)" + }, + "tags": [ + "people-identity", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "contactout", + "name": "ContactOut", + "description": "Find emails and phones for 300M+ professionals", + "category": "people-identity", + "url": "https://contactout.com", + "install": { + "method": "web", + "kali": "", + "raw": "[contactout.com](https://contactout.com)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cortex", + "name": "Cortex (TheHive)", + "description": "Observable analysis and active response engine", + "category": "blue-team-defensive", + "url": "https://github.com/TheHive-Project/Cortex", + "install": { + "method": "docker", + "kali": "docker pull thehiveproject/cortex:latest", + "raw": "`docker pull thehiveproject/cortex:latest`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "court-listener", + "name": "Court Listener", + "description": "Free US court opinion search", + "category": "vehicle-aviation-maritime", + "url": "https://courtlistener.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[courtlistener.com](https://courtlistener.com/)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "crackmapexec", + "name": "CrackMapExec", + "description": "Post-exploitation tool for AD networks", + "category": "red-team-offensive", + "url": "https://github.com/byt3bl33d3r/CrackMapExec", + "install": { + "method": "pip", + "kali": "pip3 install crackmapexec", + "raw": "`pip3 install crackmapexec`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "credenshow", + "name": "CredenShow", + "description": "Identify your compromised credentials before others do", + "category": "data-breach", + "url": "https://credenshow.com", + "install": { + "method": "web", + "kali": "", + "raw": "[credenshow.com](https://credenshow.com)" + }, + "tags": [ + "data-breach", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "criminal-ip", + "name": "Criminal IP", + "description": "AI-powered cyber threat intelligence", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Criminal IP", + "raw": "Criminal IP" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Criminal IP" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "crlfuzz", + "name": "CRLFuzz", + "description": "Fast CRLF-injection scanner in Go", + "category": "red-team-offensive", + "url": "https://github.com/dwisiswant0/crlfuzz", + "install": { + "method": "go", + "kali": "go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest", + "raw": "`go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest`" + }, + "tags": [ + "red-team-offensive", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "crosslinked", + "name": "CrossLinked", + "description": "LinkedIn enumeration — generate username lists from LinkedIn profiles", + "category": "people-identity", + "url": "https://github.com/m8sec/CrossLinked", + "install": { + "method": "pip", + "kali": "pip3 install crosslinked", + "raw": "`pip3 install crosslinked`" + }, + "tags": [ + "people-identity", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "crowdstrike-falcon-x", + "name": "CrowdStrike Falcon Intelligence", + "description": "Premium adversary intel from CrowdStrike", + "category": "threat-intel-platforms", + "url": "https://www.crowdstrike.com/products/threat-intelligence/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "crt.sh", + "name": "crt.sh", + "description": "Certificate transparency search", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "crt.sh", + "raw": "crt.sh" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "crt.sh" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "crunch", + "name": "Crunch", + "description": "Pattern-based wordlist generator", + "category": "data-breach", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install crunch`", + "raw": "`apt install crunch`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Crunch" + ], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "crunchbase", + "name": "Crunchbase", + "description": "Company/startup database", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "Crunchbase", + "raw": "Crunchbase" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Crunchbase" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "ctftime", + "name": "CTFtime", + "description": "Calendar of upcoming and past CTF events", + "category": "training-ctf", + "url": "https://ctftime.org", + "install": { + "method": "web", + "kali": "", + "raw": "[ctftime.org](https://ctftime.org)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cupp", + "name": "Cupp", + "description": "Profile-based wordlist generator", + "category": "data-breach", + "url": "https://github.com/Mebus/cupp", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Mebus/cupp`", + "raw": "`git clone https://github.com/Mebus/cupp`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Wordlist Generation & Brute Force" + ], + "archived": false + }, + { + "id": "cutter", + "name": "Cutter", + "description": "GUI for radare2/rizin reverse-engineering", + "category": "digital-forensics", + "url": "https://cutter.re", + "install": { + "method": "git", + "kali": "git clone https://github.com/rizinorg/cutter.git", + "raw": "`git clone https://github.com/rizinorg/cutter.git`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "cyberchef", + "name": "CyberChef", + "description": "Data analysis swiss army knife", + "category": "document-metadata", + "url": "", + "install": { + "method": "manual", + "kali": "CyberChef", + "raw": "CyberChef" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "CyberChef" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "cybrary", + "name": "Cybrary", + "description": "Free + paid cybersecurity courses", + "category": "training-ctf", + "url": "https://www.cybrary.it", + "install": { + "method": "web", + "kali": "", + "raw": "[www.cybrary.it](https://www.cybrary.it)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dalfox", + "name": "Dalfox", + "description": "Fast, intelligent XSS scanner", + "category": "red-team-offensive", + "url": "https://github.com/hahwul/dalfox", + "install": { + "method": "go", + "kali": "go install github.com/hahwul/dalfox/v2@latest", + "raw": "`go install github.com/hahwul/dalfox/v2@latest`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "daprofiler", + "name": "DaProfiler", + "description": "OSINT profiling tool with reports", + "category": "people-identity", + "url": "https://github.com/daprofiler/DaProfiler", + "install": { + "method": "git", + "kali": "`git clone https://github.com/daprofiler/DaProfiler`", + "raw": "`git clone https://github.com/daprofiler/DaProfiler`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "DaProfiler" + ], + "sections_seen": [ + "People & Identity OSINT" + ], + "archived": false + }, + { + "id": "dark.fail", + "name": "Dark.fail", + "description": "Verified dark web links directory", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "Dark.fail", + "raw": "Dark.fail" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Dark.fail" + ], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "darkscrape", + "name": "DarkScrape", + "description": "Dark web scraping tool", + "category": "dark-web", + "url": "https://github.com/itsmehacker/DarkScrape", + "install": { + "method": "git", + "kali": "`git clone https://github.com/itsmehacker/DarkScrape`", + "raw": "`git clone https://github.com/itsmehacker/DarkScrape`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "DarkScrape" + ], + "sections_seen": [ + "Dark Web & Tor Intelligence" + ], + "archived": false + }, + { + "id": "darksearch", + "name": "DarkSearch", + "description": "Dark web search API (clearnet)", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "DarkSearch", + "raw": "DarkSearch" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "DarkSearch" + ], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "databreach.com", + "name": "DataBreach.com", + "description": "Data breach lookup", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟢 Free", + "raw": "🟢 Free" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "db-ip", + "name": "DB-IP", + "description": "IP geolocation database", + "category": "domain-ip-network", + "url": "https://db-ip.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[db-ip.com](https://db-ip.com/)" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "dbpedia", + "name": "DBpedia", + "description": "Structured Wikipedia data — SPARQL endpoint", + "category": "people-identity", + "url": "https://www.dbpedia.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.dbpedia.org](https://www.dbpedia.org)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "deepface", + "name": "DeepFace", + "description": "AI face analysis (age, gender, emotion)", + "category": "image-facial", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install deepface`", + "raw": "`pip install deepface`" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "DeepFace" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "deepseek", + "name": "DeepSeek", + "description": "Open-source, strong reasoning", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "dehashed", + "name": "DeHashed", + "description": "Breach search engine", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "💰 Paid", + "raw": "💰 Paid" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "DeHashed" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "depix", + "name": "Depix", + "description": "Recover pixelated text from screenshots", + "category": "image-facial", + "url": "https://github.com/beurtschipper/Depix", + "install": { + "method": "git", + "kali": "`git clone https://github.com/beurtschipper/Depix`", + "raw": "`git clone https://github.com/beurtschipper/Depix`" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Depix" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "digital-footprint-check", + "name": "Digital Footprint Check", + "description": "Free username check on hundreds of sites", + "category": "username-social", + "url": "https://www.digitalfootprintcheck.com/free-checker.html", + "install": { + "method": "web", + "kali": "", + "raw": "[www.digitalfootprintcheck.com](https://www.digitalfootprintcheck.com/free-checker.html)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "digital-shadows", + "name": "Digital Shadows SearchLight", + "description": "Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP)", + "category": "threat-intel-platforms", + "url": "https://www.reliaquest.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.reliaquest.com](https://www.reliaquest.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dirb", + "name": "Dirb", + "description": "Web directory brute-forcer", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install dirb`", + "raw": "`apt install dirb`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Dirb" + ], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "dirsearch", + "name": "dirsearch", + "description": "Web path scanner — advanced wordlist-based directory bruteforce", + "category": "domain-ip-network", + "url": "https://github.com/maurosoria/dirsearch", + "install": { + "method": "pip", + "kali": "pip3 install dirsearch", + "raw": "`pip3 install dirsearch`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "disboard", + "name": "Disboard", + "description": "Discord server discovery platform", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "Disboard", + "raw": "Disboard" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Disboard" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "disclose-io", + "name": "Disclose.io", + "description": "Standardized vulnerability-disclosure language and tools", + "category": "bug-bounty", + "url": "https://disclose.io", + "install": { + "method": "web", + "kali": "", + "raw": "[disclose.io](https://disclose.io)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "discord-history", + "name": "DiscordHistory", + "description": "Search public Discord servers and messages", + "category": "username-social", + "url": "https://disboard.org", + "install": { + "method": "web", + "kali": "", + "raw": "[disboard.org](https://disboard.org)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "discord-history-tracker", + "name": "Discord History Tracker", + "description": "Save Discord chat history", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "Discord History Tracker", + "raw": "Discord History Tracker" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Discord History Tracker" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "discord-lookup", + "name": "Discord Lookup", + "description": "Look up Discord user info via ID", + "category": "username-social", + "url": "https://discordlookup.com", + "install": { + "method": "web", + "kali": "", + "raw": "[discordlookup.com](https://discordlookup.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "discordbee", + "name": "DiscordBee", + "description": "Discord user and server search engine", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "DiscordBee", + "raw": "DiscordBee" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "DiscordBee" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "discordhub", + "name": "DiscordHub", + "description": "Discord user search platform", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "DiscordHub", + "raw": "DiscordHub" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "DiscordHub" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "dissect", + "name": "Dissect", + "description": "Fox-IT framework for fast forensic image analysis", + "category": "digital-forensics", + "url": "https://docs.dissect.tools", + "install": { + "method": "pip", + "kali": "pip3 install dissect", + "raw": "`pip3 install dissect`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dnsdumpster", + "name": "DNSDumpster", + "description": "DNS reconnaissance & mapping", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "DNSDumpster", + "raw": "DNSDumpster" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "DNSDumpster" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "dnshistory", + "name": "DNS History", + "description": "Historical DNS records lookup", + "category": "domain-ip-network", + "url": "https://dnshistory.org", + "install": { + "method": "web", + "kali": "", + "raw": "[dnshistory.org](https://dnshistory.org)" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dnsrecon", + "name": "dnsrecon", + "description": "DNS enumeration and reconnaissance", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install dnsrecon`", + "raw": "`pip install dnsrecon`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "dnsrecon" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "dnstwist", + "name": "dnstwist", + "description": "Domain name permutation engine for phishing detection", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install dnstwist`", + "raw": "`pip3 install dnstwist`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "dnstwist" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "documentcloud", + "name": "DocumentCloud", + "description": "Platform for analyzing, annotating, publishing documents", + "category": "document-metadata", + "url": "https://www.documentcloud.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.documentcloud.org](https://www.documentcloud.org)" + }, + "tags": [ + "document-metadata", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dork-cli", + "name": "dork-cli", + "description": "Run Google dorks from the command line", + "category": "search-dorking", + "url": "https://github.com/jgor/dork-cli", + "install": { + "method": "git", + "kali": "git clone https://github.com/jgor/dork-cli.git", + "raw": "`git clone https://github.com/jgor/dork-cli.git`" + }, + "tags": [ + "search-dorking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dorkgenius", + "name": "DorkGenius", + "description": "AI-powered search query generator for Google, Bing, DuckDuckGo", + "category": "search-dorking", + "url": "https://dorkgenius.com", + "install": { + "method": "web", + "kali": "", + "raw": "[dorkgenius.com](https://dorkgenius.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dorkgpt", + "name": "DorkGPT", + "description": "Generate Google Dorks with AI", + "category": "search-dorking", + "url": "", + "install": { + "method": "manual", + "kali": "DorkGPT", + "raw": "DorkGPT" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "DorkGPT" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "dorksearch", + "name": "DorkSearch", + "description": "Google dork search engine", + "category": "search-dorking", + "url": "", + "install": { + "method": "manual", + "kali": "DorkSearch", + "raw": "DorkSearch" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "DorkSearch" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "dorky-com", + "name": "Dorky", + "description": "Online dork builder for Google/Bing/DuckDuckGo", + "category": "search-dorking", + "url": "https://dorky.io", + "install": { + "method": "web", + "kali": "", + "raw": "[dorky.io](https://dorky.io)" + }, + "tags": [ + "search-dorking", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "duckduckgo-onion", + "name": "DuckDuckGo Onion", + "description": "Private search on Tor", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`", + "raw": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "dune", + "name": "Dune Analytics", + "description": "SQL queries over indexed blockchain data", + "category": "crypto-blockchain", + "url": "https://dune.com", + "install": { + "method": "web", + "kali": "", + "raw": "[dune.com](https://dune.com)" + }, + "tags": [ + "crypto-blockchain", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "dvwa", + "name": "DVWA", + "description": "Damn Vulnerable Web Application — classic appsec lab", + "category": "training-ctf", + "url": "https://github.com/digininja/DVWA", + "install": { + "method": "git", + "kali": "git clone https://github.com/digininja/DVWA.git", + "raw": "`git clone https://github.com/digininja/DVWA.git`" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "eclecticiq", + "name": "EclecticIQ Intelligence Center", + "description": "STIX/TAXII-native threat intel platform", + "category": "threat-intel-platforms", + "url": "https://www.eclecticiq.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.eclecticiq.com](https://www.eclecticiq.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "elk-elastic", + "name": "Elastic Stack (ELK)", + "description": "Elasticsearch + Logstash + Kibana — log analytics", + "category": "blue-team-defensive", + "url": "https://www.elastic.co/elastic-stack", + "install": { + "method": "docker", + "kali": "docker pull docker.elastic.co/elasticsearch/elasticsearch:latest", + "raw": "`docker pull docker.elastic.co/elasticsearch/elasticsearch:latest`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "elliptic", + "name": "Elliptic", + "description": "Crypto financial-crime detection and investigation", + "category": "crypto-blockchain", + "url": "https://www.elliptic.co", + "install": { + "method": "web", + "kali": "", + "raw": "[www.elliptic.co](https://www.elliptic.co)" + }, + "tags": [ + "crypto-blockchain", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "email-checker", + "name": "Email-Checker", + "description": "Email validation tool", + "category": "email-phone", + "url": "https://email-checker.net/", + "install": { + "method": "web", + "kali": "", + "raw": "[email-checker.net](https://email-checker.net/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "emailanalyzer", + "name": "EmailAnalyzer", + "description": "Analyze suspicious .eml files", + "category": "email-phone", + "url": "https://github.com/keraattin/EmailAnalyzer", + "install": { + "method": "git", + "kali": "`git clone https://github.com/keraattin/EmailAnalyzer`", + "raw": "`git clone https://github.com/keraattin/EmailAnalyzer`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "emailheader-analyzer", + "name": "EmailHeader-Analyzer", + "description": "CLI email header parser + OSINT", + "category": "email-phone", + "url": "https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`", + "raw": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "emailrep", + "name": "EmailRep", + "description": "Email address reputation and risk scoring", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "EmailRep", + "raw": "EmailRep" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "EmailRep" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "emailrep-io", + "name": "EmailRep.io", + "description": "Free email reputation API by Sublime Security", + "category": "email-phone", + "url": "https://emailrep.io", + "install": { + "method": "web", + "kali": "", + "raw": "[emailrep.io](https://emailrep.io)" + }, + "tags": [ + "email-phone", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "empire", + "name": "PowerShell Empire", + "description": "Post-exploitation framework with PS-based agents", + "category": "red-team-offensive", + "url": "https://github.com/BC-SECURITY/Empire", + "install": { + "method": "git", + "kali": "git clone https://github.com/BC-SECURITY/Empire.git", + "raw": "`git clone https://github.com/BC-SECURITY/Empire.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "epieos", + "name": "Epieos", + "description": "Get info linked to any email address", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "Epieos", + "raw": "Epieos" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Epieos" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "epieos-tools", + "name": "Epieos Tools", + "description": "Reverse-lookup email/phone for Google profile data", + "category": "people-identity", + "url": "https://tools.epieos.com", + "install": { + "method": "web", + "kali": "", + "raw": "[tools.epieos.com](https://tools.epieos.com)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "epstein-exposed", + "name": "Epstein Exposed", + "description": "Searchable database of 2M+ DOJ Epstein case docs and network graphs", + "category": "document-metadata", + "url": "https://epsteinexposed.com", + "install": { + "method": "web", + "kali": "", + "raw": "[epsteinexposed.com](https://epsteinexposed.com)" + }, + "tags": [ + "document-metadata", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "eric-zimmerman-tools", + "name": "Eric Zimmerman's Tools", + "description": "Suite of free Windows DFIR utilities", + "category": "digital-forensics", + "url": "https://ericzimmerman.github.io", + "install": { + "method": "web", + "kali": "", + "raw": "[ericzimmerman.github.io](https://ericzimmerman.github.io)" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "etda-apt", + "name": "ETDA APT Groups", + "description": "Search threat-actor groups and their tools", + "category": "malware-threat-intel", + "url": "https://apt.etda.or.th/cgi-bin/listgroups.cgi", + "install": { + "method": "web", + "kali": "", + "raw": "[apt.etda.or.th](https://apt.etda.or.th/cgi-bin/listgroups.cgi)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "etherscan", + "name": "Etherscan", + "description": "Ethereum blockchain explorer", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "Etherscan", + "raw": "Etherscan" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Etherscan" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "etherscan-cli", + "name": "etherscan-py", + "description": "Python wrapper for Etherscan API", + "category": "crypto-blockchain", + "url": "https://github.com/pcko1/etherscan-python", + "install": { + "method": "pip", + "kali": "pip3 install etherscan-python", + "raw": "`pip3 install etherscan-python`" + }, + "tags": [ + "crypto-blockchain", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ettercap", + "name": "Ettercap", + "description": "MITM attack suite", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install ettercap-common`", + "raw": "`apt install ettercap-common`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "evil-winrm", + "name": "Evil-WinRM", + "description": "Ultimate WinRM shell for hacking/pentesting", + "category": "red-team-offensive", + "url": "https://github.com/Hackplayers/evil-winrm", + "install": { + "method": "apt", + "kali": "apt install evil-winrm", + "raw": "`apt install evil-winrm`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "evilginx2", + "name": "Evilginx2", + "description": "Man-in-the-middle reverse proxy", + "category": "people-identity", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/kgretzky/evilginx2@latest`", + "raw": "`go install github.com/kgretzky/evilginx2@latest`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "exiftool", + "name": "ExifTool", + "description": "Complete metadata extraction from images/docs", + "category": "image-facial", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install libimage-exiftool-perl`", + "raw": "`apt install libimage-exiftool-perl`" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "ExifTool" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "exploitdb", + "name": "ExploitDB", + "description": "Exploit database (searchsploit)", + "category": "domain-ip-network", + "url": "https://www.exploit-db.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[exploit-db.com](https://www.exploit-db.com/)" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "exportdata", + "name": "ExportData", + "description": "Historical tweet, follower, and trend export tool", + "category": "username-social", + "url": "https://www.exportdata.io", + "install": { + "method": "web", + "kali": "", + "raw": "[www.exportdata.io](https://www.exportdata.io)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "eyewitness", + "name": "EyeWitness", + "description": "Take screenshots of web pages", + "category": "misc", + "url": "https://github.com/RedSiege/EyeWitness", + "install": { + "method": "git", + "kali": "`git clone https://github.com/RedSiege/EyeWitness`", + "raw": "`git clone https://github.com/RedSiege/EyeWitness`" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "EyeWitness" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "f4map", + "name": "F4map", + "description": "3D interactive world map", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "F4map", + "raw": "F4map" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "F4map" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "facecheck.id", + "name": "FaceCheck.ID", + "description": "Face recognition search engine", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "FaceCheck.ID", + "raw": "FaceCheck.ID" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FaceCheck.ID" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "facerecognition", + "name": "facerecognition", + "description": "Python face recognition library", + "category": "image-facial", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install face_recognition`", + "raw": "`pip install face_recognition`" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "face_recognition", + "facerecognition" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "faceseek", + "name": "FaceSeek", + "description": "AI-powered reverse face search", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "FaceSeek", + "raw": "FaceSeek" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FaceSeek" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "fake-image-detector", + "name": "Fake Image Detector", + "description": "AI-based fake image detection", + "category": "image-facial", + "url": "https://www.fakeimagedetector.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[fakeimagedetector.com](https://www.fakeimagedetector.com/)" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "falco", + "name": "Falco", + "description": "Cloud-native runtime security", + "category": "blue-team-defensive", + "url": "https://falco.org", + "install": { + "method": "git", + "kali": "git clone https://github.com/falcosecurity/falco.git", + "raw": "`git clone https://github.com/falcosecurity/falco.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "familytreenow", + "name": "FamilyTreeNow", + "description": "Free genealogy search — addresses, phones, emails", + "category": "people-identity", + "url": "https://familytreenow.com", + "install": { + "method": "web", + "kali": "", + "raw": "[familytreenow.com](https://familytreenow.com)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "fastpeoplesearch", + "name": "FastPeopleSearch", + "description": "Free people finder", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "FastPeopleSearch", + "raw": "FastPeopleSearch" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FastPeopleSearch" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "faxvin", + "name": "FAXVIN", + "description": "Free VIN decoder and vehicle history", + "category": "vehicle-aviation-maritime", + "url": "", + "install": { + "method": "manual", + "kali": "FAXVIN", + "raw": "FAXVIN" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FAXVIN" + ], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "fern-wifi-cracker", + "name": "Fern Wifi Cracker", + "description": "GUI-based Wi-Fi audit tool", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install fern-wifi-cracker`", + "raw": "`apt install fern-wifi-cracker`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "feroxbuster", + "name": "Feroxbuster", + "description": "Fast recursive content discovery", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install feroxbuster`", + "raw": "`apt install feroxbuster`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "ffuf", + "name": "ffuf", + "description": "Fast Go-based web fuzzer — directory, parameter, vhost discovery", + "category": "domain-ip-network", + "url": "https://github.com/ffuf/ffuf", + "install": { + "method": "go", + "kali": "go install github.com/ffuf/ffuf/v2@latest", + "raw": "`go install github.com/ffuf/ffuf/v2@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "filesec", + "name": "Filesec.io", + "description": "Catalog of malicious file extensions, risks, OS-level mitigations", + "category": "malware-threat-intel", + "url": "https://filesec.io", + "install": { + "method": "web", + "kali": "", + "raw": "[filesec.io](https://filesec.io)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "finalrecon", + "name": "FinalRecon", + "description": "The last web recon tool you'll need", + "category": "frameworks", + "url": "https://github.com/thewhiteh4t/FinalRecon", + "install": { + "method": "git", + "kali": "`git clone https://github.com/thewhiteh4t/FinalRecon`", + "raw": "`git clone https://github.com/thewhiteh4t/FinalRecon`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "FinalRecon" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "findomain", + "name": "Findomain", + "description": "Cross-platform subdomain enumerator with monitoring features", + "category": "domain-ip-network", + "url": "https://github.com/Findomain/Findomain", + "install": { + "method": "git", + "kali": "git clone https://github.com/Findomain/Findomain.git", + "raw": "`git clone https://github.com/Findomain/Findomain.git`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "firmadyne", + "name": "Firmadyne", + "description": "Automated and scalable system for firmware emulation", + "category": "hardware-hacking", + "url": "https://github.com/firmadyne/firmadyne", + "install": { + "method": "git", + "kali": "git clone https://github.com/firmadyne/firmadyne.git", + "raw": "`git clone https://github.com/firmadyne/firmadyne.git`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "firms", + "name": "FIRMS", + "description": "NASA fire/thermal hotspots", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "FIRMS", + "raw": "FIRMS" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FIRMS" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "firmwalker", + "name": "firmwalker", + "description": "Script for searching extracted firmware filesystems", + "category": "hardware-hacking", + "url": "https://github.com/craigz28/firmwalker", + "install": { + "method": "git", + "kali": "git clone https://github.com/craigz28/firmwalker.git", + "raw": "`git clone https://github.com/craigz28/firmwalker.git`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "flashpoint", + "name": "Flashpoint", + "description": "Business risk intel from criminal forums and dark web", + "category": "threat-intel-platforms", + "url": "https://flashpoint.io", + "install": { + "method": "web", + "kali": "", + "raw": "[flashpoint.io](https://flashpoint.io)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "flashrom", + "name": "flashrom", + "description": "Tool for identifying/reading/writing flash chips", + "category": "hardware-hacking", + "url": "https://www.flashrom.org", + "install": { + "method": "apt", + "kali": "apt install flashrom", + "raw": "`apt install flashrom`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "flickr-search", + "name": "Flickr", + "description": "Photo-sharing — geosearch + license + camera EXIF intact", + "category": "image-facial", + "url": "https://www.flickr.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.flickr.com](https://www.flickr.com)" + }, + "tags": [ + "image-facial", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "flightaware", + "name": "FlightAware", + "description": "Flight tracking and data platform", + "category": "vehicle-aviation-maritime", + "url": "", + "install": { + "method": "manual", + "kali": "FlightAware", + "raw": "FlightAware" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "FlightAware" + ], + "sections_seen": [ + "Vehicle, Aviation & Maritime" + ], + "archived": false + }, + { + "id": "flightradar24", + "name": "FlightRadar24", + "description": "Real-time flight tracking", + "category": "vehicle-aviation-maritime", + "url": "", + "install": { + "method": "manual", + "kali": "FlightRadar24", + "raw": "FlightRadar24" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "FlightRadar24" + ], + "sections_seen": [ + "Vehicle, Aviation & Maritime" + ], + "archived": false + }, + { + "id": "flipper-zero", + "name": "Flipper Zero", + "description": "Multi-tool for pentesters and geeks — RF/RFID/NFC/IR/GPIO", + "category": "hardware-hacking", + "url": "https://flipperzero.one", + "install": { + "method": "web", + "kali": "", + "raw": "[flipperzero.one](https://flipperzero.one)" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "fluxion", + "name": "Fluxion", + "description": "Wi-Fi social engineering (evil twin)", + "category": "domain-ip-network", + "url": "https://github.com/FluxionNetwork/fluxion", + "install": { + "method": "git", + "kali": "`git clone https://github.com/FluxionNetwork/fluxion`", + "raw": "`git clone https://github.com/FluxionNetwork/fluxion`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "foca", + "name": "FOCA", + "description": "Metadata extraction from documents", + "category": "image-facial", + "url": "https://github.com/ElevenPaths/FOCA", + "install": { + "method": "git", + "kali": "`git clone https://github.com/ElevenPaths/FOCA`", + "raw": "`git clone https://github.com/ElevenPaths/FOCA`" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FOCA" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "fofa", + "name": "FOFA", + "description": "Asset search and analysis tool", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "FOFA", + "raw": "FOFA" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "FOFA" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "foia.gov", + "name": "FOIA.gov", + "description": "Freedom of Information Act portal", + "category": "vehicle-aviation-maritime", + "url": "https://foia.gov/", + "install": { + "method": "web", + "kali": "", + "raw": "[foia.gov](https://foia.gov/)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "foller-me", + "name": "Foller.me", + "description": "Twitter analytics — bio, languages, hashtags, mentions", + "category": "username-social", + "url": "https://foller.me", + "install": { + "method": "web", + "kali": "", + "raw": "[foller.me](https://foller.me)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "foremost", + "name": "Foremost", + "description": "File carving (recover deleted files)", + "category": "document-metadata", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install foremost`", + "raw": "`apt install foremost`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Foremost" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "forensically", + "name": "Forensically", + "description": "Online image forensics suite", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Forensically", + "raw": "Forensically" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Forensically" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "forensicallybeta", + "name": "Forensically Beta", + "description": "Online image forensics — clone detection, level sweep", + "category": "image-facial", + "url": "https://29a.ch/photo-forensics", + "install": { + "method": "web", + "kali": "", + "raw": "[29a.ch](https://29a.ch/photo-forensics)" + }, + "tags": [ + "image-facial", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "fotoforensics", + "name": "FotoForensics", + "description": "Image forensic analysis (ELA)", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "FotoForensics", + "raw": "FotoForensics" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "FotoForensics" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "frida", + "name": "Frida", + "description": "Dynamic instrumentation toolkit", + "category": "iot-devices", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install frida-tools`", + "raw": "`pip install frida-tools`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "fsociety", + "name": "fsociety", + "description": "Mr. Robot-inspired hacking framework", + "category": "frameworks", + "url": "https://github.com/Manisso/fsociety", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Manisso/fsociety`", + "raw": "`git clone https://github.com/Manisso/fsociety`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "fsociety" + ], + "sections_seen": [ + "Termux Hacking Toolkit (Complete)" + ], + "archived": false + }, + { + "id": "ftk-imager", + "name": "FTK Imager", + "description": "Forensic disk imaging tool by AccessData", + "category": "digital-forensics", + "url": "https://www.exterro.com/ftk-imager", + "install": { + "method": "web", + "kali": "", + "raw": "[www.exterro.com](https://www.exterro.com/ftk-imager)" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "fullcontact", + "name": "FullContact", + "description": "Identity-resolution API and person enrichment", + "category": "people-identity", + "url": "https://www.fullcontact.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.fullcontact.com](https://www.fullcontact.com)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "fullhunt", + "name": "FullHunt", + "description": "External attack surface management", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "FullHunt", + "raw": "FullHunt" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "FullHunt" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "gau", + "name": "gau (getallurls)", + "description": "Fetch URLs from AlienVault OTX, Wayback, Common Crawl, URLScan", + "category": "domain-ip-network", + "url": "https://github.com/lc/gau", + "install": { + "method": "go", + "kali": "go install github.com/lc/gau/v2/cmd/gau@latest", + "raw": "`go install github.com/lc/gau/v2/cmd/gau@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "geocreepy", + "name": "Geocreepy", + "description": "Geolocation aggregator — pulls geotagged posts across networks", + "category": "geolocation", + "url": "http://www.geocreepy.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.geocreepy.com](http://www.geocreepy.com)" + }, + "tags": [ + "geolocation", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "geoguessr", + "name": "GeoGuessr", + "description": "Geolocation training game", + "category": "geolocation", + "url": "https://geoguessr.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[geoguessr.com](https://geoguessr.com/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "geohints", + "name": "GeoHints", + "description": "Browser-based satellite/streetview geolocation training & investigation", + "category": "geolocation", + "url": "https://geohints.com", + "install": { + "method": "web", + "kali": "", + "raw": "[geohints.com](https://geohints.com)" + }, + "tags": [ + "geolocation", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "geospy", + "name": "GeoSpy", + "description": "AI-powered image geolocation", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "GeoSpy", + "raw": "GeoSpy" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "GeoSpy" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "geospy-pro", + "name": "GeoSpy Pro", + "description": "Premium AI image geolocation by Graylark", + "category": "geolocation", + "url": "https://geospy.ai/pro", + "install": { + "method": "web", + "kali": "", + "raw": "[geospy.ai](https://geospy.ai/pro)" + }, + "tags": [ + "geolocation", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "get-metadata", + "name": "Get-Metadata.com", + "description": "Online EXIF extractor — handles .DOCX/.PDF too", + "category": "document-metadata", + "url": "https://www.get-metadata.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.get-metadata.com](https://www.get-metadata.com)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "getcontact", + "name": "GetContact", + "description": "See how number is saved by others", + "category": "email-phone", + "url": "https://getcontact.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[getcontact.com](https://getcontact.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "getnotify", + "name": "GetNotify", + "description": "Email open tracking + geolocation", + "category": "email-phone", + "url": "https://getnotify.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[getnotify.com](https://getnotify.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "GetNotify" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "gf-tomnomnom", + "name": "gf", + "description": "Wrapper around grep with patterns for bug-bounty workflow", + "category": "domain-ip-network", + "url": "https://github.com/tomnomnom/gf", + "install": { + "method": "go", + "kali": "go install github.com/tomnomnom/gf@latest", + "raw": "`go install github.com/tomnomnom/gf@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ghauri", + "name": "Ghauri", + "description": "Advanced cross-platform tool to detect/exploit SQLi", + "category": "red-team-offensive", + "url": "https://github.com/r0oth3x49/ghauri", + "install": { + "method": "git", + "kali": "git clone https://github.com/r0oth3x49/ghauri.git", + "raw": "`git clone https://github.com/r0oth3x49/ghauri.git`" + }, + "tags": [ + "red-team-offensive", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ghdb", + "name": "Google Hacking Database (GHDB)", + "description": "Index of dorks for finding publicly exposed info", + "category": "search-dorking", + "url": "https://www.exploit-db.com/google-hacking-database", + "install": { + "method": "web", + "kali": "", + "raw": "[www.exploit-db.com](https://www.exploit-db.com/google-hacking-database)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ghidra", + "name": "Ghidra", + "description": "NSA's open-source software reverse engineering suite", + "category": "digital-forensics", + "url": "https://ghidra-sre.org", + "install": { + "method": "git", + "kali": "git clone https://github.com/NationalSecurityAgency/ghidra.git", + "raw": "`git clone https://github.com/NationalSecurityAgency/ghidra.git`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ghiro", + "name": "Ghiro", + "description": "Automated digital image forensics", + "category": "image-facial", + "url": "https://www.getghiro.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.getghiro.org](https://www.getghiro.org)" + }, + "tags": [ + "image-facial", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ghunt", + "name": "GHunt", + "description": "Investigate Google emails and documents", + "category": "email-phone", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install ghunt`", + "raw": "`pip3 install ghunt`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "GHunt" + ], + "sections_seen": [ + "Email & Phone Intelligence" + ], + "archived": false + }, + { + "id": "githound", + "name": "git-hound", + "description": "Find sensitive data exposed via GitHub code search", + "category": "document-metadata", + "url": "https://github.com/tillson/git-hound", + "install": { + "method": "go", + "kali": "go install github.com/tillson/git-hound@latest", + "raw": "`go install github.com/tillson/git-hound@latest`" + }, + "tags": [ + "document-metadata", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "github_monitor", + "name": "github_monitor", + "description": "Real-time tracking of GitHub user activity and repo changes", + "category": "username-social", + "url": "https://github.com/misiektoja/github_monitor", + "install": { + "method": "git", + "kali": "git clone https://github.com/misiektoja/github_monitor.git", + "raw": "`git clone https://github.com/misiektoja/github_monitor.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "gitleaks", + "name": "gitleaks", + "description": "Detect secrets, credentials, and API keys in git repos", + "category": "document-metadata", + "url": "https://github.com/gitleaks/gitleaks", + "install": { + "method": "go", + "kali": "go install github.com/gitleaks/gitleaks/v8@latest", + "raw": "`go install github.com/gitleaks/gitleaks/v8@latest`" + }, + "tags": [ + "document-metadata", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "gitrecon", + "name": "Gitrecon", + "description": "GitHub OSINT reconnaissance", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install gitrecon`", + "raw": "`pip install gitrecon`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Gitrecon" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "gnu-radio", + "name": "GNU Radio", + "description": "Toolkit for building software-defined radio systems", + "category": "hardware-hacking", + "url": "https://www.gnuradio.org", + "install": { + "method": "apt", + "kali": "apt install gnuradio", + "raw": "`apt install gnuradio`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "gobuster", + "name": "Gobuster", + "description": "URI/DNS brute-forcer (Go)", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/OJ/gobuster/v3@latest`", + "raw": "`go install github.com/OJ/gobuster/v3@latest`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "goldeneye", + "name": "GoldenEye", + "description": "HTTP DoS tool (authorized load testing)", + "category": "domain-ip-network", + "url": "https://github.com/jseidl/GoldenEye", + "install": { + "method": "git", + "kali": "`git clone https://github.com/jseidl/GoldenEye`", + "raw": "`git clone https://github.com/jseidl/GoldenEye`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "goofuzz", + "name": "GooFuzz", + "description": "Google dorking fuzzer", + "category": "search-dorking", + "url": "https://github.com/m3n0sd0n4ld/GooFuzz", + "install": { + "method": "git", + "kali": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`", + "raw": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "GooFuzz" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "google-alerts", + "name": "Google Alerts", + "description": "Free web monitoring", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Searcher Platforms" + ], + "archived": false + }, + { + "id": "google-earth-pro", + "name": "Google Earth Pro", + "description": "Advanced satellite imagery", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "Google Earth Pro", + "raw": "Google Earth Pro" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Google Earth Pro" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "google-gemini", + "name": "Google Gemini", + "description": "Google AI with web search", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "google-hacking-db", + "name": "Google Hacking DB", + "description": "Exploit-DB Google dork database", + "category": "search-dorking", + "url": "", + "install": { + "method": "manual", + "kali": "Google Hacking DB", + "raw": "Google Hacking DB" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Google Hacking DB" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "google-reverse-image", + "name": "Google Reverse Image", + "description": "Google image search", + "category": "image-facial", + "url": "https://images.google.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[images.google.com](https://images.google.com/)" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "googleguide", + "name": "Google Guide Advanced Operators", + "description": "Reference for Google search operators", + "category": "search-dorking", + "url": "http://www.googleguide.com/advanced_operators_reference.html", + "install": { + "method": "web", + "kali": "", + "raw": "[www.googleguide.com](http://www.googleguide.com/advanced_operators_reference.html)" + }, + "tags": [ + "search-dorking", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "gophish", + "name": "Gophish", + "description": "Enterprise phishing simulation platform", + "category": "people-identity", + "url": "https://getgophish.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[getgophish.com](https://getgophish.com/)" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "gosearch", + "name": "GoSearch", + "description": "Fast username search tool in Go", + "category": "username-social", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/ibnaleem/gosearch@latest`", + "raw": "`go install github.com/ibnaleem/gosearch@latest`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "GoSearch" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "gospider", + "name": "GoSpider", + "description": "Fast Go web spider for crawling/audit", + "category": "domain-ip-network", + "url": "https://github.com/jaeles-project/gospider", + "install": { + "method": "go", + "kali": "go install github.com/jaeles-project/gospider@latest", + "raw": "`go install github.com/jaeles-project/gospider@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "gowitness", + "name": "gowitness", + "description": "Modern Go-based web screenshot utility (Aquatone successor)", + "category": "domain-ip-network", + "url": "https://github.com/sensepost/gowitness", + "install": { + "method": "go", + "kali": "go install github.com/sensepost/gowitness@latest", + "raw": "`go install github.com/sensepost/gowitness@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "gqrx", + "name": "Gqrx SDR", + "description": "Software-defined radio receiver GUI", + "category": "hardware-hacking", + "url": "https://gqrx.dk", + "install": { + "method": "apt", + "kali": "apt install gqrx-sdr", + "raw": "`apt install gqrx-sdr`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "grabify", + "name": "Grabify", + "description": "IP grabber & URL shortener", + "category": "geolocation", + "url": "https://grabify.link/", + "install": { + "method": "web", + "kali": "", + "raw": "[grabify.link](https://grabify.link/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "IP Tracking & Geolocation Links" + ], + "archived": false + }, + { + "id": "grayhatwarfare", + "name": "GrayhatWarfare", + "description": "Index of open Amazon S3 buckets — find exposed cloud data", + "category": "domain-ip-network", + "url": "https://grayhatwarfare.com", + "install": { + "method": "web", + "kali": "", + "raw": "[grayhatwarfare.com](https://grayhatwarfare.com)" + }, + "tags": [ + "domain-ip-network", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "graylog", + "name": "Graylog", + "description": "Open-source log management / SIEM", + "category": "blue-team-defensive", + "url": "https://www.graylog.org", + "install": { + "method": "docker", + "kali": "docker pull graylog/graylog:latest", + "raw": "`docker pull graylog/graylog:latest`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "grep.app", + "name": "Grep.app", + "description": "Search code across all public GitHub repos", + "category": "search-dorking", + "url": "", + "install": { + "method": "manual", + "kali": "Grep.app", + "raw": "Grep.app" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Grep.app" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "greynoise", + "name": "GreyNoise", + "description": "Search exposed internet assets and malicious IPs", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "GreyNoise", + "raw": "GreyNoise" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "GreyNoise" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "greynoise-cli", + "name": "GreyNoise CLI", + "description": "Command-line tool for GreyNoise mass-scanner intel", + "category": "iot-devices", + "url": "https://github.com/GreyNoise-Intelligence/pygreynoise", + "install": { + "method": "pip", + "kali": "pip3 install greynoise", + "raw": "`pip3 install greynoise`" + }, + "tags": [ + "iot-devices", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "greynoise-viz", + "name": "GreyNoise Visualizer", + "description": "Tells you which IPs are noise vs targeted threats", + "category": "iot-devices", + "url": "https://viz.greynoise.io", + "install": { + "method": "web", + "kali": "", + "raw": "[viz.greynoise.io](https://viz.greynoise.io)" + }, + "tags": [ + "iot-devices", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "grok", + "name": "Grok", + "description": "Real-time X/Twitter data", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free on X", + "raw": "✅ Free on X" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "gxss-tomnomnom", + "name": "Gxss", + "description": "Test parameters for cross-site scripting reflection", + "category": "red-team-offensive", + "url": "https://github.com/KathanP19/Gxss", + "install": { + "method": "go", + "kali": "go install github.com/KathanP19/Gxss@latest", + "raw": "`go install github.com/KathanP19/Gxss@latest`" + }, + "tags": [ + "red-team-offensive", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "h8mail", + "name": "h8mail", + "description": "Email OSINT & breach hunting", + "category": "email-phone", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install h8mail`", + "raw": "`pip install h8mail`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "h8mail" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "hacker101", + "name": "Hacker101", + "description": "Free HackerOne course library and CTF", + "category": "training-ctf", + "url": "https://www.hacker101.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.hacker101.com](https://www.hacker101.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hackerone", + "name": "HackerOne", + "description": "Largest bug-bounty platform — public and private programs", + "category": "bug-bounty", + "url": "https://hackerone.com", + "install": { + "method": "web", + "kali": "", + "raw": "[hackerone.com](https://hackerone.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hacking-art-of-exploitation", + "name": "Hacking: The Art of Exploitation (book)", + "description": "Classic by Jon Erickson — low-level attack fundamentals", + "category": "learning-resources", + "url": "https://nostarch.com/hacking2.htm", + "install": { + "method": "web", + "kali": "", + "raw": "[nostarch.com](https://nostarch.com/hacking2.htm)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hackingtool", + "name": "Hackingtool", + "description": "All-in-one hacking tool (100+ categories)", + "category": "frameworks", + "url": "https://github.com/Z4nzu/hackingtool", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Z4nzu/hackingtool`", + "raw": "`git clone https://github.com/Z4nzu/hackingtool`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Hackingtool" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "hackrf", + "name": "HackRF One", + "description": "SDR transceiver covering 1 MHz to 6 GHz", + "category": "hardware-hacking", + "url": "https://greatscottgadgets.com/hackrf/", + "install": { + "method": "apt", + "kali": "apt install hackrf", + "raw": "`apt install hackrf`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hackthebox", + "name": "Hack The Box", + "description": "Online pentesting labs and CTFs", + "category": "training-ctf", + "url": "https://www.hackthebox.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.hackthebox.com](https://www.hackthebox.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hacktricks", + "name": "HackTricks", + "description": "Pentesting / hacking knowledge base by carlospolop", + "category": "red-team-offensive", + "url": "https://book.hacktricks.xyz", + "install": { + "method": "web", + "kali": "", + "raw": "[book.hacktricks.xyz](https://book.hacktricks.xyz)" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hacktrophy", + "name": "HackTrophy", + "description": "European bug-bounty platform", + "category": "bug-bounty", + "url": "https://hacktrophy.com", + "install": { + "method": "web", + "kali": "", + "raw": "[hacktrophy.com](https://hacktrophy.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hak5-tools", + "name": "Hak5 Tools (Bash Bunny, Rubber Ducky, Wi-Fi Pineapple)", + "description": "Premium offensive hardware tools", + "category": "hardware-hacking", + "url": "https://shop.hak5.org", + "install": { + "method": "web", + "kali": "", + "raw": "[shop.hak5.org](https://shop.hak5.org)" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hakrawler", + "name": "hakrawler", + "description": "Fast Go web crawler for endpoint and asset discovery", + "category": "domain-ip-network", + "url": "https://github.com/hakluke/hakrawler", + "install": { + "method": "go", + "kali": "go install github.com/hakluke/hakrawler@latest", + "raw": "`go install github.com/hakluke/hakrawler@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "harpa-ai", + "name": "HARPA AI", + "description": "AI browser agent for OSINT", + "category": "misc", + "url": "https://harpa.ai/", + "install": { + "method": "web", + "kali": "", + "raw": "[harpa.ai](https://harpa.ai/)" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "harpoon", + "name": "Harpoon", + "description": "CLI tool for OSINT investigations", + "category": "frameworks", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install harpoon`", + "raw": "`pip3 install harpoon`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Harpoon" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "hashcat", + "name": "Hashcat", + "description": "Advanced password recovery (GPU-accelerated)", + "category": "data-breach", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install hashcat`", + "raw": "`apt install hashcat`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Hashcat" + ], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "hashlookup-circl", + "name": "CIRCL Hashlookup", + "description": "Free public hashlookup for known software files", + "category": "malware-threat-intel", + "url": "https://www.circl.lu/services/hashlookup", + "install": { + "method": "web", + "kali": "", + "raw": "[www.circl.lu](https://www.circl.lu/services/hashlookup)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "have-i-been-pwned", + "name": "Have I Been Pwned", + "description": "Check email/phone in breaches", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟢 Free", + "raw": "🟢 Free" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Have I Been Pwned" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "haveibeenransom", + "name": "HIB Ransomed", + "description": "Check if your data has been leaked by ransomware groups", + "category": "data-breach", + "url": "https://haveibeenransom.com", + "install": { + "method": "web", + "kali": "", + "raw": "[haveibeenransom.com](https://haveibeenransom.com)" + }, + "tags": [ + "data-breach", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "haveibeenzuckered", + "name": "haveibeenzuckered", + "description": "Check if a phone number is in the 533M Facebook breach", + "category": "data-breach", + "url": "https://haveibeenzuckered.com", + "install": { + "method": "web", + "kali": "", + "raw": "[haveibeenzuckered.com](https://haveibeenzuckered.com)" + }, + "tags": [ + "data-breach", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "havoc", + "name": "Havoc", + "description": "Modern, malleable post-exploitation C2 framework", + "category": "red-team-offensive", + "url": "https://github.com/HavocFramework/Havoc", + "install": { + "method": "git", + "kali": "git clone https://github.com/HavocFramework/Havoc.git", + "raw": "`git clone https://github.com/HavocFramework/Havoc.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hayabusa", + "name": "Hayabusa", + "description": "Windows event log fast forensics timeline generator", + "category": "blue-team-defensive", + "url": "https://github.com/Yamato-Security/hayabusa", + "install": { + "method": "git", + "kali": "git clone https://github.com/Yamato-Security/hayabusa.git", + "raw": "`git clone https://github.com/Yamato-Security/hayabusa.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "haystak", + "name": "Haystak", + "description": "Dark web search with filtering", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`", + "raw": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Haystak" + ], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "hcxtools", + "name": "hcxtools", + "description": "Wi-Fi packet capture conversion", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install hcxtools`", + "raw": "`apt install hcxtools`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "hidden-wiki", + "name": "The Hidden Wiki", + "description": "Curated directory of dark-web sites (mirror-dependent)", + "category": "dark-web", + "url": "https://thehiddenwiki.org", + "install": { + "method": "web", + "kali": "", + "raw": "[thehiddenwiki.org](https://thehiddenwiki.org)" + }, + "tags": [ + "dark-web", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hive-moderation", + "name": "Hive Moderation", + "description": "AI content detection", + "category": "image-facial", + "url": "https://hivemoderation.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[hivemoderation.com](https://hivemoderation.com/)" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "hlr-lookups", + "name": "Hlr-Lookups", + "description": "HLR phone number lookup", + "category": "email-phone", + "url": "https://www.hlr-lookups.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[hlr-lookups.com](https://www.hlr-lookups.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "holehe", + "name": "Holehe", + "description": "Check if email is registered on 120+ sites", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install holehe`", + "raw": "`pip install holehe`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Holehe" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "hootsuite", + "name": "Hootsuite", + "description": "Social media management", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Searcher Platforms" + ], + "archived": false + }, + { + "id": "httprobe", + "name": "httprobe", + "description": "Take a list of domains and probe for working HTTP/HTTPS", + "category": "domain-ip-network", + "url": "https://github.com/tomnomnom/httprobe", + "install": { + "method": "go", + "kali": "go install github.com/tomnomnom/httprobe@latest", + "raw": "`go install github.com/tomnomnom/httprobe@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "httpx", + "name": "HTTPx", + "description": "Fast HTTP toolkit / probing", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`", + "raw": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "HTTPx" + ], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "hudson-rock", + "name": "Hudson Rock", + "description": "Free infostealer-compromise check tools (domain/email/IP)", + "category": "people-identity", + "url": "https://www.hudsonrock.com/free-tools", + "install": { + "method": "web", + "kali": "", + "raw": "[www.hudsonrock.com](https://www.hudsonrock.com/free-tools)" + }, + "tags": [ + "people-identity", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hudson-rock-cavalier", + "name": "Hudson Rock Cavalier", + "description": "Infostealer intelligence & breach data", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Hudson Rock Cavalier" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "huggingchat", + "name": "HuggingChat", + "description": "Open-source AI chat", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "hunter.how", + "name": "Hunter.how", + "description": "Internet asset search and discovery", + "category": "iot-devices", + "url": "", + "install": { + "method": "manual", + "kali": "Hunter.how", + "raw": "Hunter.how" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Hunter.how" + ], + "sections_seen": [ + "IoT & Device Intelligence" + ], + "archived": false + }, + { + "id": "hunter.io", + "name": "Hunter.io", + "description": "Find professional email addresses by domain", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "Hunter.io", + "raw": "Hunter.io" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Hunter.io" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "hybrid-analysis", + "name": "Hybrid Analysis", + "description": "Free advanced malware analysis service by CrowdStrike", + "category": "malware-threat-intel", + "url": "https://www.hybrid-analysis.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.hybrid-analysis.com](https://www.hybrid-analysis.com)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "hydra", + "name": "Hydra", + "description": "Network login brute-forcer", + "category": "data-breach", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install hydra`", + "raw": "`apt install hydra`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Hydra" + ], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "icij-offshore-leaks", + "name": "ICIJ Offshore Leaks", + "description": "Panama/Pandora/Paradise Papers", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "ICIJ Offshore Leaks", + "raw": "ICIJ Offshore Leaks" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "ICIJ Offshore Leaks" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "ida-free", + "name": "IDA Free", + "description": "Free version of IDA disassembler/decompiler", + "category": "digital-forensics", + "url": "https://hex-rays.com/ida-free/", + "install": { + "method": "web", + "kali": "", + "raw": "[hex-rays.com](https://hex-rays.com/ida-free/)" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "idcrawl", + "name": "IDCrawl", + "description": "Free people search engine", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "IDCrawl", + "raw": "IDCrawl" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "IDCrawl" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "ignorant", + "name": "Ignorant", + "description": "Check phone registrations on sites", + "category": "email-phone", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install ignorant`", + "raw": "`pip install ignorant`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Ignorant" + ], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "ikyourdad", + "name": "IKnowYour.Dad", + "description": "Data breach search engine", + "category": "data-breach", + "url": "https://iknowyour.dad", + "install": { + "method": "web", + "kali": "", + "raw": "[iknowyour.dad](https://iknowyour.dad)" + }, + "tags": [ + "data-breach", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "illuminarty", + "name": "Illuminarty", + "description": "AI image detection", + "category": "image-facial", + "url": "https://illuminarty.ai/", + "install": { + "method": "web", + "kali": "", + "raw": "[illuminarty.ai](https://illuminarty.ai/)" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "imgur-search", + "name": "Imgur", + "description": "Image hosting — meme tracing and reverse search", + "category": "image-facial", + "url": "https://imgur.com", + "install": { + "method": "web", + "kali": "", + "raw": "[imgur.com](https://imgur.com)" + }, + "tags": [ + "image-facial", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "immersivelabs", + "name": "Immersive Labs", + "description": "Cyber skills platform with hands-on exercises", + "category": "training-ctf", + "url": "https://www.immersivelabs.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.immersivelabs.com](https://www.immersivelabs.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "immunefi", + "name": "Immunefi", + "description": "Web3 / crypto-focused bug bounty platform", + "category": "bug-bounty", + "url": "https://immunefi.com", + "install": { + "method": "web", + "kali": "", + "raw": "[immunefi.com](https://immunefi.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "impacket", + "name": "Impacket", + "description": "Python classes for working with network protocols (Windows attacks)", + "category": "red-team-offensive", + "url": "https://github.com/fortra/impacket", + "install": { + "method": "pip", + "kali": "pip3 install impacket", + "raw": "`pip3 install impacket`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "infoga", + "name": "Infoga", + "description": "Email OSINT gathering", + "category": "email-phone", + "url": "https://github.com/m4ll0k/Infoga", + "install": { + "method": "git", + "kali": "`git clone https://github.com/m4ll0k/Infoga`", + "raw": "`git clone https://github.com/m4ll0k/Infoga`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Infoga" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "insecam", + "name": "Insecam", + "description": "Live cameras directory", + "category": "iot-devices", + "url": "", + "install": { + "method": "manual", + "kali": "Insecam", + "raw": "Insecam" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Insecam" + ], + "sections_seen": [ + "IoT & Device Intelligence" + ], + "archived": false + }, + { + "id": "instagram_monitor", + "name": "instagram_monitor", + "description": "Real-time tracking of Instagram users with email alerts and CSV logs", + "category": "username-social", + "url": "https://github.com/misiektoja/instagram_monitor", + "install": { + "method": "git", + "kali": "git clone https://github.com/misiektoja/instagram_monitor.git", + "raw": "`git clone https://github.com/misiektoja/instagram_monitor.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "instaloader", + "name": "Instaloader", + "description": "Instagram data downloader", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install instaloader`", + "raw": "`pip install instaloader`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "instant-username-search", + "name": "Instant Username Search", + "description": "Real-time username availability checker", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "Instant Username Search", + "raw": "Instant Username Search" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Instant Username Search" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "intel-471", + "name": "Intel 471", + "description": "Cybercrime intelligence platform", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "manual", + "kali": "Intel 471", + "raw": "Intel 471" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Intel 471" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "intel471", + "name": "Intel471", + "description": "Premium adversary intelligence and underground monitoring platform", + "category": "threat-intel-platforms", + "url": "https://intel471.com", + "install": { + "method": "web", + "kali": "", + "raw": "[intel471.com](https://intel471.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "intelligence-x", + "name": "Intelligence X", + "description": "Search breaches, darknet, leaks", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "💰 Paid", + "raw": "💰 Paid" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Intelligence X" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "intelx", + "name": "Intelligence X (intelx.io)", + "description": "Selective archive search — emails, leaks, paste sites, dark-web", + "category": "search-dorking", + "url": "https://intelx.io", + "install": { + "method": "web", + "kali": "", + "raw": "[intelx.io](https://intelx.io)" + }, + "tags": [ + "search-dorking", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "interlace", + "name": "Interlace", + "description": "Easily turn single-threaded CLI apps into multi-threaded jobs", + "category": "domain-ip-network", + "url": "https://github.com/codingo/Interlace", + "install": { + "method": "git", + "kali": "git clone https://github.com/codingo/Interlace.git", + "raw": "`git clone https://github.com/codingo/Interlace.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "intigriti", + "name": "Intigriti", + "description": "European bug-bounty platform with fast triage", + "category": "bug-bounty", + "url": "https://www.intigriti.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.intigriti.com](https://www.intigriti.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "intsights", + "name": "IntSights", + "description": "External threat protection and intel (now part of Rapid7)", + "category": "threat-intel-platforms", + "url": "https://intsights.com", + "install": { + "method": "web", + "kali": "", + "raw": "[intsights.com](https://intsights.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "investigo", + "name": "Investigo", + "description": "Username checker (Go-based)", + "category": "username-social", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/tdh8316/investigo@latest`", + "raw": "`go install github.com/tdh8316/investigo@latest`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Investigo" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "invid", + "name": "InVID", + "description": "Video verification toolkit (browser extension)", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "InVID", + "raw": "InVID" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "InVID" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "ip-api", + "name": "IP-API", + "description": "IP geolocation API", + "category": "geolocation", + "url": "http://ip-api.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[ip-api.com](http://ip-api.com/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "IP Tracking & Geolocation Links" + ], + "archived": false + }, + { + "id": "ipgeolocation", + "name": "IPGeoLocation", + "description": "IP address geolocation", + "category": "domain-ip-network", + "url": "https://github.com/maldevel/IPGeoLocation", + "install": { + "method": "git", + "kali": "`git clone https://github.com/maldevel/IPGeoLocation`", + "raw": "`git clone https://github.com/maldevel/IPGeoLocation`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "IPGeoLocation" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "ipinfo", + "name": "IPinfo", + "description": "IP address data & geolocation", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "IPinfo", + "raw": "IPinfo" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "IPinfo" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "iplogger", + "name": "IPLogger", + "description": "IP logging URL shortener", + "category": "geolocation", + "url": "https://iplogger.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[iplogger.org](https://iplogger.org/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "IP Tracking & Geolocation Links" + ], + "archived": false + }, + { + "id": "ippsec-rocks", + "name": "IppSec.rocks", + "description": "Indexed walkthroughs of HackTheBox machines (video)", + "category": "learning-resources", + "url": "https://ippsec.rocks", + "install": { + "method": "web", + "kali": "", + "raw": "[ippsec.rocks](https://ippsec.rocks)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ivpn", + "name": "IVPN", + "description": "Privacy-first VPN — open-source, audited, no email signup", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Website", + "raw": "Website" + }, + "tags": [ + "vpn-privacy", + "free-tier:Paid only — included for privacy excellence", + "open-source:✅", + "no-log:✅", + "protocols:WireGuard, OpenVPN" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "IVPN" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "jadx", + "name": "jadx", + "description": "Android APK decompiler (GUI)", + "category": "iot-devices", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install jadx`", + "raw": "`apt install jadx`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "joe-sandbox", + "name": "Joe Sandbox", + "description": "Deep automated malware analysis (free tier)", + "category": "malware-threat-intel", + "url": "https://www.joesandbox.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.joesandbox.com](https://www.joesandbox.com)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "john-hammond", + "name": "John Hammond", + "description": "Cybersecurity YouTube — CTFs, malware, walkthroughs", + "category": "learning-resources", + "url": "https://www.youtube.com/@_JohnHammond", + "install": { + "method": "web", + "kali": "", + "raw": "[www.youtube.com](https://www.youtube.com/@_JohnHammond)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "john-the-ripper", + "name": "John the Ripper", + "description": "Classic password cracker", + "category": "data-breach", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install john`", + "raw": "`apt install john`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "John the Ripper" + ], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "jsfinder", + "name": "JSFinder", + "description": "Find JS files referenced from a URL — endpoints / API paths", + "category": "domain-ip-network", + "url": "https://github.com/Threezh1/JSFinder", + "install": { + "method": "git", + "kali": "git clone https://github.com/Threezh1/JSFinder.git", + "raw": "`git clone https://github.com/Threezh1/JSFinder.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "juice-shop", + "name": "OWASP Juice Shop", + "description": "Modern, intentionally insecure web app — covers OWASP Top 10", + "category": "training-ctf", + "url": "https://github.com/juice-shop/juice-shop", + "install": { + "method": "docker", + "kali": "docker pull bkimminich/juice-shop", + "raw": "`docker pull bkimminich/juice-shop`" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "kagi", + "name": "Kagi Search", + "description": "Premium privacy-respecting search engine, no ads, no tracking", + "category": "search-dorking", + "url": "https://kagi.com", + "install": { + "method": "web", + "kali": "", + "raw": "[kagi.com](https://kagi.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "kape", + "name": "KAPE", + "description": "Kroll Artifact Parser and Extractor — fast triage collection", + "category": "digital-forensics", + "url": "https://www.kroll.com/kape", + "install": { + "method": "web", + "kali": "", + "raw": "[www.kroll.com](https://www.kroll.com/kape)" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "kartaview", + "name": "KartaView", + "description": "Street-level imagery (OpenStreetCam)", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "KartaView", + "raw": "KartaView" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "KartaView" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "katana", + "name": "Katana", + "description": "Web crawler", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`", + "raw": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "keepassxc", + "name": "KeePassXC", + "description": "Offline password manager", + "category": "vpn-privacy", + "url": "https://keepassxc.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[keepassxc.org](https://keepassxc.org/)" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "kela", + "name": "KELA", + "description": "Cybercrime intelligence and dark-web monitoring", + "category": "threat-intel-platforms", + "url": "https://kelacyber.com", + "install": { + "method": "web", + "kali": "", + "raw": "[kelacyber.com](https://kelacyber.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "kerbrute", + "name": "Kerbrute", + "description": "Tool for performing Kerberos pre-auth bruteforcing", + "category": "red-team-offensive", + "url": "https://github.com/ropnop/kerbrute", + "install": { + "method": "go", + "kali": "go install github.com/ropnop/kerbrute@latest", + "raw": "`go install github.com/ropnop/kerbrute@latest`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "king-phisher", + "name": "King Phisher", + "description": "Phishing campaign toolkit", + "category": "people-identity", + "url": "https://github.com/rsmusllp/king-phisher", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher)" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "kismet", + "name": "Kismet", + "description": "Wireless network detector & sniffer", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install kismet`", + "raw": "`apt install kismet`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "kiterunner", + "name": "kiterunner", + "description": "Contextual content-discovery for modern API endpoints", + "category": "red-team-offensive", + "url": "https://github.com/assetnote/kiterunner", + "install": { + "method": "go", + "kali": "go install github.com/assetnote/kiterunner/cmd/kr@latest", + "raw": "`go install github.com/assetnote/kiterunner/cmd/kr@latest`" + }, + "tags": [ + "red-team-offensive", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "knock", + "name": "knock", + "description": "Domain knock — security testing via DNS", + "category": "domain-ip-network", + "url": "https://github.com/guelfoweb/knock", + "install": { + "method": "git", + "kali": "git clone https://github.com/guelfoweb/knock.git", + "raw": "`git clone https://github.com/guelfoweb/knock.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "knockpy", + "name": "Knockpy", + "description": "Subdomain enumeration scan with virtual host discovery", + "category": "domain-ip-network", + "url": "https://github.com/guelfoweb/knock", + "install": { + "method": "pip", + "kali": "pip3 install knock-subdomains", + "raw": "`pip3 install knock-subdomains`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "knowem", + "name": "KnowEm", + "description": "Username search on 500+ sites", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "KnowEm", + "raw": "KnowEm" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "KnowEm" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "lantern", + "name": "Lantern", + "description": "Free censorship circumvention tool — peer-to-peer", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Website", + "raw": "Website" + }, + "tags": [ + "vpn-privacy", + "free-tier:500MB/month free", + "open-source:✅", + "no-log:⚠️", + "protocols:Proprietary" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Lantern" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "lazagne", + "name": "LaZagne", + "description": "Credentials recovery tool (post-exploit)", + "category": "data-breach", + "url": "https://github.com/AlessandroZ/LaZagne", + "install": { + "method": "git", + "kali": "`git clone https://github.com/AlessandroZ/LaZagne`", + "raw": "`git clone https://github.com/AlessandroZ/LaZagne`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "leakcheck", + "name": "LeakCheck", + "description": "Email/username/phone breach search", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "LeakCheck" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "leakpeek", + "name": "LeakPeek", + "description": "Search leaked databases", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "LeakPeek" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "lei-search", + "name": "LEI Search", + "description": "Legal Entity Identifier lookup", + "category": "company-business", + "url": "https://search.gleif.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[search.gleif.org](https://search.gleif.org/)" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "lenso.ai", + "name": "Lenso.ai", + "description": "Reverse image search with facial recognition", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Lenso.ai", + "raw": "Lenso.ai" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Lenso.ai" + ], + "sections_seen": [ + "Image & Facial Recognition" + ], + "archived": false + }, + { + "id": "linkedin2username", + "name": "linkedin2username", + "description": "Generate usernames from a target's LinkedIn employees", + "category": "people-identity", + "url": "https://github.com/initstring/linkedin2username", + "install": { + "method": "git", + "kali": "git clone https://github.com/initstring/linkedin2username.git", + "raw": "`git clone https://github.com/initstring/linkedin2username.git`" + }, + "tags": [ + "people-identity", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "linkedindumper", + "name": "LinkedInDumper", + "description": "Dump/scrape company employees from LinkedIn API", + "category": "username-social", + "url": "https://github.com/l4rm4nd/LinkedInDumper", + "install": { + "method": "git", + "kali": "git clone https://github.com/l4rm4nd/LinkedInDumper.git", + "raw": "`git clone https://github.com/l4rm4nd/LinkedInDumper.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "linkfinder", + "name": "LinkFinder", + "description": "Discover endpoints in JavaScript", + "category": "domain-ip-network", + "url": "https://github.com/GerbenJavado/LinkFinder", + "install": { + "method": "git", + "kali": "`git clone https://github.com/GerbenJavado/LinkFinder`", + "raw": "`git clone https://github.com/GerbenJavado/LinkFinder`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "linux-for-osint-cipher387", + "name": "Linux for OSINT (cipher387)", + "description": "21-day Linux-for-OSINT course (free)", + "category": "learning-resources", + "url": "https://github.com/cipher387/linux-for-OSINT-21-days", + "install": { + "method": "git", + "kali": "git clone https://github.com/cipher387/linux-for-OSINT-21-days.git", + "raw": "`git clone https://github.com/cipher387/linux-for-OSINT-21-days.git`" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "liveoverflow", + "name": "LiveOverflow", + "description": "Hacking and security YouTube — deep technical content", + "category": "learning-resources", + "url": "https://www.youtube.com/@LiveOverflow", + "install": { + "method": "web", + "kali": "", + "raw": "[www.youtube.com](https://www.youtube.com/@LiveOverflow)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "loki-yara", + "name": "Loki", + "description": "Simple IOC and YARA scanner by Florian Roth", + "category": "blue-team-defensive", + "url": "https://github.com/Neo23x0/Loki", + "install": { + "method": "git", + "kali": "git clone https://github.com/Neo23x0/Loki.git", + "raw": "`git clone https://github.com/Neo23x0/Loki.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mac-changer", + "name": "MAC Changer", + "description": "Change/spoof MAC address", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install macchanger`", + "raw": "`apt install macchanger`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "MAC Changer" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "maigret", + "name": "Maigret", + "description": "Advanced username search across 3000+ sites with reports", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install maigret`", + "raw": "`pip install maigret`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Maigret" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "mailheaderdetective", + "name": "MailHeaderDetective", + "description": "Email header forensics", + "category": "email-phone", + "url": "https://github.com/akajhon/MailHeaderDetective", + "install": { + "method": "git", + "kali": "`git clone https://github.com/akajhon/MailHeaderDetective`", + "raw": "`git clone https://github.com/akajhon/MailHeaderDetective`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "mailtoanalyzer", + "name": "mailtoanalyzer", + "description": "Email exposure analysis", + "category": "email-phone", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install mailto-analyzer`", + "raw": "`pip install mailto-analyzer`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "malpedia", + "name": "Malpedia", + "description": "Threat-actor groups, malware families, and analysis by Fraunhofer", + "category": "malware-threat-intel", + "url": "https://malpedia.caad.fkie.fraunhofer.de", + "install": { + "method": "web", + "kali": "", + "raw": "[malpedia.caad.fkie.fraunhofer.de](https://malpedia.caad.fkie.fraunhofer.de)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "malshare", + "name": "MalShare", + "description": "Free malware sample repository for researchers", + "category": "malware-threat-intel", + "url": "https://malshare.com", + "install": { + "method": "web", + "kali": "", + "raw": "[malshare.com](https://malshare.com)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "maltego", + "name": "Maltego", + "description": "Visual OSINT link analysis platform", + "category": "frameworks", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install maltego`", + "raw": "`apt install maltego`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Maltego" + ], + "sections_seen": [ + "Kali Linux OSINT Toolkit" + ], + "archived": false + }, + { + "id": "malwarebazaar", + "name": "MalwareBazaar", + "description": "Search & download confirmed malware samples", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "manual", + "kali": "MalwareBazaar", + "raw": "MalwareBazaar" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "MalwareBazaar" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "mandiant-advantage", + "name": "Mandiant Advantage", + "description": "Threat intel from Google's Mandiant team", + "category": "threat-intel-platforms", + "url": "https://www.mandiant.com/advantage", + "install": { + "method": "web", + "kali": "", + "raw": "[www.mandiant.com](https://www.mandiant.com/advantage)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mapillary", + "name": "Mapillary", + "description": "Street-level imagery", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "Mapillary", + "raw": "Mapillary" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Mapillary" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "marinetraffic", + "name": "MarineTraffic", + "description": "Real-time ship tracking", + "category": "vehicle-aviation-maritime", + "url": "", + "install": { + "method": "manual", + "kali": "MarineTraffic", + "raw": "MarineTraffic" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "MarineTraffic" + ], + "sections_seen": [ + "Vehicle, Aviation & Maritime" + ], + "archived": false + }, + { + "id": "masscan", + "name": "Masscan", + "description": "Fastest internet port scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install masscan`", + "raw": "`apt install masscan`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Masscan" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "massdns", + "name": "massdns", + "description": "High-performance DNS stub resolver for bulk lookups", + "category": "domain-ip-network", + "url": "https://github.com/blechschmidt/massdns", + "install": { + "method": "git", + "kali": "git clone https://github.com/blechschmidt/massdns.git", + "raw": "`git clone https://github.com/blechschmidt/massdns.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "maxar", + "name": "Maxar", + "description": "Commercial satellite imagery", + "category": "geolocation", + "url": "https://maxar.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[maxar.com](https://maxar.com/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "maxmind-geoip", + "name": "MaxMind GeoIP", + "description": "IP geolocation database", + "category": "geolocation", + "url": "https://maxmind.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[maxmind.com](https://maxmind.com/)" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "IP Tracking & Geolocation Links" + ], + "archived": false + }, + { + "id": "medusa", + "name": "Medusa", + "description": "Parallel brute-force tool", + "category": "data-breach", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install medusa`", + "raw": "`apt install medusa`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "meg-tomnomnom", + "name": "meg", + "description": "Fetch many paths for many hosts without flooding", + "category": "domain-ip-network", + "url": "https://github.com/tomnomnom/meg", + "install": { + "method": "go", + "kali": "go install github.com/tomnomnom/meg@latest", + "raw": "`go install github.com/tomnomnom/meg@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "memento-time-travel", + "name": "Memento Time Travel", + "description": "Federated search across multiple web archives", + "category": "document-metadata", + "url": "https://timetravel.mementoweb.org", + "install": { + "method": "web", + "kali": "", + "raw": "[timetravel.mementoweb.org](https://timetravel.mementoweb.org)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mention", + "name": "Mention", + "description": "Social media monitoring", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Mention" + ], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "merlin", + "name": "Merlin", + "description": "Cross-platform HTTP/2 post-exploitation server and agent in Go", + "category": "red-team-offensive", + "url": "https://github.com/Ne0nd0g/merlin", + "install": { + "method": "go", + "kali": "go install github.com/Ne0nd0g/merlin@latest", + "raw": "`go install github.com/Ne0nd0g/merlin@latest`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "metadata2go", + "name": "Metadata2Go", + "description": "Free online metadata extractor for any file", + "category": "document-metadata", + "url": "https://www.metadata2go.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.metadata2go.com](https://www.metadata2go.com)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "metadefender-cloud", + "name": "MetaDefender Cloud", + "description": "Multi-engine file/URL/IP scanning by OPSWAT", + "category": "malware-threat-intel", + "url": "https://metadefender.com", + "install": { + "method": "web", + "kali": "", + "raw": "[metadefender.com](https://metadefender.com)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "metagoofil", + "name": "Metagoofil", + "description": "Document metadata harvester from public docs", + "category": "document-metadata", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install metagoofil`", + "raw": "`pip install metagoofil`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Metagoofil" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "metasleuth", + "name": "MetaSleuth", + "description": "Free + paid crypto transaction tracing tool", + "category": "crypto-blockchain", + "url": "https://metasleuth.io", + "install": { + "method": "web", + "kali": "", + "raw": "[metasleuth.io](https://metasleuth.io)" + }, + "tags": [ + "crypto-blockchain", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "metasploit", + "name": "Metasploit", + "description": "Industry-standard pen testing framework", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install metasploit-framework`", + "raw": "`apt install metasploit-framework`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Metasploit" + ], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "metasploit-framework", + "name": "Metasploit Framework", + "description": "Industry-standard exploitation framework with 2000+ modules", + "category": "red-team-offensive", + "url": "https://github.com/rapid7/metasploit-framework", + "install": { + "method": "apt", + "kali": "apt install metasploit-framework", + "raw": "`apt install metasploit-framework`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "metasploitable", + "name": "Metasploitable", + "description": "Intentionally vulnerable Linux VM for Metasploit practice", + "category": "training-ctf", + "url": "https://docs.rapid7.com/metasploit/metasploitable-2/", + "install": { + "method": "web", + "kali": "", + "raw": "[docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "microsoft-copilot", + "name": "Microsoft Copilot", + "description": "AI with Bing search integration", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "mimikatz", + "name": "Mimikatz", + "description": "Windows credential dumper", + "category": "data-breach", + "url": "https://github.com/gentilkiwi/mimikatz", + "install": { + "method": "git", + "kali": "`git clone https://github.com/gentilkiwi/mimikatz`", + "raw": "`git clone https://github.com/gentilkiwi/mimikatz`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "misp", + "name": "MISP", + "description": "Malware Information Sharing Platform", + "category": "malware-threat-intel", + "url": "https://github.com/MISP/MISP", + "install": { + "method": "git", + "kali": "`git clone https://github.com/MISP/MISP`", + "raw": "`git clone https://github.com/MISP/MISP`" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "MISP" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "misp-galaxy", + "name": "MISP Galaxy", + "description": "Adversary group identification used by SOCs/ISACs", + "category": "malware-threat-intel", + "url": "https://www.misp-galaxy.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.misp-galaxy.org](https://www.misp-galaxy.org)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mitaka", + "name": "Mitaka", + "description": "Browser extension for OSINT — extract IoCs from highlighted text", + "category": "frameworks", + "url": "https://github.com/ninoseki/mitaka", + "install": { + "method": "git", + "kali": "git clone https://github.com/ninoseki/mitaka.git", + "raw": "`git clone https://github.com/ninoseki/mitaka.git`" + }, + "tags": [ + "frameworks", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mitre-attack", + "name": "MITRE ATT&CK", + "description": "Adversary tactics, techniques, and procedures knowledge base", + "category": "blue-team-defensive", + "url": "https://attack.mitre.org", + "install": { + "method": "web", + "kali": "", + "raw": "[attack.mitre.org](https://attack.mitre.org)" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mitre-d3fend", + "name": "MITRE D3FEND", + "description": "Defensive countermeasure knowledge graph", + "category": "blue-team-defensive", + "url": "https://d3fend.mitre.org", + "install": { + "method": "web", + "kali": "", + "raw": "[d3fend.mitre.org](https://d3fend.mitre.org)" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mobsf", + "name": "MobSF", + "description": "Mobile Security Framework (static+dynamic)", + "category": "iot-devices", + "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF)" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "modlishka", + "name": "Modlishka", + "description": "Reverse proxy phishing framework", + "category": "people-identity", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/drk1wi/Modlishka@latest`", + "raw": "`go install github.com/drk1wi/Modlishka@latest`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "mojeek", + "name": "Mojeek", + "description": "Independent search engine that doesn't track users", + "category": "search-dorking", + "url": "https://www.mojeek.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.mojeek.com](https://www.mojeek.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mr.holmes", + "name": "Mr.Holmes", + "description": "OSINT investigation tool", + "category": "people-identity", + "url": "https://github.com/Lucksi/Mr.Holmes", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Lucksi/Mr.Holmes`", + "raw": "`git clone https://github.com/Lucksi/Mr.Holmes`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Mr.Holmes" + ], + "sections_seen": [ + "People & Identity OSINT" + ], + "archived": false + }, + { + "id": "msfpc", + "name": "MSFPC", + "description": "MSF payload creator", + "category": "iot-devices", + "url": "https://github.com/g0tmi1k/msfpc", + "install": { + "method": "git", + "kali": "`git clone https://github.com/g0tmi1k/msfpc`", + "raw": "`git clone https://github.com/g0tmi1k/msfpc`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "mullvad-vpn", + "name": "Mullvad VPN", + "description": "Privacy-first VPN — no email needed, cash accepted", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install mullvad-vpn`", + "raw": "`apt install mullvad-vpn`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Mullvad VPN" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "mxtoolbox", + "name": "MXToolbox", + "description": "Email header analysis & DNS checks", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "MXToolbox", + "raw": "MXToolbox" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "MXToolbox" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "mylnikov-geolocation", + "name": "Mylnikov Geolocation", + "description": "BSSID/Wi-Fi MAC to coordinates lookup", + "category": "geolocation", + "url": "https://www.mylnikov.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.mylnikov.org](https://www.mylnikov.org)" + }, + "tags": [ + "geolocation", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "mythic", + "name": "Mythic", + "description": "Cross-platform, post-exploit, multi-user red team framework", + "category": "red-team-offensive", + "url": "https://github.com/its-a-feature/Mythic", + "install": { + "method": "git", + "kali": "git clone https://github.com/its-a-feature/Mythic.git", + "raw": "`git clone https://github.com/its-a-feature/Mythic.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "naabu", + "name": "Naabu", + "description": "Fast Go-based port scanner from ProjectDiscovery", + "category": "domain-ip-network", + "url": "https://github.com/projectdiscovery/naabu", + "install": { + "method": "go", + "kali": "go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest", + "raw": "`go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "nahamsec", + "name": "NahamSec", + "description": "Bug bounty and offensive security YouTube content", + "category": "learning-resources", + "url": "https://www.youtube.com/@nahamsec", + "install": { + "method": "web", + "kali": "", + "raw": "[www.youtube.com](https://www.youtube.com/@nahamsec)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "namecheckr", + "name": "Name Checkr", + "description": "Check domain and username across many platforms", + "category": "username-social", + "url": "https://www.namecheckr.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.namecheckr.com](https://www.namecheckr.com)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "namecheckup", + "name": "Name Checkup", + "description": "Check username availability across social media", + "category": "username-social", + "url": "https://namecheckup.com", + "install": { + "method": "web", + "kali": "", + "raw": "[namecheckup.com](https://namecheckup.com)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "namechk", + "name": "Namechk", + "description": "Username & domain availability checker", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "Namechk", + "raw": "Namechk" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Namechk" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "nameketchup", + "name": "NameKetchup", + "description": "Check domain + username on popular social media", + "category": "username-social", + "url": "https://nameketchup.com", + "install": { + "method": "web", + "kali": "", + "raw": "[nameketchup.com](https://nameketchup.com)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "national-cellular-directory", + "name": "National Cellular Directory", + "description": "Phone owner lookup", + "category": "email-phone", + "url": "https://www.nationalcellulardirectory.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "naver", + "name": "Naver", + "description": "South Korean search engine — local content not on Google", + "category": "search-dorking", + "url": "https://www.naver.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.naver.com](https://www.naver.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "nerdydata", + "name": "NerdyData", + "description": "Search engine for source code across the public web", + "category": "search-dorking", + "url": "https://nerdydata.com", + "install": { + "method": "web", + "kali": "", + "raw": "[nerdydata.com](https://nerdydata.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "netcat", + "name": "Netcat", + "description": "The TCP/IP swiss army knife", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install netcat-openbsd`", + "raw": "`apt install netcat-openbsd`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "netcraft", + "name": "Netcraft Site Report", + "description": "Web technology, hosting history, takedown service", + "category": "domain-ip-network", + "url": "https://sitereport.netcraft.com", + "install": { + "method": "web", + "kali": "", + "raw": "[sitereport.netcraft.com](https://sitereport.netcraft.com)" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "netexec", + "name": "NetExec (nxc)", + "description": "CrackMapExec maintained successor — AD network exploitation", + "category": "red-team-offensive", + "url": "https://github.com/Pennyw0rth/NetExec", + "install": { + "method": "pip", + "kali": "pip3 install git+https://github.com/Pennyw0rth/NetExec", + "raw": "`pip3 install git+https://github.com/Pennyw0rth/NetExec`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "netlas-cookbook", + "name": "Netlas Cookbook", + "description": "Free OSINT automation cookbook", + "category": "learning-resources", + "url": "https://academy.netlas.io", + "install": { + "method": "web", + "kali": "", + "raw": "[academy.netlas.io](https://academy.netlas.io)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "netlas.io", + "name": "Netlas.io", + "description": "Internet scanning and intelligence", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Netlas.io", + "raw": "Netlas.io" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Netlas.io" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "nexfil", + "name": "NExfil", + "description": "Find profiles by username on various platforms", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install nexfil`", + "raw": "`pip install nexfil`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "NExfil" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "nexphisher", + "name": "NexPhisher", + "description": "Multi-platform phishing tool", + "category": "people-identity", + "url": "https://github.com/htr-tech/nexphisher", + "install": { + "method": "git", + "kali": "`git clone https://github.com/htr-tech/nexphisher`", + "raw": "`git clone https://github.com/htr-tech/nexphisher`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "NexPhisher" + ], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "nicb-vincheck", + "name": "NICB VINCheck", + "description": "Stolen vehicle check", + "category": "vehicle-aviation-maritime", + "url": "https://www.nicb.org/vincheck", + "install": { + "method": "web", + "kali": "", + "raw": "[nicb.org/vincheck](https://www.nicb.org/vincheck)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "nighthawk", + "name": "Nighthawk", + "description": "Premium evasive C2 by MDSec (Cobalt Strike alt)", + "category": "red-team-offensive", + "url": "https://www.mdsec.co.uk/nighthawk/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/)" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "nikto", + "name": "Nikto", + "description": "Web server vulnerability scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install nikto`", + "raw": "`apt install nikto`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Nikto" + ], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "nmap", + "name": "Nmap", + "description": "Network scanner & mapper", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install nmap`", + "raw": "`apt install nmap`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Nmap" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "nosqlmap", + "name": "NoSQLMap", + "description": "Automated NoSQL database enumeration and exploitation", + "category": "red-team-offensive", + "url": "https://github.com/codingo/NoSQLMap", + "install": { + "method": "git", + "kali": "git clone https://github.com/codingo/NoSQLMap.git", + "raw": "`git clone https://github.com/codingo/NoSQLMap.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "notebooklm", + "name": "NotebookLM", + "description": "Google's document analysis AI", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "nuclei", + "name": "Nuclei", + "description": "Template-based fast vulnerability scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`", + "raw": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Nuclei" + ], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "nuclei-templates", + "name": "Nuclei Templates", + "description": "Community-curated templates for Nuclei", + "category": "red-team-offensive", + "url": "https://github.com/projectdiscovery/nuclei-templates", + "install": { + "method": "git", + "kali": "git clone https://github.com/projectdiscovery/nuclei-templates.git", + "raw": "`git clone https://github.com/projectdiscovery/nuclei-templates.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "numlookup", + "name": "NumLookup", + "description": "Free reverse phone lookup", + "category": "email-phone", + "url": "https://www.numlookup.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[numlookup.com](https://www.numlookup.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "numverify", + "name": "NumVerify", + "description": "Phone number validation API", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "NumVerify", + "raw": "NumVerify" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "NumVerify" + ], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "objection", + "name": "Objection", + "description": "Runtime mobile exploration", + "category": "iot-devices", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install objection`", + "raw": "`pip install objection`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Mobile Hacking & Phone Exploitation" + ], + "archived": false + }, + { + "id": "oblivion-loseys", + "name": "Oblivion", + "description": "OSINT framework", + "category": "frameworks", + "url": "https://github.com/loseys/Oblivion", + "install": { + "method": "git", + "kali": "git clone https://github.com/loseys/Oblivion.git", + "raw": "`git clone https://github.com/loseys/Oblivion.git`" + }, + "tags": [ + "frameworks", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "odin-search", + "name": "ODIN", + "description": "Search hosts, CVEs, exposed buckets — 10 free searches/day", + "category": "domain-ip-network", + "url": "https://search.odin.io", + "install": { + "method": "web", + "kali": "", + "raw": "[search.odin.io](https://search.odin.io)" + }, + "tags": [ + "domain-ip-network", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "offensivesecurity-proving", + "name": "OffSec Proving Grounds", + "description": "OSCP-style training labs by Offensive Security", + "category": "training-ctf", + "url": "https://www.offsec.com/labs/individual/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.offsec.com](https://www.offsec.com/labs/individual/)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "offshoreleaks", + "name": "Offshore Leaks Database", + "description": "Panama/Pandora/Paradise Papers searchable database", + "category": "document-metadata", + "url": "https://offshoreleaks.icij.org", + "install": { + "method": "web", + "kali": "", + "raw": "[offshoreleaks.icij.org](https://offshoreleaks.icij.org)" + }, + "tags": [ + "document-metadata", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "onionland", + "name": "OnionLand Search", + "description": "Search engine for dark-web content", + "category": "dark-web", + "url": "https://onionlandsearchengine.com", + "install": { + "method": "web", + "kali": "", + "raw": "[onionlandsearchengine.com](https://onionlandsearchengine.com)" + }, + "tags": [ + "dark-web", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "onionscan", + "name": "OnionScan", + "description": "Scan & analyze .onion sites", + "category": "dark-web", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/s-rah/onionscan@latest`", + "raw": "`go install github.com/s-rah/onionscan@latest`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "OnionScan" + ], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "onionsearch", + "name": "OnionSearch", + "description": "Search .onion URLs from multiple engines", + "category": "dark-web", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install onionsearch`", + "raw": "`pip3 install onionsearch`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "OnionSearch" + ], + "sections_seen": [ + "Dark Web & Tor Intelligence" + ], + "archived": false + }, + { + "id": "onionshare", + "name": "OnionShare", + "description": "Anonymous file sharing via Tor", + "category": "vpn-privacy", + "url": "https://onionshare.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[onionshare.org](https://onionshare.org/)" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "onyphe", + "name": "ONYPHE", + "description": "OSINT engine indexing exposed assets", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "ONYPHE", + "raw": "ONYPHE" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "ONYPHE" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "oosint", + "name": "Open-Source Intelligence (Reverse Image)", + "description": "Yandex/Bing/TinEye combined reverse-image search", + "category": "image-facial", + "url": "https://oosint.com", + "install": { + "method": "web", + "kali": "", + "raw": "[oosint.com](https://oosint.com)" + }, + "tags": [ + "image-facial", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "openbugbounty", + "name": "Open Bug Bounty", + "description": "Free coordinated-disclosure platform", + "category": "bug-bounty", + "url": "https://www.openbugbounty.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.openbugbounty.org](https://www.openbugbounty.org)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "opencellid", + "name": "OpenCellID", + "description": "Largest public database of cell-tower IDs", + "category": "geolocation", + "url": "https://opencellid.org", + "install": { + "method": "web", + "kali": "", + "raw": "[opencellid.org](https://opencellid.org)" + }, + "tags": [ + "geolocation", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "opencorporates", + "name": "OpenCorporates", + "description": "Global corporate database", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "OpenCorporates", + "raw": "OpenCorporates" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "OpenCorporates" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "opencorporates-cli", + "name": "opencorporates-cli", + "description": "Command-line client for OpenCorporates API", + "category": "company-business", + "url": "https://github.com/octohedron/opencorporates", + "install": { + "method": "pip", + "kali": "pip3 install opencorporates", + "raw": "`pip3 install opencorporates`" + }, + "tags": [ + "company-business", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "opencti", + "name": "OpenCTI", + "description": "Open-source CTI platform structured around STIX2", + "category": "threat-intel-platforms", + "url": "https://www.opencti.io", + "install": { + "method": "docker", + "kali": "docker pull opencti/platform", + "raw": "`docker pull opencti/platform`" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "opencv", + "name": "OpenCV", + "description": "Computer vision library", + "category": "misc", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install opencv-python`", + "raw": "`pip install opencv-python`" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "openocd", + "name": "OpenOCD", + "description": "Open On-Chip Debugger — JTAG/SWD interface for embedded", + "category": "hardware-hacking", + "url": "https://openocd.org", + "install": { + "method": "apt", + "kali": "apt install openocd", + "raw": "`apt install openocd`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "openphish", + "name": "OpenPhish", + "description": "Live phishing URL feed", + "category": "malware-threat-intel", + "url": "https://openphish.com", + "install": { + "method": "web", + "kali": "", + "raw": "[openphish.com](https://openphish.com)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "openrailwaymap", + "name": "OpenRailwayMap", + "description": "Worldwide rail network map — rolling stock, infrastructure, signals", + "category": "vehicle-aviation-maritime", + "url": "https://www.openrailwaymap.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.openrailwaymap.org](https://www.openrailwaymap.org)" + }, + "tags": [ + "vehicle-aviation-maritime", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "opensanctions", + "name": "OpenSanctions", + "description": "Consolidated database of sanctioned entities across 200+ sources", + "category": "company-business", + "url": "https://opensanctions.org", + "install": { + "method": "web", + "kali": "", + "raw": "[opensanctions.org](https://opensanctions.org)" + }, + "tags": [ + "company-business", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "openstreetmap", + "name": "OpenStreetMap", + "description": "Free collaborative world map", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "OpenStreetMap", + "raw": "OpenStreetMap" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "OpenStreetMap" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "openvas", + "name": "OpenVAS", + "description": "Open-source vulnerability scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install openvas`", + "raw": "`apt install openvas`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "openvpn", + "name": "OpenVPN", + "description": "Industry-standard open-source VPN protocol", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install openvpn`", + "raw": "`apt install openvpn`" + }, + "tags": [ + "vpn-privacy", + "free-tier:Free open-source (self-hosted)", + "open-source:✅", + "no-log:✅", + "protocols:OpenVPN" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "OpenVPN" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "ophcrack", + "name": "Ophcrack", + "description": "Windows password cracker (rainbow tables)", + "category": "data-breach", + "url": "https://ophcrack.sourceforge.io/", + "install": { + "method": "web", + "kali": "", + "raw": "[ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/)" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "orbit", + "name": "Orbit", + "description": "Bitcoin address investigator", + "category": "company-business", + "url": "https://github.com/s0md3v/Orbit", + "install": { + "method": "git", + "kali": "`git clone https://github.com/s0md3v/Orbit`", + "raw": "`git clone https://github.com/s0md3v/Orbit`" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Orbit" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "osint-curious", + "name": "OSINT Curious", + "description": "Community blog, podcast, and learning resources", + "category": "learning-resources", + "url": "https://osintcurio.us", + "install": { + "method": "web", + "kali": "", + "raw": "[osintcurio.us](https://osintcurio.us)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "osint-framework", + "name": "OSINT Framework", + "description": "Visual map of all OSINT tools", + "category": "username-social", + "url": "https://osintframework.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[osintframework.com](https://osintframework.com/)" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "osint-framework-web", + "name": "OSINT Framework (Web)", + "description": "Visual map of all OSINT tools", + "category": "frameworks", + "url": "", + "install": { + "method": "manual", + "kali": "OSINT Framework (Web)", + "raw": "OSINT Framework (Web)" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "OSINT Framework (Web)" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "osint-industries", + "name": "OSINT Industries", + "description": "People search + social media lookup", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "OSINT Industries", + "raw": "OSINT Industries" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "OSINT Industries" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "osint-san", + "name": "OSINT-SAN", + "description": "OSINT Swiss Army Knife framework", + "category": "frameworks", + "url": "https://github.com/Bafomet666/OSINT-SAN", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Bafomet666/OSINT-SAN`", + "raw": "`git clone https://github.com/Bafomet666/OSINT-SAN`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "OSINT-SAN" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "osint-spy", + "name": "OSINT-SPY", + "description": "OSINT tool with Tor support", + "category": "dark-web", + "url": "https://github.com/SharadKumar97/OSINT-SPY", + "install": { + "method": "git", + "kali": "`git clone https://github.com/SharadKumar97/OSINT-SPY`", + "raw": "`git clone https://github.com/SharadKumar97/OSINT-SPY`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "osint-techniques", + "name": "OSINT Techniques", + "description": "Michael Bazzell's resources, books, and search tools", + "category": "learning-resources", + "url": "https://inteltechniques.com", + "install": { + "method": "web", + "kali": "", + "raw": "[inteltechniques.com](https://inteltechniques.com)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "osint-training", + "name": "Bellingcat's Online Investigations Toolkit", + "description": "Bellingcat-curated tools and methodology guide", + "category": "learning-resources", + "url": "https://www.bellingcat.com/resources/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.bellingcat.com](https://www.bellingcat.com/resources/)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "osintgram", + "name": "Osintgram", + "description": "Instagram OSINT tool", + "category": "username-social", + "url": "https://github.com/Datalux/Osintgram", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Datalux/Osintgram`", + "raw": "`git clone https://github.com/Datalux/Osintgram`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "osmedeus", + "name": "osmedeus", + "description": "Full automated reconnaissance workflow", + "category": "frameworks", + "url": "https://github.com/j3ssie/osmedeus", + "install": { + "method": "git", + "kali": "`git clone https://github.com/j3ssie/osmedeus`", + "raw": "`git clone https://github.com/j3ssie/osmedeus`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "osmedeus" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "osquery", + "name": "osquery", + "description": "SQL-powered OS instrumentation/monitoring/analytics", + "category": "blue-team-defensive", + "url": "https://osquery.io", + "install": { + "method": "apt", + "kali": "apt install osquery", + "raw": "`apt install osquery`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "osrframework", + "name": "OSRFramework", + "description": "Username research framework with multiple tools", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install osrframework`", + "raw": "`pip install osrframework`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "OSRFramework" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "outline-vpn", + "name": "Outline VPN", + "description": "Google Jigsaw's self-hosted VPN — censorship circumvention", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Website", + "raw": "Website" + }, + "tags": [ + "vpn-privacy", + "free-tier:Free (self-hosted)", + "open-source:✅", + "no-log:✅", + "protocols:Shadowsocks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Outline VPN" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "overpass-turbo", + "name": "Overpass Turbo", + "description": "OpenStreetMap data query", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "Overpass Turbo", + "raw": "Overpass Turbo" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Overpass Turbo" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "overthewire", + "name": "OverTheWire Wargames", + "description": "Free wargames for learning offensive security from scratch", + "category": "training-ctf", + "url": "https://overthewire.org", + "install": { + "method": "web", + "kali": "", + "raw": "[overthewire.org](https://overthewire.org)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "owasp-zap", + "name": "OWASP ZAP", + "description": "Open-source web app scanner", + "category": "domain-ip-network", + "url": "https://zaproxy.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[zaproxy.org](https://zaproxy.org/)" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "oxt", + "name": "OXT (OpenXt)", + "description": "Bitcoin transaction graph explorer with clustering", + "category": "crypto-blockchain", + "url": "https://oxt.me", + "install": { + "method": "web", + "kali": "", + "raw": "[oxt.me](https://oxt.me)" + }, + "tags": [ + "crypto-blockchain", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "oxt.me", + "name": "OXT.me", + "description": "Bitcoin transaction graph analysis", + "category": "crypto-blockchain", + "url": "", + "install": { + "method": "manual", + "kali": "OXT.me", + "raw": "OXT.me" + }, + "tags": [ + "crypto-blockchain" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "OXT.me" + ], + "sections_seen": [ + "Cryptocurrency & Blockchain" + ], + "archived": false + }, + { + "id": "pacer", + "name": "PACER", + "description": "US federal court records", + "category": "vehicle-aviation-maritime", + "url": "https://pacer.uscourts.gov/", + "install": { + "method": "web", + "kali": "", + "raw": "[pacer.uscourts.gov](https://pacer.uscourts.gov/)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "pagodo", + "name": "Pagodo", + "description": "Automated Google dorking tool", + "category": "search-dorking", + "url": "https://github.com/opsdisk/pagodo", + "install": { + "method": "git", + "kali": "`git clone https://github.com/opsdisk/pagodo`", + "raw": "`git clone https://github.com/opsdisk/pagodo`" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Pagodo" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "paramminer", + "name": "ParamMiner (Burp ext)", + "description": "Discover hidden, unlinked HTTP parameters in Burp", + "category": "red-team-offensive", + "url": "https://github.com/PortSwigger/param-miner", + "install": { + "method": "git", + "kali": "git clone https://github.com/PortSwigger/param-miner.git", + "raw": "`git clone https://github.com/PortSwigger/param-miner.git`" + }, + "tags": [ + "red-team-offensive", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "paramspider", + "name": "ParamSpider", + "description": "Parameter discovery from web archives", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install paramspider`", + "raw": "`pip install paramspider`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "passivedns-mnemonic", + "name": "Mnemonic Passive DNS", + "description": "Free passive-DNS query tool", + "category": "domain-ip-network", + "url": "https://passivedns.mnemonic.no", + "install": { + "method": "web", + "kali": "", + "raw": "[passivedns.mnemonic.no](https://passivedns.mnemonic.no)" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "passivetotal", + "name": "PassiveTotal (RiskIQ)", + "description": "Passive DNS, WHOIS, SSL cert pivots — now Microsoft Defender TI", + "category": "domain-ip-network", + "url": "https://community.riskiq.com", + "install": { + "method": "web", + "kali": "", + "raw": "[community.riskiq.com](https://community.riskiq.com)" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "payloadsallthethings", + "name": "PayloadsAllTheThings", + "description": "Web app pentest payloads, bypasses, and methodology", + "category": "red-team-offensive", + "url": "https://github.com/swisskyrepo/PayloadsAllTheThings", + "install": { + "method": "git", + "kali": "git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git", + "raw": "`git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "peekalink", + "name": "Peekalink", + "description": "Preview any URL — title, description, screenshot via API", + "category": "document-metadata", + "url": "https://www.peekalink.io", + "install": { + "method": "web", + "kali": "", + "raw": "[www.peekalink.io](https://www.peekalink.io)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pentest-tools-scanner", + "name": "Pentest-Tools Scanner", + "description": "Website vulnerability scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Pentest-Tools Scanner", + "raw": "Pentest-Tools Scanner" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Pentest-Tools Scanner" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "pentesterlab", + "name": "PentesterLab", + "description": "Hands-on web-app pentesting training", + "category": "training-ctf", + "url": "https://pentesterlab.com", + "install": { + "method": "web", + "kali": "", + "raw": "[pentesterlab.com](https://pentesterlab.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "perplexity-ai", + "name": "Perplexity AI", + "description": "AI search with cited sources", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ 5 Pro/day", + "raw": "✅ 5 Pro/day" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "petitpotam", + "name": "PetitPotam", + "description": "PoC tool to coerce Windows hosts to authenticate to attacker", + "category": "red-team-offensive", + "url": "https://github.com/topotam/PetitPotam", + "install": { + "method": "git", + "kali": "git clone https://github.com/topotam/PetitPotam.git", + "raw": "`git clone https://github.com/topotam/PetitPotam.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "phind", + "name": "Phind", + "description": "AI search for developers", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "phishstats", + "name": "PhishStats", + "description": "Live phishing intelligence feed and search", + "category": "malware-threat-intel", + "url": "https://phishstats.info", + "install": { + "method": "web", + "kali": "", + "raw": "[phishstats.info](https://phishstats.info)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "phishtank", + "name": "PhishTank", + "description": "Anti-phishing community — verified phishing URLs", + "category": "malware-threat-intel", + "url": "https://phishtank.org", + "install": { + "method": "web", + "kali": "", + "raw": "[phishtank.org](https://phishtank.org)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "phobos", + "name": "Phobos", + "description": "Dark web search engine", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`", + "raw": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "phonebook.cz", + "name": "Phonebook.cz", + "description": "Email, domain & URL search", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "Phonebook.cz", + "raw": "Phonebook.cz" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Phonebook.cz" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "phoneinfoga", + "name": "PhoneInfoga", + "description": "Advanced phone number scanner", + "category": "email-phone", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install phoneinfoga`", + "raw": "`pip install phoneinfoga`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "PhoneInfoga" + ], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "phonesploit", + "name": "PhoneSploit", + "description": "ADB-based phone exploitation", + "category": "email-phone", + "url": "https://github.com/aerosol-can/PhoneSploit", + "install": { + "method": "git", + "kali": "`git clone https://github.com/aerosol-can/PhoneSploit`", + "raw": "`git clone https://github.com/aerosol-can/PhoneSploit`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "PhoneSploit" + ], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "photon", + "name": "Photon", + "description": "Web crawler for OSINT data", + "category": "domain-ip-network", + "url": "https://github.com/s0md3v/Photon", + "install": { + "method": "git", + "kali": "`git clone https://github.com/s0md3v/Photon`", + "raw": "`git clone https://github.com/s0md3v/Photon`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "photorec", + "name": "PhotoRec", + "description": "File data recovery — focuses on multimedia", + "category": "digital-forensics", + "url": "https://www.cgsecurity.org/wiki/PhotoRec", + "install": { + "method": "apt", + "kali": "apt install testdisk", + "raw": "`apt install testdisk`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "picarta", + "name": "Picarta.ai", + "description": "AI-powered photo geolocation predictor", + "category": "geolocation", + "url": "https://picarta.ai", + "install": { + "method": "web", + "kali": "", + "raw": "[picarta.ai](https://picarta.ai)" + }, + "tags": [ + "geolocation", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "picoctf", + "name": "picoCTF", + "description": "Free CTF and learning platform built by CMU", + "category": "training-ctf", + "url": "https://picoctf.org", + "install": { + "method": "web", + "kali": "", + "raw": "[picoctf.org](https://picoctf.org)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pimeyes", + "name": "PimEyes", + "description": "Face search engine from photos", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "PimEyes", + "raw": "PimEyes" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "PimEyes" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "pinterest-search", + "name": "Pinterest", + "description": "Visual search engine — alternate reverse-image source", + "category": "image-facial", + "url": "https://www.pinterest.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.pinterest.com](https://www.pinterest.com)" + }, + "tags": [ + "image-facial", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pipl", + "name": "Pipl", + "description": "Deep people search engine", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Pipl", + "raw": "Pipl" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Pipl" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "plaso", + "name": "Plaso (log2timeline)", + "description": "Super-timeline creation from forensic artifacts", + "category": "digital-forensics", + "url": "https://github.com/log2timeline/plaso", + "install": { + "method": "pip", + "kali": "pip3 install plaso", + "raw": "`pip3 install plaso`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "polygonscan", + "name": "PolygonScan", + "description": "Polygon (Matic) blockchain explorer", + "category": "crypto-blockchain", + "url": "https://polygonscan.com", + "install": { + "method": "web", + "kali": "", + "raw": "[polygonscan.com](https://polygonscan.com)" + }, + "tags": [ + "crypto-blockchain", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "portswigger-academy", + "name": "PortSwigger Web Security Academy", + "description": "Free, world-class web security training (by Burp Suite team)", + "category": "training-ctf", + "url": "https://portswigger.net/web-security", + "install": { + "method": "web", + "kali": "", + "raw": "[portswigger.net](https://portswigger.net/web-security)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "predictasearch", + "name": "Predicta Search", + "description": "Search social accounts by email or phone", + "category": "people-identity", + "url": "https://predictasearch.com", + "install": { + "method": "web", + "kali": "", + "raw": "[predictasearch.com](https://predictasearch.com)" + }, + "tags": [ + "people-identity", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "privadovpn-free", + "name": "PrivadoVPN Free", + "description": "Free VPN with 10GB/month and zero-log policy", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Website", + "raw": "Website" + }, + "tags": [ + "vpn-privacy", + "free-tier:10GB/month, 12 servers", + "open-source:❌", + "no-log:✅", + "protocols:WireGuard, OpenVPN, IKEv2" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "PrivadoVPN Free" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "proton-vpn-free", + "name": "Proton VPN Free", + "description": "Best free VPN — unlimited data, no-log, open-source, Swiss privacy", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install protonvpn-cli`", + "raw": "`pip3 install protonvpn-cli`" + }, + "tags": [ + "vpn-privacy", + "free-tier:Unlimited data, 5 countries, 1 device", + "open-source:✅", + "no-log:✅", + "protocols:WireGuard, OpenVPN, Stealth" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Proton VPN Free" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "protonmail", + "name": "ProtonMail", + "description": "Encrypted email", + "category": "vpn-privacy", + "url": "https://proton.me/", + "install": { + "method": "web", + "kali": "", + "raw": "[proton.me](https://proton.me/)" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "protonvpn", + "name": "ProtonVPN", + "description": "Free encrypted VPN", + "category": "vpn-privacy", + "url": "https://protonvpn.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[protonvpn.com](https://protonvpn.com/)" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "prowl", + "name": "Prowl", + "description": "Email & domain reconnaissance", + "category": "email-phone", + "url": "https://github.com/nettitude/Prowl", + "install": { + "method": "git", + "kali": "`git clone https://github.com/nettitude/Prowl`", + "raw": "`git clone https://github.com/nettitude/Prowl`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "proxmark3", + "name": "Proxmark3", + "description": "RFID/NFC research and exploitation hardware + software", + "category": "hardware-hacking", + "url": "https://github.com/RfidResearchGroup/proxmark3", + "install": { + "method": "git", + "kali": "git clone https://github.com/RfidResearchGroup/proxmark3.git", + "raw": "`git clone https://github.com/RfidResearchGroup/proxmark3.git`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "public-transport-maps", + "name": "Public Transport Maps", + "description": "20+ online public transport maps by country", + "category": "vehicle-aviation-maritime", + "url": "https://cipher387.github.io/public_transport_maps/", + "install": { + "method": "web", + "kali": "", + "raw": "[cipher387.github.io](https://cipher387.github.io/public_transport_maps/)" + }, + "tags": [ + "vehicle-aviation-maritime", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "publicwww", + "name": "PublicWWW", + "description": "Search the web's source code (HTML/JS/CSS) for snippets, trackers, scripts", + "category": "search-dorking", + "url": "https://publicwww.com", + "install": { + "method": "web", + "kali": "", + "raw": "[publicwww.com](https://publicwww.com)" + }, + "tags": [ + "search-dorking", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pullpush", + "name": "PullPush", + "description": "Index/retrieval service for Reddit (incl. deleted content)", + "category": "username-social", + "url": "https://pullpush.io", + "install": { + "method": "web", + "kali": "", + "raw": "[pullpush.io](https://pullpush.io)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pulsedive", + "name": "Pulsedive", + "description": "Threat intelligence enrichment", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "manual", + "kali": "Pulsedive", + "raw": "Pulsedive" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Pulsedive" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "pushshift", + "name": "Pushshift API", + "description": "Historical Reddit data — posts, comments, metadata", + "category": "username-social", + "url": "https://pushshift.io", + "install": { + "method": "web", + "kali": "", + "raw": "[pushshift.io](https://pushshift.io)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pwn-college", + "name": "pwn.college", + "description": "Free college-level cybersecurity education from ASU", + "category": "training-ctf", + "url": "https://pwn.college", + "install": { + "method": "web", + "kali": "", + "raw": "[pwn.college](https://pwn.college)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "pwndb", + "name": "Pwndb", + "description": "Dark web breach database (Tor)", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟢 Free", + "raw": "🟢 Free" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "pwnedhub", + "name": "PwnedHub", + "description": "Intentionally-vulnerable web app for hands-on appsec training", + "category": "training-ctf", + "url": "https://github.com/practisec/pwnedhub", + "install": { + "method": "git", + "kali": "git clone https://github.com/practisec/pwnedhub.git", + "raw": "`git clone https://github.com/practisec/pwnedhub.git`" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "python-for-osint-cipher387", + "name": "Python for OSINT (cipher387)", + "description": "21-day Python-for-OSINT course (free)", + "category": "learning-resources", + "url": "https://github.com/cipher387/python-for-OSINT-21-days", + "install": { + "method": "git", + "kali": "git clone https://github.com/cipher387/python-for-OSINT-21-days.git", + "raw": "`git clone https://github.com/cipher387/python-for-OSINT-21-days.git`" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "quake-360", + "name": "Quake (360.cn)", + "description": "Chinese internet asset search engine", + "category": "iot-devices", + "url": "https://quake.360.net", + "install": { + "method": "web", + "kali": "", + "raw": "[quake.360.net](https://quake.360.net)" + }, + "tags": [ + "iot-devices", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "quttera", + "name": "Quttera", + "description": "Online website malware scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Quttera", + "raw": "Quttera" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Quttera" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "radare2", + "name": "radare2", + "description": "Reverse engineering framework", + "category": "digital-forensics", + "url": "https://www.radare.org", + "install": { + "method": "apt", + "kali": "apt install radare2", + "raw": "`apt install radare2`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rainbowcrack", + "name": "RainbowCrack", + "description": "Rainbow table cracker", + "category": "data-breach", + "url": "https://project-rainbowcrack.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[project-rainbowcrack.com](https://project-rainbowcrack.com/)" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "real-world-bug-hunting", + "name": "Real-World Bug Hunting (book)", + "description": "Peter Yaworski — bug bounty methodology and real reports", + "category": "learning-resources", + "url": "https://nostarch.com/bughunting", + "install": { + "method": "web", + "kali": "", + "raw": "[nostarch.com](https://nostarch.com/bughunting)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "reaver", + "name": "Reaver", + "description": "WPS brute force tool", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install reaver`", + "raw": "`apt install reaver`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "recap-archive", + "name": "RECAP Archive", + "description": "Public archive of PACER court documents", + "category": "document-metadata", + "url": "https://www.courtlistener.com/recap/", + "install": { + "method": "web", + "kali": "", + "raw": "[www.courtlistener.com](https://www.courtlistener.com/recap/)" + }, + "tags": [ + "document-metadata", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "recon-ng", + "name": "Recon-ng", + "description": "Module-based web reconnaissance framework", + "category": "frameworks", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install recon-ng`", + "raw": "`pip3 install recon-ng`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Recon-ng" + ], + "sections_seen": [ + "Kali Linux OSINT Toolkit" + ], + "archived": false + }, + { + "id": "reconaizer", + "name": "ReconAIzer", + "description": "AI-enhanced Burp Suite extension", + "category": "misc", + "url": "https://github.com/hisxo/ReconAIzer", + "install": { + "method": "web", + "kali": "", + "raw": "[github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer)" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "AI-Powered OSINT & Free AI Tools" + ], + "archived": false + }, + { + "id": "reconftw", + "name": "reconFTW", + "description": "Full-suite domain recon — subdomain enum, port scan, vuln scan in one pipeline", + "category": "domain-ip-network", + "url": "https://github.com/six2dez/reconftw", + "install": { + "method": "git", + "kali": "git clone https://github.com/six2dez/reconftw.git", + "raw": "`git clone https://github.com/six2dez/reconftw.git`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "recorded-future", + "name": "Recorded Future", + "description": "Threat intelligence platform", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "manual", + "kali": "Recorded Future", + "raw": "Recorded Future" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Recorded Future" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "reddit-investigator", + "name": "Reddit Investigator", + "description": "Reddit user analysis", + "category": "username-social", + "url": "https://reddit-user-analyser.netlify.app/", + "install": { + "method": "web", + "kali": "", + "raw": "[reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/)" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "redditmetis", + "name": "RedditMetis", + "description": "Reddit user analysis — summary, top posts, activity stats", + "category": "username-social", + "url": "https://redditmetis.com", + "install": { + "method": "web", + "kali": "", + "raw": "[redditmetis.com](https://redditmetis.com)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "redditsearch-io", + "name": "RedditSearch.io", + "description": "Search archived Reddit content via Pushshift mirror", + "category": "username-social", + "url": "https://redditsearch.io", + "install": { + "method": "web", + "kali": "", + "raw": "[redditsearch.io](https://redditsearch.io)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "regripper", + "name": "RegRipper", + "description": "Open-source Windows registry parsing tool", + "category": "digital-forensics", + "url": "https://github.com/keydet89/RegRipper3.0", + "install": { + "method": "git", + "kali": "git clone https://github.com/keydet89/RegRipper3.0.git", + "raw": "`git clone https://github.com/keydet89/RegRipper3.0.git`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rekall", + "name": "Rekall", + "description": "Memory forensics tooling (legacy fork of Volatility)", + "category": "digital-forensics", + "url": "https://github.com/google/rekall", + "install": { + "method": "pip", + "kali": "pip3 install rekall", + "raw": "`pip3 install rekall`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "responder", + "name": "Responder", + "description": "LLMNR/NBT-NS/MDNS poisoner", + "category": "data-breach", + "url": "https://github.com/lgandx/Responder", + "install": { + "method": "git", + "kali": "`git clone https://github.com/lgandx/Responder`", + "raw": "`git clone https://github.com/lgandx/Responder`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Password Cracking & Credential Tools" + ], + "archived": false + }, + { + "id": "revealer-cc", + "name": "Revealer.cc", + "description": "Discord-based account-checker & breach lookup", + "category": "data-breach", + "url": "https://revealer.cc", + "install": { + "method": "web", + "kali": "", + "raw": "[revealer.cc](https://revealer.cc)" + }, + "tags": [ + "data-breach", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "reverse-whois-domaineye", + "name": "DomainEye Reverse WHOIS", + "description": "Search domains by registrant data", + "category": "people-identity", + "url": "https://domaineye.com/reverse-whois", + "install": { + "method": "web", + "kali": "", + "raw": "[domaineye.com](https://domaineye.com/reverse-whois)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "riseupvpn", + "name": "RiseupVPN", + "description": "Free VPN by Riseup collective — no accounts, no tracking", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install riseup-vpn`", + "raw": "`apt install riseup-vpn`" + }, + "tags": [ + "vpn-privacy", + "free-tier:Unlimited, no account needed", + "open-source:✅", + "no-log:✅", + "protocols:OpenVPN (Bitmask)" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "RiseupVPN" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "rita", + "name": "RITA", + "description": "Real Intelligence Threat Analytics — beaconing/long-conn detection", + "category": "blue-team-defensive", + "url": "https://github.com/activecm/rita", + "install": { + "method": "git", + "kali": "git clone https://github.com/activecm/rita.git", + "raw": "`git clone https://github.com/activecm/rita.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rizin", + "name": "rizin", + "description": "Modern fork of radare2 with cleaner API", + "category": "digital-forensics", + "url": "https://rizin.re", + "install": { + "method": "git", + "kali": "git clone https://github.com/rizinorg/rizin.git", + "raw": "`git clone https://github.com/rizinorg/rizin.git`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "robtex", + "name": "Robtex", + "description": "DNS lookup visualization", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Robtex", + "raw": "Robtex" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Robtex" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "rocketreach", + "name": "RocketReach", + "description": "Find professional emails/phones for 700M+ profiles", + "category": "people-identity", + "url": "https://rocketreach.co", + "install": { + "method": "web", + "kali": "", + "raw": "[rocketreach.co](https://rocketreach.co)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rockyou", + "name": "RockYou", + "description": "Classic leaked password list", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "Pre-installed in Kali (`/usr/share/wordlists/`)", + "raw": "Pre-installed in Kali (`/usr/share/wordlists/`)" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Wordlist Generation & Brute Force" + ], + "archived": false + }, + { + "id": "root-me", + "name": "Root-Me", + "description": "500+ challenges and 100+ virtual labs", + "category": "training-ctf", + "url": "https://www.root-me.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.root-me.org](https://www.root-me.org)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rtfm-redteam", + "name": "RTFM: Red Team Field Manual", + "description": "Concise red-team command reference", + "category": "learning-resources", + "url": "https://www.amazon.com/dp/B07RJG62SJ", + "install": { + "method": "web", + "kali": "", + "raw": "[www.amazon.com](https://www.amazon.com/dp/B07RJG62SJ)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rtl-sdr", + "name": "RTL-SDR", + "description": "Cheap ($30) SDR receiver — entry into RF", + "category": "hardware-hacking", + "url": "https://www.rtl-sdr.com", + "install": { + "method": "apt", + "kali": "apt install rtl-sdr", + "raw": "`apt install rtl-sdr`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rubeus", + "name": "Rubeus", + "description": "C# toolset for raw Kerberos interaction and abuse", + "category": "red-team-offensive", + "url": "https://github.com/GhostPack/Rubeus", + "install": { + "method": "git", + "kali": "git clone https://github.com/GhostPack/Rubeus.git", + "raw": "`git clone https://github.com/GhostPack/Rubeus.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "rustscan", + "name": "RustScan", + "description": "Modern port scanner — finds open ports, then pipes to Nmap", + "category": "domain-ip-network", + "url": "https://github.com/RustScan/RustScan", + "install": { + "method": "git", + "kali": "git clone https://github.com/RustScan/RustScan.git", + "raw": "`git clone https://github.com/RustScan/RustScan.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "scalpel", + "name": "Scalpel", + "description": "File carving tool", + "category": "document-metadata", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install scalpel`", + "raw": "`apt install scalpel`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "scamadviser", + "name": "ScamAdviser", + "description": "Check website trustworthiness scores", + "category": "malware-threat-intel", + "url": "https://www.scamadviser.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.scamadviser.com](https://www.scamadviser.com)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "scatteredsecrets", + "name": "ScatteredSecrets", + "description": "Breach notification service", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟡 Freemium", + "raw": "🟡 Freemium" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "scribd-search", + "name": "Scribd", + "description": "Search for documents, presentations, sheet music, ebooks", + "category": "document-metadata", + "url": "https://www.scribd.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.scribd.com](https://www.scribd.com)" + }, + "tags": [ + "document-metadata", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "search-by-image", + "name": "Search by Image", + "description": "Multi-engine reverse image (browser ext)", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Chrome / Firefox extension", + "raw": "Chrome / Firefox extension" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "search4faces", + "name": "Search4faces", + "description": "Face search in VK/OK social networks", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Search4faces", + "raw": "Search4faces" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Search4faces" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "searchcode", + "name": "searchcode", + "description": "Search 75+ billion lines of public source code across GitHub/GitLab/Bitbucket", + "category": "search-dorking", + "url": "https://searchcode.com", + "install": { + "method": "web", + "kali": "", + "raw": "[searchcode.com](https://searchcode.com)" + }, + "tags": [ + "search-dorking", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "searxng", + "name": "SearXNG", + "description": "Privacy-respecting metasearch engine", + "category": "search-dorking", + "url": "", + "install": { + "method": "manual", + "kali": "SearXNG", + "raw": "SearXNG" + }, + "tags": [ + "search-dorking" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "SearXNG" + ], + "sections_seen": [ + "Search & Dorking Tools" + ], + "archived": false + }, + { + "id": "sec-edgar", + "name": "SEC EDGAR", + "description": "US company filings", + "category": "company-business", + "url": "", + "install": { + "method": "manual", + "kali": "SEC EDGAR", + "raw": "SEC EDGAR" + }, + "tags": [ + "company-business" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "SEC EDGAR" + ], + "sections_seen": [ + "Financial & Corporate Intelligence" + ], + "archived": false + }, + { + "id": "seclists", + "name": "SecLists", + "description": "The ultimate security wordlist collection", + "category": "data-breach", + "url": "https://github.com/danielmiessler/SecLists", + "install": { + "method": "git", + "kali": "`git clone https://github.com/danielmiessler/SecLists`", + "raw": "`git clone https://github.com/danielmiessler/SecLists`" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "SecLists" + ], + "sections_seen": [ + "Wordlist Generation & Brute Force" + ], + "archived": false + }, + { + "id": "security-onion", + "name": "Security Onion", + "description": "Linux distro for threat hunting, monitoring, and log management", + "category": "blue-team-defensive", + "url": "https://securityonionsolutions.com", + "install": { + "method": "web", + "kali": "", + "raw": "[securityonionsolutions.com](https://securityonionsolutions.com)" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "securitytrails", + "name": "SecurityTrails", + "description": "DNS & domain intelligence", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "SecurityTrails", + "raw": "SecurityTrails" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "SecurityTrails" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "seeker", + "name": "Seeker", + "description": "Geolocation by phishing — collects precise GPS via WebRTC + browser geolocation", + "category": "people-identity", + "url": "https://github.com/thewhiteh4t/seeker", + "install": { + "method": "git", + "kali": "git clone https://github.com/thewhiteh4t/seeker.git", + "raw": "`git clone https://github.com/thewhiteh4t/seeker.git`" + }, + "tags": [ + "people-identity", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "seekr", + "name": "Seekr", + "description": "Multi-purpose OSINT toolkit with web interface", + "category": "username-social", + "url": "https://github.com/seekr-osint/seekr", + "install": { + "method": "git", + "kali": "`git clone https://github.com/seekr-osint/seekr`", + "raw": "`git clone https://github.com/seekr-osint/seekr`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Seekr" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "sentinel-hub", + "name": "Sentinel Hub", + "description": "Multi-source satellite imagery access", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "Sentinel Hub", + "raw": "Sentinel Hub" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Sentinel Hub" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "set", + "name": "SET", + "description": "Social engineering toolkit", + "category": "frameworks", + "url": "", + "install": { + "method": "manual", + "kali": "`setoolkit`", + "raw": "`setoolkit`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Kali Linux OSINT Toolkit" + ], + "archived": false + }, + { + "id": "set-social-engineering-toolkit", + "name": "SET (Social Engineering Toolkit)", + "description": "Complete SE framework", + "category": "people-identity", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install set`", + "raw": "`apt install set`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "shadowmap", + "name": "ShadowMap", + "description": "Shadow analysis for time estimation", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "ShadowMap", + "raw": "ShadowMap" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "ShadowMap" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "shadowserver-dashboard", + "name": "Shadowserver Dashboard", + "description": "Global statistics on cyber threats by Shadowserver Foundation", + "category": "malware-threat-intel", + "url": "https://dashboard.shadowserver.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[dashboard.shadowserver.org](https://dashboard.shadowserver.org/)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sharphound", + "name": "SharpHound", + "description": "C# data collector for BloodHound", + "category": "red-team-offensive", + "url": "https://github.com/BloodHoundAD/SharpHound", + "install": { + "method": "git", + "kali": "git clone https://github.com/BloodHoundAD/SharpHound.git", + "raw": "`git clone https://github.com/BloodHoundAD/SharpHound.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sherlock", + "name": "Sherlock", + "description": "Hunt down social media accounts by username across 400+ sites", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install sherlock-project`", + "raw": "`pip install sherlock-project`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Sherlock" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "sherlockeye", + "name": "SherlockEye", + "description": "Search publicly available info connected to a username", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "SherlockEye", + "raw": "SherlockEye" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "SherlockEye" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "sherloq", + "name": "Sherloq", + "description": "Open-source image forensics toolset", + "category": "image-facial", + "url": "https://github.com/GuidoBartoli/sherloq", + "install": { + "method": "git", + "kali": "git clone https://github.com/GuidoBartoli/sherloq.git", + "raw": "`git clone https://github.com/GuidoBartoli/sherloq.git`" + }, + "tags": [ + "image-facial", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "shodan", + "name": "Shodan", + "description": "Internet-connected device search", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install shodan`", + "raw": "`pip3 install shodan`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Shodan" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "shodan-cli-tool", + "name": "Shodan CLI", + "description": "Official Shodan command-line client", + "category": "search-dorking", + "url": "https://github.com/achillean/shodan-python", + "install": { + "method": "pip", + "kali": "pip3 install shodan", + "raw": "`pip3 install shodan`" + }, + "tags": [ + "search-dorking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "shodan-iot", + "name": "Shodan (IoT)", + "description": "IoT and device search engine", + "category": "iot-devices", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install shodan`", + "raw": "`pip3 install shodan`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Shodan (IoT)" + ], + "sections_seen": [ + "IoT & Device Intelligence" + ], + "archived": false + }, + { + "id": "shodanspider", + "name": "ShodanSpider", + "description": "Shodan scanning automation tool", + "category": "iot-devices", + "url": "https://github.com/shubhamrooter/ShodanSpider", + "install": { + "method": "git", + "kali": "`git clone https://github.com/shubhamrooter/ShodanSpider`", + "raw": "`git clone https://github.com/shubhamrooter/ShodanSpider`" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "ShodanSpider" + ], + "sections_seen": [ + "IoT & Device Intelligence" + ], + "archived": false + }, + { + "id": "sigma", + "name": "Sigma", + "description": "Generic signature format for SIEM detections", + "category": "blue-team-defensive", + "url": "https://github.com/SigmaHQ/sigma", + "install": { + "method": "git", + "kali": "git clone https://github.com/SigmaHQ/sigma.git", + "raw": "`git clone https://github.com/SigmaHQ/sigma.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sigma-cli", + "name": "sigma-cli", + "description": "Convert Sigma rules to native SIEM queries", + "category": "blue-team-defensive", + "url": "https://github.com/SigmaHQ/sigma-cli", + "install": { + "method": "pip", + "kali": "pip3 install sigma-cli", + "raw": "`pip3 install sigma-cli`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "signal", + "name": "Signal", + "description": "Encrypted messaging", + "category": "vpn-privacy", + "url": "https://signal.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[signal.org](https://signal.org/)" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "simplelogin", + "name": "SimpleLogin", + "description": "Email alias service for OSINT", + "category": "email-phone", + "url": "https://simplelogin.io/", + "install": { + "method": "web", + "kali": "", + "raw": "[simplelogin.io](https://simplelogin.io/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "sleuthkit", + "name": "The Sleuth Kit", + "description": "Library and CLI tools for forensic disk analysis", + "category": "digital-forensics", + "url": "https://www.sleuthkit.org", + "install": { + "method": "apt", + "kali": "apt install sleuthkit", + "raw": "`apt install sleuthkit`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "slideshare-search", + "name": "SlideShare", + "description": "Search public PowerPoint/PDF presentations", + "category": "document-metadata", + "url": "https://www.slideshare.net", + "install": { + "method": "web", + "kali": "", + "raw": "[www.slideshare.net](https://www.slideshare.net)" + }, + "tags": [ + "document-metadata", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sliver", + "name": "Sliver", + "description": "Open-source adversary emulation/red-team framework (Cobalt Strike alt)", + "category": "red-team-offensive", + "url": "https://github.com/BishopFox/sliver", + "install": { + "method": "go", + "kali": "go install github.com/bishopfox/sliver/server@latest", + "raw": "`go install github.com/bishopfox/sliver/server@latest`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "smap", + "name": "smap", + "description": "Drop-in replacement for nmap powered by shodan.io", + "category": "domain-ip-network", + "url": "https://github.com/s0md3v/Smap", + "install": { + "method": "go", + "kali": "go install github.com/s0md3v/smap/cmd/smap@latest", + "raw": "`go install github.com/s0md3v/smap/cmd/smap@latest`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sn0int", + "name": "sn0int", + "description": "Semi-automatic OSINT framework in Rust", + "category": "frameworks", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install sn0int`", + "raw": "`apt install sn0int`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "sn0int" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "sn1per", + "name": "Sn1per", + "description": "Automated pentest reconnaissance scanner", + "category": "domain-ip-network", + "url": "https://github.com/1N3/Sn1per.git", + "install": { + "method": "git", + "kali": "`git clone https://github.com/1N3/Sn1per.git`", + "raw": "`git clone https://github.com/1N3/Sn1per.git`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Sn1per" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "snoop", + "name": "Snoop", + "description": "Username search with Russian-focused platforms", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install snoop`", + "raw": "`pip install snoop`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Snoop" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "snort", + "name": "Snort", + "description": "Open-source intrusion-prevention/detection system", + "category": "blue-team-defensive", + "url": "https://www.snort.org", + "install": { + "method": "apt", + "kali": "apt install snort", + "raw": "`apt install snort`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "snov.io", + "name": "Snov.io", + "description": "Email finder & verifier", + "category": "email-phone", + "url": "https://snov.io/", + "install": { + "method": "web", + "kali": "", + "raw": "[snov.io](https://snov.io/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "snscrape", + "name": "snscrape", + "description": "Social media scraper (Twitter, Reddit, etc.)", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install snscrape`", + "raw": "`pip install snscrape`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "snusbase", + "name": "Snusbase", + "description": "Breach data search engine", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "💰 Paid", + "raw": "💰 Paid" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Snusbase" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "snusbase-cli", + "name": "Snusbase API", + "description": "API access to breach data (premium)", + "category": "data-breach", + "url": "https://snusbase.com/api", + "install": { + "method": "web", + "kali": "", + "raw": "[snusbase.com](https://snusbase.com/api)" + }, + "tags": [ + "data-breach", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "social-analyzer", + "name": "Social Analyzer", + "description": "API-based social media profiler for 1000+ sites", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install social-analyzer`", + "raw": "`pip install social-analyzer`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Social Analyzer" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "social-mention", + "name": "Social Mention", + "description": "Social media aggregator", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Yes", + "raw": "✅ Yes" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Searcher Platforms" + ], + "archived": false + }, + { + "id": "social-searcher", + "name": "Social Searcher", + "description": "Real-time social media search", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Yes", + "raw": "✅ Yes" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Searcher Platforms" + ], + "archived": false + }, + { + "id": "social-searcher", + "name": "Social-Searcher", + "description": "Free social media search engine", + "category": "username-social", + "url": "https://www.social-searcher.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[social-searcher.com](https://www.social-searcher.com/)" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "socialblade", + "name": "SocialBlade", + "description": "Social media analytics", + "category": "username-social", + "url": "https://socialblade.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[socialblade.com](https://socialblade.com/)" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "socialfish", + "name": "SocialFish", + "description": "Social media phishing", + "category": "people-identity", + "url": "https://github.com/UndeadSec/SocialFish", + "install": { + "method": "git", + "kali": "`git clone https://github.com/UndeadSec/SocialFish`", + "raw": "`git clone https://github.com/UndeadSec/SocialFish`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "socialscan", + "name": "socialscan", + "description": "Check email/username availability", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install socialscan`", + "raw": "`pip install socialscan`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "socialscan" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "socid-extractor", + "name": "Socid-extractor", + "description": "Extract user info from web page source code", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install socid-extractor`", + "raw": "`pip install socid-extractor`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Socid-extractor" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "socradar", + "name": "SOCRadar", + "description": "Extended threat intel — attack surface + dark web + brand", + "category": "threat-intel-platforms", + "url": "https://socradar.io", + "install": { + "method": "web", + "kali": "", + "raw": "[socradar.io](https://socradar.io)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sourcegraph", + "name": "SourceGraph", + "description": "Search code from millions of open-source repos", + "category": "search-dorking", + "url": "https://sourcegraph.com/search", + "install": { + "method": "web", + "kali": "", + "raw": "[sourcegraph.com](https://sourcegraph.com/search)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "spiderfoot", + "name": "SpiderFoot", + "description": "OSINT automation platform (200+ modules)", + "category": "frameworks", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install spiderfoot`", + "raw": "`pip3 install spiderfoot`" + }, + "tags": [ + "frameworks" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "SpiderFoot" + ], + "sections_seen": [ + "Frameworks & All-in-One Platforms" + ], + "archived": false + }, + { + "id": "spokeo", + "name": "Spokeo", + "description": "People search aggregator", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Spokeo", + "raw": "Spokeo" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Spokeo" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "spycloud", + "name": "SpyCloud", + "description": "Account-takeover prevention + identity exposure data", + "category": "people-identity", + "url": "https://spycloud.com", + "install": { + "method": "web", + "kali": "", + "raw": "[spycloud.com](https://spycloud.com)" + }, + "tags": [ + "people-identity", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "spydialer", + "name": "SpyDialer", + "description": "Free reverse phone lookup", + "category": "email-phone", + "url": "https://spydialer.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[spydialer.com](https://spydialer.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "sqlmap", + "name": "SQLMap", + "description": "Automated SQL injection tool", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install sqlmap`", + "raw": "`apt install sqlmap`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "SQLMap" + ], + "sections_seen": [ + "Vulnerability Scanning & Exploitation" + ], + "archived": false + }, + { + "id": "ssl-labs", + "name": "SSL Labs", + "description": "SSL/TLS server testing", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "SSL Labs", + "raw": "SSL Labs" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "SSL Labs" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "ssrfmap", + "name": "SSRFmap", + "description": "Automated SSRF detection and exploitation framework", + "category": "red-team-offensive", + "url": "https://github.com/swisskyrepo/SSRFmap", + "install": { + "method": "git", + "kali": "git clone https://github.com/swisskyrepo/SSRFmap.git", + "raw": "`git clone https://github.com/swisskyrepo/SSRFmap.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "startpage", + "name": "Startpage", + "description": "Privacy-focused search — Google results with no tracking", + "category": "search-dorking", + "url": "https://www.startpage.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.startpage.com](https://www.startpage.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "stealseek", + "name": "StealSeek", + "description": "Search engine for finding and analyzing data breaches", + "category": "data-breach", + "url": "https://stealseek.io", + "install": { + "method": "web", + "kali": "", + "raw": "[stealseek.io](https://stealseek.io)" + }, + "tags": [ + "data-breach", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "storm-breaker", + "name": "Storm-Breaker", + "description": "Access webcam/mic/location (SE)", + "category": "people-identity", + "url": "https://github.com/ultrasecurity/Storm-Breaker", + "install": { + "method": "git", + "kali": "`git clone https://github.com/ultrasecurity/Storm-Breaker`", + "raw": "`git clone https://github.com/ultrasecurity/Storm-Breaker`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Storm-Breaker" + ], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "subfinder", + "name": "Subfinder", + "description": "Fast passive subdomain discovery", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "go", + "kali": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`", + "raw": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Subfinder" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "sublist3r", + "name": "Sublist3r", + "description": "Subdomain enumeration", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install sublist3r`", + "raw": "`pip install sublist3r`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Sublist3r" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "subredditstats", + "name": "SubredditStats", + "description": "Subreddit user-overlap, growth, top posts", + "category": "username-social", + "url": "https://subredditstats.com", + "install": { + "method": "web", + "kali": "", + "raw": "[subredditstats.com](https://subredditstats.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sucuri-sitecheck", + "name": "Sucuri SiteCheck", + "description": "Free website malware scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Sucuri SiteCheck", + "raw": "Sucuri SiteCheck" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Sucuri SiteCheck" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "suncalc", + "name": "SunCalc", + "description": "Sun position/time calculator from photos", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "SunCalc", + "raw": "SunCalc" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "SunCalc" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "suricata", + "name": "Suricata", + "description": "High-perf network IDS / IPS / NSM", + "category": "blue-team-defensive", + "url": "https://suricata.io", + "install": { + "method": "apt", + "kali": "apt install suricata", + "raw": "`apt install suricata`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "synack", + "name": "Synack", + "description": "Crowdsourced + vetted-researcher pentesting platform", + "category": "bug-bounty", + "url": "https://www.synack.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.synack.com](https://www.synack.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "sync.me", + "name": "Sync.me", + "description": "Phone number lookup", + "category": "email-phone", + "url": "https://sync.me/", + "install": { + "method": "web", + "kali": "", + "raw": "[sync.me](https://sync.me/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "tails-os", + "name": "Tails OS", + "description": "Amnesic live OS (no trace)", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Tails OS", + "raw": "Tails OS" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Tails OS" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "talkwalker", + "name": "Talkwalker", + "description": "Social listening & analytics", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "💰 Paid", + "raw": "💰 Paid" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Searcher Platforms" + ], + "archived": false + }, + { + "id": "tcpdump", + "name": "tcpdump", + "description": "Command-line packet analyzer", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install tcpdump`", + "raw": "`apt install tcpdump`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "telegago", + "name": "Telegago", + "description": "Google CSE for finding public/private Telegram channels", + "category": "username-social", + "url": "https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg", + "install": { + "method": "web", + "kali": "", + "raw": "[cse.google.com](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "telegram-nearby-map", + "name": "Telegram Nearby Map", + "description": "Find positions of nearby Telegram users via OSM", + "category": "username-social", + "url": "https://github.com/tejado/telegram-nearby-map", + "install": { + "method": "git", + "kali": "git clone https://github.com/tejado/telegram-nearby-map.git", + "raw": "`git clone https://github.com/tejado/telegram-nearby-map.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "telegram-osinter", + "name": "TeleGram-OSINTer", + "description": "Telegram profile investigation", + "category": "username-social", + "url": "https://github.com/Alb-310/TeleGram-OSINTer", + "install": { + "method": "git", + "kali": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`", + "raw": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Telegram OSINT Bots & Channels" + ], + "archived": false + }, + { + "id": "telegramdb", + "name": "TelegramDB", + "description": "Telegram user & group lookup database", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "TelegramDB", + "raw": "TelegramDB" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "TelegramDB" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "telepathy", + "name": "Telepathy", + "description": "Telegram OSINT analysis", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install telepathy`", + "raw": "`pip install telepathy`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Telepathy" + ], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "telerecon", + "name": "Telerecon", + "description": "Reconnaissance framework for investigating Telegram", + "category": "username-social", + "url": "https://github.com/sockysec/Telerecon", + "install": { + "method": "git", + "kali": "git clone https://github.com/sockysec/Telerecon.git", + "raw": "`git clone https://github.com/sockysec/Telerecon.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "teleteg", + "name": "Teleteg", + "description": "Telegram search engine — 10 free results", + "category": "username-social", + "url": "https://teleteg.com", + "install": { + "method": "web", + "kali": "", + "raw": "[teleteg.com](https://teleteg.com)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "telethon", + "name": "Telethon", + "description": "Python Telegram API library", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install telethon`", + "raw": "`pip install telethon`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Telegram OSINT Bots & Channels" + ], + "archived": false + }, + { + "id": "telpoisk", + "name": "TelPoisk", + "description": "Russian phone directory", + "category": "email-phone", + "url": "https://telpoisk.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[telpoisk.com](https://telpoisk.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "tg-search-com", + "name": "Telegram Search (lyzem.com)", + "description": "Search public Telegram messages and channels", + "category": "username-social", + "url": "https://lyzem.com", + "install": { + "method": "web", + "kali": "", + "raw": "[lyzem.com](https://lyzem.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "tgstat", + "name": "TGStat", + "description": "Telegram channel analytics — post stats, audience overlap", + "category": "username-social", + "url": "https://tgstat.com", + "install": { + "method": "web", + "kali": "", + "raw": "[tgstat.com](https://tgstat.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "thatsthem", + "name": "ThatsThem", + "description": "Free people search by name/email/phone", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "ThatsThem", + "raw": "ThatsThem" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "ThatsThem" + ], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "the-endorser", + "name": "the-endorser", + "description": "Map LinkedIn endorsements/skills to draw out person relationships", + "category": "username-social", + "url": "https://github.com/eth0izzle/the-endorser", + "install": { + "method": "git", + "kali": "git clone https://github.com/eth0izzle/the-endorser.git", + "raw": "`git clone https://github.com/eth0izzle/the-endorser.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "the-osint-rack", + "name": "The OSINT Rack", + "description": "Ransomware & data leak monitoring", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟢 Free", + "raw": "🟢 Free" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "the-web-application-hackers-handbook", + "name": "The Web Application Hacker's Handbook (book)", + "description": "Stuttard & Pinto — appsec bible", + "category": "learning-resources", + "url": "https://www.amazon.com/dp/1118026470", + "install": { + "method": "web", + "kali": "", + "raw": "[www.amazon.com](https://www.amazon.com/dp/1118026470)" + }, + "tags": [ + "learning-resources", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "theharvester", + "name": "theHarvester", + "description": "Email, subdomain & IP harvesting tool", + "category": "email-phone", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install theHarvester`", + "raw": "`pip install theHarvester`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "theHarvester" + ], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "thehive", + "name": "TheHive", + "description": "Scalable, free, open-source case management for SOCs", + "category": "blue-team-defensive", + "url": "https://thehive-project.org", + "install": { + "method": "docker", + "kali": "docker pull strangebee/thehive:latest", + "raw": "`docker pull strangebee/thehive:latest`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "threatconnect", + "name": "ThreatConnect", + "description": "Threat intel platform combining intel and SOAR", + "category": "threat-intel-platforms", + "url": "https://threatconnect.com", + "install": { + "method": "web", + "kali": "", + "raw": "[threatconnect.com](https://threatconnect.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "threatquotient", + "name": "ThreatQ", + "description": "Threat intel platform for SOCs", + "category": "threat-intel-platforms", + "url": "https://www.threatq.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.threatq.com](https://www.threatq.com)" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "tiktok-finder", + "name": "TikTok Finder Country", + "description": "Free OSINT lookup for TikTok account country/language", + "category": "username-social", + "url": "https://tiktokfindercountry.xyz", + "install": { + "method": "web", + "kali": "", + "raw": "[tiktokfindercountry.xyz](https://tiktokfindercountry.xyz)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "tiktok-scraper", + "name": "TikTok Scraper", + "description": "TikTok data extraction", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "`npm install -g tiktok-scraper`", + "raw": "`npm install -g tiktok-scraper`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "tineye", + "name": "TinEye", + "description": "Reverse image search", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "TinEye", + "raw": "TinEye" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "TinEye" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "tor-browser", + "name": "Tor Browser", + "description": "Anonymous web browsing via Tor network", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install torbrowser-launcher`", + "raw": "`apt install torbrowser-launcher`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Tor Browser" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "torch", + "name": "Torch", + "description": "Oldest & largest dark web search engine", + "category": "dark-web", + "url": "", + "install": { + "method": "manual", + "kali": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`", + "raw": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`" + }, + "tags": [ + "dark-web" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Torch" + ], + "sections_seen": [ + "Dark Web Search Engines & Tools" + ], + "archived": false + }, + { + "id": "torghostng", + "name": "TorghostNG", + "description": "Anonymize all OS traffic via Tor (Linux)", + "category": "dark-web", + "url": "https://github.com/githacktools/TorghostNG", + "install": { + "method": "git", + "kali": "git clone https://github.com/githacktools/TorghostNG.git", + "raw": "`git clone https://github.com/githacktools/TorghostNG.git`" + }, + "tags": [ + "dark-web", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "tosint", + "name": "TOsint", + "description": "Extract info from Telegram bots and channels", + "category": "username-social", + "url": "https://github.com/drego85/tosint", + "install": { + "method": "git", + "kali": "git clone https://github.com/drego85/tosint.git", + "raw": "`git clone https://github.com/drego85/tosint.git`" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "toutatis", + "name": "Toutatis", + "description": "Instagram OSINT by phone/email", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install toutatis`", + "raw": "`pip install toutatis`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Toutatis" + ], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "trace-manus", + "name": "Trace", + "description": "Search usernames, emails, phones across 600+ platforms with risk scoring", + "category": "username-social", + "url": "https://trace.manus.space", + "install": { + "method": "web", + "kali": "", + "raw": "[trace.manus.space](https://trace.manus.space)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "tracee", + "name": "Tracee", + "description": "Runtime security and forensics using eBPF (Aqua)", + "category": "blue-team-defensive", + "url": "https://github.com/aquasecurity/tracee", + "install": { + "method": "git", + "kali": "git clone https://github.com/aquasecurity/tracee.git", + "raw": "`git clone https://github.com/aquasecurity/tracee.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "transit-visualisation", + "name": "Transit Visualisation Client", + "description": "Real-time public transport across 700+ cities", + "category": "vehicle-aviation-maritime", + "url": "https://tracker.geops.ch", + "install": { + "method": "web", + "kali": "", + "raw": "[tracker.geops.ch](https://tracker.geops.ch)" + }, + "tags": [ + "vehicle-aviation-maritime", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "trends24-tt", + "name": "Trends24", + "description": "Twitter trends history per country", + "category": "username-social", + "url": "https://trends24.in", + "install": { + "method": "web", + "kali": "", + "raw": "[trends24.in](https://trends24.in)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "triage", + "name": "Hatching Triage", + "description": "Modern malware sandbox with kernel-level monitoring", + "category": "malware-threat-intel", + "url": "https://tria.ge", + "install": { + "method": "web", + "kali": "", + "raw": "[tria.ge](https://tria.ge)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "trm-labs", + "name": "TRM Labs", + "description": "Crypto compliance and investigation platform", + "category": "crypto-blockchain", + "url": "https://www.trmlabs.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.trmlabs.com](https://www.trmlabs.com)" + }, + "tags": [ + "crypto-blockchain", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "truecaller", + "name": "Truecaller", + "description": "Global reverse phone number lookup", + "category": "email-phone", + "url": "", + "install": { + "method": "manual", + "kali": "Truecaller", + "raw": "Truecaller" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Truecaller" + ], + "sections_seen": [ + "Phone Number OSINT" + ], + "archived": false + }, + { + "id": "trufflehog", + "name": "trufflehog", + "description": "Find secrets in git repos", + "category": "misc", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install trufflehog`", + "raw": "`pip3 install trufflehog`" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "trufflehog" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "tryhackme", + "name": "TryHackMe", + "description": "Beginner-friendly cybersecurity training platform", + "category": "training-ctf", + "url": "https://tryhackme.com", + "install": { + "method": "web", + "kali": "", + "raw": "[tryhackme.com](https://tryhackme.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "twayback", + "name": "Twayback", + "description": "Find deleted tweets", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install twayback`", + "raw": "`pip install twayback`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "tweetbinder", + "name": "TweetBinder", + "description": "Twitter/X analytics dashboards", + "category": "username-social", + "url": "https://www.tweetbinder.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.tweetbinder.com](https://www.tweetbinder.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "twint", + "name": "Twint", + "description": "Twitter OSINT (no API needed)", + "category": "username-social", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install twint`", + "raw": "`pip install twint`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Monitoring" + ], + "archived": false + }, + { + "id": "twitch-search", + "name": "Twitch Search", + "description": "Search live streams by category, language, viewer count", + "category": "username-social", + "url": "https://www.twitch.tv/directory", + "install": { + "method": "web", + "kali": "", + "raw": "[www.twitch.tv](https://www.twitch.tv/directory)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "twiteur-osint", + "name": "Twiteur", + "description": "Twitter/X advanced search wrapper — geo, date, sentiment", + "category": "username-social", + "url": "https://twiteur.com", + "install": { + "method": "web", + "kali": "", + "raw": "[twiteur.com](https://twiteur.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "u-find-com", + "name": "U-Find", + "description": "Reddit user comment / submission scraper", + "category": "username-social", + "url": "https://u-find.com", + "install": { + "method": "web", + "kali": "", + "raw": "[u-find.com](https://u-find.com)" + }, + "tags": [ + "username-social", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "ubertooth", + "name": "Ubertooth One", + "description": "Open-source 2.4 GHz wireless dev platform — Bluetooth research", + "category": "hardware-hacking", + "url": "https://greatscottgadgets.com/ubertoothone/", + "install": { + "method": "apt", + "kali": "apt install ubertooth", + "raw": "`apt install ubertooth`" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "uncover", + "name": "uncover", + "description": "ProjectDiscovery — quickly find exposed hosts via Shodan/Censys/Fofa", + "category": "search-dorking", + "url": "https://github.com/projectdiscovery/uncover", + "install": { + "method": "go", + "kali": "go install github.com/projectdiscovery/uncover/cmd/uncover@latest", + "raw": "`go install github.com/projectdiscovery/uncover/cmd/uncover@latest`" + }, + "tags": [ + "search-dorking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "unfurl", + "name": "Unfurl", + "description": "URL & data artifact analysis tool", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "Unfurl", + "raw": "Unfurl" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Unfurl" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "urlcadiz", + "name": "URLCADIZ", + "description": "URL masking tool", + "category": "people-identity", + "url": "https://github.com/PerezMascato/URLCADIZ", + "install": { + "method": "git", + "kali": "`git clone https://github.com/PerezMascato/URLCADIZ`", + "raw": "`git clone https://github.com/PerezMascato/URLCADIZ`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + }, + { + "id": "urlcrazy", + "name": "URLCrazy", + "description": "Generate domain typos and check availability/registration", + "category": "domain-ip-network", + "url": "https://github.com/urbanadventurer/urlcrazy", + "install": { + "method": "git", + "kali": "git clone https://github.com/urbanadventurer/urlcrazy.git", + "raw": "`git clone https://github.com/urbanadventurer/urlcrazy.git`" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "urlhaus", + "name": "URLhaus (abuse.ch)", + "description": "Database of malicious URLs used for malware distribution", + "category": "malware-threat-intel", + "url": "https://urlhaus.abuse.ch", + "install": { + "method": "web", + "kali": "", + "raw": "[urlhaus.abuse.ch](https://urlhaus.abuse.ch)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "urlscan.io", + "name": "urlscan.io", + "description": "URL/domain analysis & screenshots", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "urlscan.io", + "raw": "urlscan.io" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "urlscan.io" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "user-scanner", + "name": "user-scanner", + "description": "Check username presence across dev/social/gaming sites", + "category": "username-social", + "url": "https://github.com/kaifcodec/user-scanner.git", + "install": { + "method": "git", + "kali": "`git clone https://github.com/kaifcodec/user-scanner.git`", + "raw": "`git clone https://github.com/kaifcodec/user-scanner.git`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "user-scanner" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "user-searcher", + "name": "User-Searcher", + "description": "Search a username across 2000+ websites", + "category": "username-social", + "url": "https://www.user-searcher.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.user-searcher.com](https://www.user-searcher.com)" + }, + "tags": [ + "username-social", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "userrecon", + "name": "UserRecon", + "description": "Bash-based username finder across platforms", + "category": "username-social", + "url": "https://github.com/wishihab/userrecon.git", + "install": { + "method": "git", + "kali": "`git clone https://github.com/wishihab/userrecon.git`", + "raw": "`git clone https://github.com/wishihab/userrecon.git`" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "UserRecon" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "usersearch.org", + "name": "Usersearch.org", + "description": "Free social network search", + "category": "username-social", + "url": "https://usersearch.org/", + "install": { + "method": "web", + "kali": "", + "raw": "[usersearch.org](https://usersearch.org/)" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "vehicle-number-toolbox", + "name": "Vehicle Number Search Toolbox", + "description": "Search 14 country license plates from one page", + "category": "vehicle-aviation-maritime", + "url": "https://cipher387.github.io/venicle_number_search_toolbox/", + "install": { + "method": "web", + "kali": "", + "raw": "[cipher387.github.io](https://cipher387.github.io/venicle_number_search_toolbox/)" + }, + "tags": [ + "vehicle-aviation-maritime", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "velociraptor", + "name": "Velociraptor", + "description": "Endpoint visibility and digital forensics — query-driven", + "category": "blue-team-defensive", + "url": "https://github.com/Velocidex/velociraptor", + "install": { + "method": "git", + "kali": "git clone https://github.com/Velocidex/velociraptor.git", + "raw": "`git clone https://github.com/Velocidex/velociraptor.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "velocirector", + "name": "Velociraptor Server", + "description": "Centralized server for Velociraptor agents", + "category": "blue-team-defensive", + "url": "https://docs.velociraptor.app", + "install": { + "method": "web", + "kali": "", + "raw": "[docs.velociraptor.app](https://docs.velociraptor.app)" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "venacus", + "name": "Venacus", + "description": "Search for your data breaches and get notified when compromised", + "category": "data-breach", + "url": "https://venacus.com", + "install": { + "method": "web", + "kali": "", + "raw": "[venacus.com](https://venacus.com)" + }, + "tags": [ + "data-breach", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "veracrypt", + "name": "VeraCrypt", + "description": "Disk encryption", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install veracrypt`", + "raw": "`apt install veracrypt`" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "VeraCrypt" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "vesselfinder", + "name": "VesselFinder", + "description": "Free AIS vessel tracking", + "category": "vehicle-aviation-maritime", + "url": "", + "install": { + "method": "manual", + "kali": "VesselFinder", + "raw": "VesselFinder" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "VesselFinder" + ], + "sections_seen": [ + "Vehicle, Aviation & Maritime" + ], + "archived": false + }, + { + "id": "viewdns", + "name": "ViewDNS", + "description": "Multiple DNS investigation tools", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "ViewDNS", + "raw": "ViewDNS" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "ViewDNS" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "vigilante-pw", + "name": "Vigilante.pw", + "description": "Index of dumped databases (educational)", + "category": "data-breach", + "url": "https://vigilante.pw", + "install": { + "method": "web", + "kali": "", + "raw": "[vigilante.pw](https://vigilante.pw)" + }, + "tags": [ + "data-breach", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "villain", + "name": "Villain", + "description": "High-level stage 0/1 C2 framework for handling sibling agents", + "category": "red-team-offensive", + "url": "https://github.com/t3l3machus/Villain", + "install": { + "method": "git", + "kali": "git clone https://github.com/t3l3machus/Villain.git", + "raw": "`git clone https://github.com/t3l3machus/Villain.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "virustotal", + "name": "VirusTotal", + "description": "Domain/IP/file analysis", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "VirusTotal", + "raw": "VirusTotal" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "VirusTotal" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "virustotal-threat", + "name": "VirusTotal (Threat)", + "description": "File/URL/domain malware analysis", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "manual", + "kali": "VirusTotal (Threat)", + "raw": "VirusTotal (Threat)" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "VirusTotal (Threat)" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "vmray", + "name": "VMRay Analyzer", + "description": "Malware sandbox analysis platform", + "category": "malware-threat-intel", + "url": "https://www.vmray.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.vmray.com](https://www.vmray.com)" + }, + "tags": [ + "malware-threat-intel", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "voila-norbert", + "name": "Voila Norbert", + "description": "Find anyone's email", + "category": "email-phone", + "url": "https://voilanorbert.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[voilanorbert.com](https://voilanorbert.com/)" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "volatility", + "name": "Volatility", + "description": "Memory forensics framework", + "category": "document-metadata", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install volatility3`", + "raw": "`pip install volatility3`" + }, + "tags": [ + "document-metadata" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Volatility" + ], + "sections_seen": [ + "Metadata & Digital Forensics" + ], + "archived": false + }, + { + "id": "volatility3", + "name": "Volatility 3", + "description": "Memory forensics framework", + "category": "digital-forensics", + "url": "https://github.com/volatilityfoundation/volatility3", + "install": { + "method": "pip", + "kali": "pip3 install volatility3", + "raw": "`pip3 install volatility3`" + }, + "tags": [ + "digital-forensics", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "vulnhub", + "name": "VulnHub", + "description": "Free downloadable vulnerable VMs for offline practice", + "category": "training-ctf", + "url": "https://www.vulnhub.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.vulnhub.com](https://www.vulnhub.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "vulnyx", + "name": "VulnYX", + "description": "Online platform with vulnerable boxes (free + premium)", + "category": "training-ctf", + "url": "https://vulnyx.com", + "install": { + "method": "web", + "kali": "", + "raw": "[vulnyx.com](https://vulnyx.com)" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "walletexplorer", + "name": "WalletExplorer", + "description": "Smart bitcoin block explorer — clusters addresses by entity", + "category": "crypto-blockchain", + "url": "https://walletexplorer.com", + "install": { + "method": "web", + "kali": "", + "raw": "[walletexplorer.com](https://walletexplorer.com)" + }, + "tags": [ + "crypto-blockchain", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "wappalyzer", + "name": "Wappalyzer", + "description": "Technology profiler (browser ext)", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Browser Extension", + "raw": "Browser Extension" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Wappalyzer" + ], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "wayback-machine", + "name": "Wayback Machine", + "description": "Web archive - explore website history", + "category": "misc", + "url": "", + "install": { + "method": "manual", + "kali": "Wayback Machine", + "raw": "Wayback Machine" + }, + "tags": [ + "misc" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Wayback Machine" + ], + "sections_seen": [ + "Miscellaneous / Niche Tools" + ], + "archived": false + }, + { + "id": "waybackurls", + "name": "waybackurls", + "description": "Fetch all URLs the Wayback Machine knows about a domain", + "category": "domain-ip-network", + "url": "https://github.com/tomnomnom/waybackurls", + "install": { + "method": "go", + "kali": "go install github.com/tomnomnom/waybackurls@latest", + "raw": "`go install github.com/tomnomnom/waybackurls@latest`" + }, + "tags": [ + "domain-ip-network", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "wazuh", + "name": "Wazuh", + "description": "Open-source XDR / SIEM platform", + "category": "blue-team-defensive", + "url": "https://wazuh.com", + "install": { + "method": "git", + "kali": "git clone https://github.com/wazuh/wazuh.git", + "raw": "`git clone https://github.com/wazuh/wazuh.git`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "weakpass", + "name": "Weakpass", + "description": "Massive wordlist collection", + "category": "data-breach", + "url": "https://weakpass.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[weakpass.com](https://weakpass.com/)" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Wordlist Generation & Brute Force" + ], + "archived": false + }, + { + "id": "web-check", + "name": "Web-Check", + "description": "All-in-one website analysis", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "Web-Check", + "raw": "Web-Check" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Web-Check" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "webgoat", + "name": "OWASP WebGoat", + "description": "Deliberately insecure Java-based web app for training", + "category": "training-ctf", + "url": "https://github.com/WebGoat/WebGoat", + "install": { + "method": "docker", + "kali": "docker pull webgoat/webgoat", + "raw": "`docker pull webgoat/webgoat`" + }, + "tags": [ + "training-ctf", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "webhack", + "name": "WebHack", + "description": "Web hacking toolkit", + "category": "domain-ip-network", + "url": "https://github.com/yan4ikyt/webhack", + "install": { + "method": "git", + "kali": "`git clone https://github.com/yan4ikyt/webhack`", + "raw": "`git clone https://github.com/yan4ikyt/webhack`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "webmii", + "name": "WebMii", + "description": "People search engine", + "category": "image-facial", + "url": "https://webmii.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[webmii.com](https://webmii.com/)" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Facial Recognition & People Search" + ], + "archived": false + }, + { + "id": "wfuzz", + "name": "Wfuzz", + "description": "Web fuzzer", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "pip", + "kali": "`pip install wfuzz`", + "raw": "`pip install wfuzz`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "whatmail", + "name": "WhatMail", + "description": "Email header analysis CLI", + "category": "email-phone", + "url": "https://github.com/z0m31en7/WhatMail", + "install": { + "method": "git", + "kali": "`git clone https://github.com/z0m31en7/WhatMail`", + "raw": "`git clone https://github.com/z0m31en7/WhatMail`" + }, + "tags": [ + "email-phone" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Email OSINT Tools" + ], + "archived": false + }, + { + "id": "whatsmyname", + "name": "WhatsMyName", + "description": "Web-based username enumeration", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "WhatsMyName", + "raw": "WhatsMyName" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "WhatsMyName" + ], + "sections_seen": [ + "Username & Social Media OSINT" + ], + "archived": false + }, + { + "id": "whatweb", + "name": "Whatweb", + "description": "Web technology identifier", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install whatweb`", + "raw": "`apt install whatweb`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Whatweb" + ], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "who-owns-what", + "name": "Who Owns What", + "description": "NYC landlord portfolio lookup", + "category": "vehicle-aviation-maritime", + "url": "https://whoownswhat.justfix.org/en/", + "install": { + "method": "web", + "kali": "", + "raw": "[whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "who-posted-what", + "name": "Who Posted What", + "description": "Facebook keyword search", + "category": "username-social", + "url": "", + "install": { + "method": "manual", + "kali": "✅ Free", + "raw": "✅ Free" + }, + "tags": [ + "username-social" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Social Media Searcher Platforms" + ], + "archived": false + }, + { + "id": "whois.com", + "name": "WHOIS.com", + "description": "WHOIS domain registration lookup", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "WHOIS.com", + "raw": "WHOIS.com" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "WHOIS.com" + ], + "sections_seen": [ + "Domain & IP OSINT" + ], + "archived": false + }, + { + "id": "whoisology", + "name": "Whoisology", + "description": "Reverse WHOIS — find domains by registrant", + "category": "domain-ip-network", + "url": "https://whoisology.com", + "install": { + "method": "web", + "kali": "", + "raw": "[whoisology.com](https://whoisology.com)" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "whonix", + "name": "Whonix", + "description": "Anonymous OS via Tor (VM-based)", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Whonix", + "raw": "Whonix" + }, + "tags": [ + "vpn-privacy" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Whonix" + ], + "sections_seen": [ + "Anonymous & Privacy Tools" + ], + "archived": false + }, + { + "id": "whoxy", + "name": "Whoxy", + "description": "WHOIS lookup with reverse-WHOIS, history, and bulk API", + "category": "domain-ip-network", + "url": "https://www.whoxy.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.whoxy.com](https://www.whoxy.com)" + }, + "tags": [ + "domain-ip-network", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "wifi-pineapple", + "name": "Wi-Fi Pineapple", + "description": "Hak5's wireless auditing platform", + "category": "hardware-hacking", + "url": "https://shop.hak5.org/products/wifi-pineapple", + "install": { + "method": "web", + "kali": "", + "raw": "[shop.hak5.org](https://shop.hak5.org/products/wifi-pineapple)" + }, + "tags": [ + "hardware-hacking", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "wifite", + "name": "Wifite", + "description": "Automated Wi-Fi auditing tool", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install wifite`", + "raw": "`apt install wifite`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "wigle", + "name": "WiGLE", + "description": "Wireless network mapping database", + "category": "iot-devices", + "url": "", + "install": { + "method": "manual", + "kali": "WiGLE", + "raw": "WiGLE" + }, + "tags": [ + "iot-devices" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "WiGLE" + ], + "sections_seen": [ + "IoT & Device Intelligence" + ], + "archived": false + }, + { + "id": "wikidata", + "name": "Wikidata", + "description": "Wikipedia's structured-data backbone — query via SPARQL", + "category": "people-identity", + "url": "https://www.wikidata.org", + "install": { + "method": "web", + "kali": "", + "raw": "[www.wikidata.org](https://www.wikidata.org)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "wikimapia", + "name": "Wikimapia", + "description": "Collaborative world map with annotations", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "Wikimapia", + "raw": "Wikimapia" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Wikimapia" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "wikipedia-search", + "name": "Wikipedia", + "description": "Free encyclopedia — start of every people/place investigation", + "category": "people-identity", + "url": "https://en.wikipedia.org", + "install": { + "method": "web", + "kali": "", + "raw": "[en.wikipedia.org](https://en.wikipedia.org)" + }, + "tags": [ + "people-identity", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "windscribe-free", + "name": "Windscribe Free", + "description": "Generous free VPN with 10GB/month and ad blocking", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "manual", + "kali": "Website", + "raw": "Website" + }, + "tags": [ + "vpn-privacy", + "free-tier:10GB/month, 10 countries", + "open-source:❌", + "no-log:✅", + "protocols:WireGuard, OpenVPN, IKEv2" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Windscribe Free" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "wireguard", + "name": "WireGuard", + "description": "Modern VPN protocol — ultra-fast, minimal attack surface", + "category": "vpn-privacy", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install wireguard`", + "raw": "`apt install wireguard`" + }, + "tags": [ + "vpn-privacy", + "free-tier:Free open-source protocol (self-hosted)", + "open-source:✅", + "no-log:✅", + "protocols:WireGuard (native)" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "WireGuard" + ], + "sections_seen": [ + "Free VPN & Privacy Tools" + ], + "archived": false + }, + { + "id": "wireshark", + "name": "Wireshark", + "description": "Network protocol analyzer", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install wireshark`", + "raw": "`apt install wireshark`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Wireshark" + ], + "sections_seen": [ + "Network & Wireless Tools" + ], + "archived": false + }, + { + "id": "worldlicenseplates", + "name": "WorldLicensePlates", + "description": "Graphic index of license plates by country", + "category": "vehicle-aviation-maritime", + "url": "http://www.worldlicenseplates.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.worldlicenseplates.com](http://www.worldlicenseplates.com)" + }, + "tags": [ + "vehicle-aviation-maritime", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "wpscan", + "name": "WPScan", + "description": "WordPress vulnerability scanner", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "`gem install wpscan`", + "raw": "`gem install wpscan`" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "WPScan" + ], + "sections_seen": [ + "Web Application OSINT & Scanning" + ], + "archived": false + }, + { + "id": "xeuledoc", + "name": "XeuleDoc", + "description": "Fetch info on Google Docs/Sheets/Slides/Drawings without auth", + "category": "document-metadata", + "url": "https://github.com/Malfrats/xeuledoc", + "install": { + "method": "pip", + "kali": "pip3 install xeuledoc", + "raw": "`pip3 install xeuledoc`" + }, + "tags": [ + "document-metadata", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "xposedornot", + "name": "XposedOrNot", + "description": "Breach exposure check", + "category": "data-breach", + "url": "", + "install": { + "method": "manual", + "kali": "🟢 Free", + "raw": "🟢 Free" + }, + "tags": [ + "data-breach" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "XposedOrNot" + ], + "sections_seen": [ + "Data Breach & Leak Search Engines" + ], + "archived": false + }, + { + "id": "xsstrike", + "name": "XSStrike", + "description": "Advanced XSS scanner with crawler and payload generator", + "category": "red-team-offensive", + "url": "https://github.com/s0md3v/XSStrike", + "install": { + "method": "git", + "kali": "git clone https://github.com/s0md3v/XSStrike.git", + "raw": "`git clone https://github.com/s0md3v/XSStrike.git`" + }, + "tags": [ + "red-team-offensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "yandex-images", + "name": "Yandex Images", + "description": "Best reverse image search for faces/places", + "category": "image-facial", + "url": "", + "install": { + "method": "manual", + "kali": "Yandex Images", + "raw": "Yandex Images" + }, + "tags": [ + "image-facial" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Yandex Images" + ], + "sections_seen": [ + "Image & Video OSINT" + ], + "archived": false + }, + { + "id": "yandex-search", + "name": "Yandex", + "description": "Russian search engine — strong reverse-image and Cyrillic support", + "category": "search-dorking", + "url": "https://www.yandex.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.yandex.com](https://www.yandex.com)" + }, + "tags": [ + "search-dorking", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "yara", + "name": "YARA", + "description": "Pattern matching for malware research", + "category": "malware-threat-intel", + "url": "", + "install": { + "method": "apt", + "kali": "`apt install yara`", + "raw": "`apt install yara`" + }, + "tags": [ + "malware-threat-intel" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "YARA" + ], + "sections_seen": [ + "Malware & Threat Intelligence" + ], + "archived": false + }, + { + "id": "yaraify", + "name": "YARAify", + "description": "Collaborative YARA engine for open threat intel via file pattern matching", + "category": "malware-threat-intel", + "url": "https://yaraify.abuse.ch/scan/", + "install": { + "method": "web", + "kali": "", + "raw": "[yaraify.abuse.ch](https://yaraify.abuse.ch/scan/)" + }, + "tags": [ + "malware-threat-intel", + "curated-addition", + "from-jivoi" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "yeswehack", + "name": "YesWeHack", + "description": "European-based bug-bounty and VDP platform", + "category": "bug-bounty", + "url": "https://www.yeswehack.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.yeswehack.com](https://www.yeswehack.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "yeti", + "name": "Yeti", + "description": "Open distributed threat intelligence platform", + "category": "threat-intel-platforms", + "url": "https://yeti-platform.io", + "install": { + "method": "git", + "kali": "git clone https://github.com/yeti-platform/yeti.git", + "raw": "`git clone https://github.com/yeti-platform/yeti.git`" + }, + "tags": [ + "threat-intel-platforms", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "yumpu", + "name": "Yumpu", + "description": "Document publishing — sometimes leaks via search", + "category": "document-metadata", + "url": "https://www.yumpu.com", + "install": { + "method": "web", + "kali": "", + "raw": "[www.yumpu.com](https://www.yumpu.com)" + }, + "tags": [ + "document-metadata", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "zeek", + "name": "Zeek (Bro)", + "description": "Powerful network analysis framework for security monitoring", + "category": "blue-team-defensive", + "url": "https://zeek.org", + "install": { + "method": "apt", + "kali": "apt install zeek", + "raw": "`apt install zeek`" + }, + "tags": [ + "blue-team-defensive", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "zehef", + "name": "Zehef", + "description": "OSINT tool for email/phone/name investigations", + "category": "people-identity", + "url": "", + "install": { + "method": "pip", + "kali": "`pip3 install zehef`", + "raw": "`pip3 install zehef`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "Zehef" + ], + "sections_seen": [ + "People & Identity OSINT" + ], + "archived": false + }, + { + "id": "zerobounce", + "name": "ZeroBounce", + "description": "Email validation and deliverability service", + "category": "email-phone", + "url": "https://www.zerobounce.net", + "install": { + "method": "web", + "kali": "", + "raw": "[www.zerobounce.net](https://www.zerobounce.net)" + }, + "tags": [ + "email-phone", + "v2.1-deep-research" + ], + "source_versions": [ + "v2.1" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "zerodium", + "name": "Zerodium", + "description": "Premium 0day acquisition platform", + "category": "bug-bounty", + "url": "https://zerodium.com", + "install": { + "method": "web", + "kali": "", + "raw": "[zerodium.com](https://zerodium.com)" + }, + "tags": [ + "bug-bounty", + "v3.3-expansion" + ], + "source_versions": [ + "v3.3" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "zillow", + "name": "Zillow", + "description": "Property records & estimates", + "category": "vehicle-aviation-maritime", + "url": "https://zillow.com/", + "install": { + "method": "web", + "kali": "", + "raw": "[zillow.com](https://zillow.com/)" + }, + "tags": [ + "vehicle-aviation-maritime" + ], + "source_versions": [ + "v1" + ], + "aliases": [], + "sections_seen": [ + "Vehicle, Property & Public Records" + ], + "archived": false + }, + { + "id": "zoom-earth", + "name": "Zoom Earth", + "description": "Real-time satellite & weather", + "category": "geolocation", + "url": "", + "install": { + "method": "manual", + "kali": "Zoom Earth", + "raw": "Zoom Earth" + }, + "tags": [ + "geolocation" + ], + "source_versions": [ + "v1", + "v2" + ], + "aliases": [ + "Zoom Earth" + ], + "sections_seen": [ + "Geolocation & Maps OSINT" + ], + "archived": false + }, + { + "id": "zoomeye", + "name": "ZoomEye", + "description": "Cyberspace search engine for IoT", + "category": "domain-ip-network", + "url": "", + "install": { + "method": "manual", + "kali": "ZoomEye", + "raw": "ZoomEye" + }, + "tags": [ + "domain-ip-network" + ], + "source_versions": [ + "v2" + ], + "aliases": [ + "ZoomEye" + ], + "sections_seen": [ + "Domain & IP / Network Recon" + ], + "archived": false + }, + { + "id": "zoomeye-cli", + "name": "ZoomEye CLI", + "description": "Command-line interface for ZoomEye internet asset search", + "category": "iot-devices", + "url": "https://github.com/knownsec/ZoomEye", + "install": { + "method": "pip", + "kali": "pip3 install zoomeye", + "raw": "`pip3 install zoomeye`" + }, + "tags": [ + "iot-devices", + "curated-addition" + ], + "source_versions": [ + "v3.1-curated" + ], + "aliases": [], + "sections_seen": [], + "archived": false + }, + { + "id": "zphisher", + "name": "Zphisher", + "description": "30+ phishing templates", + "category": "people-identity", + "url": "https://github.com/htr-tech/zphisher", + "install": { + "method": "git", + "kali": "`git clone https://github.com/htr-tech/zphisher`", + "raw": "`git clone https://github.com/htr-tech/zphisher`" + }, + "tags": [ + "people-identity" + ], + "source_versions": [ + "v1" + ], + "aliases": [ + "Zphisher" + ], + "sections_seen": [ + "Social Engineering & Phishing" + ], + "archived": false + } +] \ No newline at end of file