[
  {
    "id": "0xdf-hacks",
    "name": "0xdf hacks stuff",
    "description": "HTB writeups and pentesting writeups",
    "category": "learning-resources",
    "url": "https://0xdf.gitlab.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[0xdf.gitlab.io](https://0xdf.gitlab.io)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "abusech-hunting",
    "name": "abuse.ch Hunting",
    "description": "Hunt across all abuse.ch malware platforms with one query",
    "category": "malware-threat-intel",
    "url": "https://hunting.abuse.ch",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[hunting.abuse.ch](https://hunting.abuse.ch)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "abuseipdb",
    "name": "AbuseIPDB",
    "description": "IP address reputation database",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "AbuseIPDB",
      "raw": "AbuseIPDB"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "AbuseIPDB"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "ad-attack-defense",
    "name": "AD Attack & Defense",
    "description": "Comprehensive Active Directory attack reference",
    "category": "red-team-offensive",
    "url": "https://github.com/infosecn1nja/AD-Attack-Defense",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/infosecn1nja/AD-Attack-Defense.git",
      "raw": "`git clone https://github.com/infosecn1nja/AD-Attack-Defense.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ads-b-exchange",
    "name": "ADS-B Exchange",
    "description": "Unfiltered flight tracking data",
    "category": "vehicle-aviation-maritime",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ADS-B Exchange",
      "raw": "ADS-B Exchange"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "ADS-B Exchange"
    ],
    "sections_seen": [
      "Vehicle, Aviation & Maritime"
    ],
    "archived": false
  },
  {
    "id": "advphishing",
    "name": "AdvPhishing",
    "description": "Advanced phishing tool",
    "category": "people-identity",
    "url": "https://github.com/Ignitetch/AdvPhishing",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Ignitetch/AdvPhishing`",
      "raw": "`git clone https://github.com/Ignitetch/AdvPhishing`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "ahmia",
    "name": "Ahmia",
    "description": "Clearnet search engine for dark web",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Ahmia",
      "raw": "Ahmia"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Ahmia"
    ],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "ahmyth-android-rat",
    "name": "AhMyth Android RAT",
    "description": "Android remote access tool",
    "category": "iot-devices",
    "url": "https://github.com/AhMyth/AhMyth-Android-RAT",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`",
      "raw": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "ai-or-not",
    "name": "AI or Not",
    "description": "Detect AI-generated images",
    "category": "image-facial",
    "url": "https://aiornot.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[aiornot.com](https://aiornot.com/)"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "AI or Not"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "aircrack-ng",
    "name": "Aircrack-ng",
    "description": "Wi-Fi security auditing suite",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install aircrack-ng`",
      "raw": "`apt install aircrack-ng`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Aircrack-ng"
    ],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "aleph-occrp",
    "name": "Aleph (OCCRP)",
    "description": "Global corporate & public records",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Aleph (OCCRP)",
      "raw": "Aleph (OCCRP)"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Aleph (OCCRP)"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "aleph-open-search",
    "name": "Aleph Open Search",
    "description": "Dark-web search engine by Aleph Networks",
    "category": "dark-web",
    "url": "https://open-search.aleph-networks.eu",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[open-search.aleph-networks.eu](https://open-search.aleph-networks.eu)"
    },
    "tags": [
      "dark-web",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "aletheia-research",
    "name": "Aletheia (image forensics)",
    "description": "Detect manipulated/AI-generated images",
    "category": "image-facial",
    "url": "https://www.aletheia.ai",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.aletheia.ai](https://www.aletheia.ai)"
    },
    "tags": [
      "image-facial",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "alfa-network",
    "name": "Alfa Network Adapters",
    "description": "Wi-Fi adapters known to support monitor/inject mode (AWUS036ACH etc.)",
    "category": "hardware-hacking",
    "url": "https://www.alfa.com.tw",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.alfa.com.tw](https://www.alfa.com.tw)"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "algo-vpn",
    "name": "Algo VPN",
    "description": "Self-hosted cloud VPN — sets up WireGuard/IPsec automatically",
    "category": "vpn-privacy",
    "url": "https://github.com/trailofbits/algo",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/trailofbits/algo`",
      "raw": "`git clone https://github.com/trailofbits/algo`"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Free (self-hosted on cloud)",
      "open-source:✅",
      "no-log:✅",
      "protocols:WireGuard, IPsec"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Algo VPN"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "alienvault-otx",
    "name": "AlienVault OTX",
    "description": "Open threat exchange platform",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "AlienVault OTX",
      "raw": "AlienVault OTX"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "AlienVault OTX"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "altdns",
    "name": "altdns",
    "description": "Generates permutations, alterations and mutations of subdomains",
    "category": "domain-ip-network",
    "url": "https://github.com/infosec-au/altdns",
    "install": {
      "method": "pip",
      "kali": "pip3 install py-altdns",
      "raw": "`pip3 install py-altdns`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "amass",
    "name": "Amass",
    "description": "In-depth DNS enumeration and network mapping",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/owasp-amass/amass/v4/...@master`",
      "raw": "`go install github.com/owasp-amass/amass/v4/...@master`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Amass"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "anew-tomnomnom",
    "name": "anew",
    "description": "Append lines from stdin to a file only if not already there",
    "category": "domain-ip-network",
    "url": "https://github.com/tomnomnom/anew",
    "install": {
      "method": "go",
      "kali": "go install github.com/tomnomnom/anew@latest",
      "raw": "`go install github.com/tomnomnom/anew@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "anomali",
    "name": "Anomali ThreatStream",
    "description": "Enterprise threat intel aggregation platform",
    "category": "threat-intel-platforms",
    "url": "https://www.anomali.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.anomali.com](https://www.anomali.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "anon-sms",
    "name": "Anon-SMS",
    "description": "Anonymous SMS sending",
    "category": "vpn-privacy",
    "url": "https://github.com/HACK3RY2J/Anon-SMS.git",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`",
      "raw": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "anonsurf",
    "name": "Anonsurf",
    "description": "Anonymize entire OS traffic through Tor",
    "category": "vpn-privacy",
    "url": "https://github.com/Und3rf10w/kali-anonsurf",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Und3rf10w/kali-anonsurf`",
      "raw": "`git clone https://github.com/Und3rf10w/kali-anonsurf`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Anonsurf"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "any-run",
    "name": "ANY.RUN",
    "description": "Interactive online malware sandbox",
    "category": "malware-threat-intel",
    "url": "https://any.run",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[any.run](https://any.run)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "apktool",
    "name": "Apktool",
    "description": "Android APK decompiler/rebuilder",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install apktool`",
      "raw": "`apt install apktool`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "apollo-io",
    "name": "Apollo.io",
    "description": "B2B phone/email finder — 1200 free credits/yr",
    "category": "people-identity",
    "url": "https://www.apollo.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.apollo.io](https://www.apollo.io)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "apt-groups",
    "name": "APT Groups and Operations",
    "description": "Spreadsheet of threat actors, sponsoring countries, TTPs",
    "category": "malware-threat-intel",
    "url": "https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[docs.google.com](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "aquatone",
    "name": "Aquatone",
    "description": "Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers)",
    "category": "domain-ip-network",
    "url": "https://github.com/michenriksen/aquatone",
    "install": {
      "method": "go",
      "kali": "go install github.com/michenriksen/aquatone@latest",
      "raw": "`go install github.com/michenriksen/aquatone@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "archive-today",
    "name": "Archive.today",
    "description": "Web archive — saves snapshots even when robots.txt blocks Wayback",
    "category": "document-metadata",
    "url": "https://archive.ph",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[archive.ph](https://archive.ph)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "arctic-shift",
    "name": "Arctic Shift",
    "description": "Tool for accessing large dumps of Reddit data via API/web",
    "category": "username-social",
    "url": "https://github.com/ArthurHeitmann/arctic_shift",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/ArthurHeitmann/arctic_shift.git",
      "raw": "`git clone https://github.com/ArthurHeitmann/arctic_shift.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "arin-whois",
    "name": "ARIN WHOIS",
    "description": "IP registration database",
    "category": "domain-ip-network",
    "url": "https://whois.arin.net/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[whois.arin.net](https://whois.arin.net/)"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "arjun",
    "name": "Arjun",
    "description": "HTTP parameter discovery suite",
    "category": "red-team-offensive",
    "url": "https://github.com/s0md3v/Arjun",
    "install": {
      "method": "pip",
      "kali": "pip3 install arjun",
      "raw": "`pip3 install arjun`"
    },
    "tags": [
      "red-team-offensive",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "arkham",
    "name": "Arkham Intelligence",
    "description": "On-chain intel — labels, entities, historical flows",
    "category": "crypto-blockchain",
    "url": "https://www.arkhamintelligence.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.arkhamintelligence.com](https://www.arkhamintelligence.com)"
    },
    "tags": [
      "crypto-blockchain",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "assetfinder",
    "name": "assetfinder",
    "description": "Find domains and subdomains related to a given domain",
    "category": "domain-ip-network",
    "url": "https://github.com/tomnomnom/assetfinder",
    "install": {
      "method": "go",
      "kali": "go install github.com/tomnomnom/assetfinder@latest",
      "raw": "`go install github.com/tomnomnom/assetfinder@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "atomic-red-team",
    "name": "Atomic Red Team",
    "description": "Library of small detection-test scripts mapped to MITRE ATT&CK",
    "category": "blue-team-defensive",
    "url": "https://github.com/redcanaryco/atomic-red-team",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/redcanaryco/atomic-red-team.git",
      "raw": "`git clone https://github.com/redcanaryco/atomic-red-team.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "attify-badge",
    "name": "Attify Badge",
    "description": "Hardware tool for IoT firmware/UART/JTAG analysis",
    "category": "hardware-hacking",
    "url": "https://www.attify-store.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.attify-store.com](https://www.attify-store.com)"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "autocheck",
    "name": "AutoCheck",
    "description": "Vehicle history reports",
    "category": "vehicle-aviation-maritime",
    "url": "https://autocheck.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[autocheck.com](https://autocheck.com/)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "autopsy",
    "name": "Autopsy",
    "description": "Full digital forensics platform",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install autopsy`",
      "raw": "`apt install autopsy`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Autopsy"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "autorecon",
    "name": "AutoRecon",
    "description": "Multi-threaded network reconnaissance and enumeration framework",
    "category": "domain-ip-network",
    "url": "https://github.com/Tib3rius/AutoRecon",
    "install": {
      "method": "pip",
      "kali": "pip3 install git+https://github.com/Tib3rius/AutoRecon.git",
      "raw": "`pip3 install git+https://github.com/Tib3rius/AutoRecon.git`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "awesome-hacking-resources",
    "name": "awesome-hacking-resources",
    "description": "Beginner-friendly hacking learning resources",
    "category": "learning-resources",
    "url": "https://github.com/vitalysim/Awesome-Hacking-Resources",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com](https://github.com/vitalysim/Awesome-Hacking-Resources)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "awesome-incident-response",
    "name": "awesome-incident-response",
    "description": "Curated list of IR tools and resources",
    "category": "learning-resources",
    "url": "https://github.com/meirwah/awesome-incident-response",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com](https://github.com/meirwah/awesome-incident-response)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "awesome-malware-analysis",
    "name": "awesome-malware-analysis",
    "description": "Curated list of malware-analysis tools",
    "category": "learning-resources",
    "url": "https://github.com/rshipp/awesome-malware-analysis",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com](https://github.com/rshipp/awesome-malware-analysis)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "awesome-pentest",
    "name": "awesome-pentest",
    "description": "Massive curated list of pentesting tools and resources",
    "category": "learning-resources",
    "url": "https://github.com/enaqx/awesome-pentest",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com](https://github.com/enaqx/awesome-pentest)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "axiom",
    "name": "Axiom",
    "description": "Dynamic infra framework for parallel cloud-based recon",
    "category": "domain-ip-network",
    "url": "https://github.com/pry0cc/axiom",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/pry0cc/axiom.git",
      "raw": "`git clone https://github.com/pry0cc/axiom.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "backgroundchecks",
    "name": "BackgroundChecks.com",
    "description": "Background check aggregator (BeenVerified family)",
    "category": "people-identity",
    "url": "https://www.backgroundchecks.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.backgroundchecks.com](https://www.backgroundchecks.com)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "baidu",
    "name": "Baidu",
    "description": "Major Chinese search engine — essential for China-focused OSINT",
    "category": "search-dorking",
    "url": "https://www.baidu.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.baidu.com](https://www.baidu.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bbh-list-public",
    "name": "Public Bug Bounty Programs (chaos)",
    "description": "ProjectDiscovery's free BBH program list",
    "category": "bug-bounty",
    "url": "https://chaos.projectdiscovery.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[chaos.projectdiscovery.io](https://chaos.projectdiscovery.io)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bbot",
    "name": "BBOT",
    "description": "Recursive internet scanner for attack surface",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install bbot`",
      "raw": "`pip3 install bbot`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "BBOT"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "beenverified",
    "name": "BeenVerified",
    "description": "People search & background check",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "BeenVerified",
      "raw": "BeenVerified"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "BeenVerified"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "bettercap",
    "name": "Bettercap",
    "description": "MITM framework (ARP, DNS, HTTP)",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install bettercap`",
      "raw": "`apt install bettercap`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "bevigil",
    "name": "BeVigil",
    "description": "Search subdomains, URLs, parameters from mobile applications",
    "category": "domain-ip-network",
    "url": "https://bevigil.com/search",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bevigil.com](https://bevigil.com/search)"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bgp-toolkit",
    "name": "BGP Toolkit",
    "description": "BGP/ASN/IP intelligence",
    "category": "domain-ip-network",
    "url": "https://bgp.he.net/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bgp.he.net](https://bgp.he.net/)"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "bgp-tools",
    "name": "BGP.tools",
    "description": "Modern BGP toolkit for network reconnaissance",
    "category": "domain-ip-network",
    "url": "https://bgp.tools",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bgp.tools](https://bgp.tools)"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "binary-ninja",
    "name": "Binary Ninja",
    "description": "Modern reverse engineering platform with API",
    "category": "digital-forensics",
    "url": "https://binary.ninja",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[binary.ninja](https://binary.ninja)"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "binaryedge",
    "name": "BinaryEdge",
    "description": "Cyber risk and attack-surface intelligence",
    "category": "iot-devices",
    "url": "https://www.binaryedge.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.binaryedge.io](https://www.binaryedge.io)"
    },
    "tags": [
      "iot-devices",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bincheck",
    "name": "BinCheck",
    "description": "Bank card BIN lookup",
    "category": "company-business",
    "url": "https://bincheck.io/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bincheck.io](https://bincheck.io/)"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "binwalk",
    "name": "Binwalk",
    "description": "Firmware analysis & extraction",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install binwalk`",
      "raw": "`apt install binwalk`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Binwalk"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "bitquery",
    "name": "Bitquery",
    "description": "Blockchain data APIs for on-chain investigation",
    "category": "crypto-blockchain",
    "url": "https://bitquery.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bitquery.io](https://bitquery.io)"
    },
    "tags": [
      "crypto-blockchain",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "blackbird",
    "name": "Blackbird",
    "description": "Fast username search tool across 600+ websites",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install blackbird-osint`",
      "raw": "`pip install blackbird-osint`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Blackbird"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "blackbookonline",
    "name": "Black Book Online",
    "description": "Free nationwide directory of public-record lookups",
    "category": "people-identity",
    "url": "https://www.blackbookonline.info",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.blackbookonline.info](https://www.blackbookonline.info)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "blackeye",
    "name": "BlackEye",
    "description": "32+ phishing template builder for credential capture (lab-only)",
    "category": "people-identity",
    "url": "https://github.com/An0nUD4Y/blackeye",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/An0nUD4Y/blackeye.git",
      "raw": "`git clone https://github.com/An0nUD4Y/blackeye.git`"
    },
    "tags": [
      "people-identity",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bleachbit",
    "name": "BleachBit",
    "description": "Digital footprint cleaner",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install bleachbit`",
      "raw": "`apt install bleachbit`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "BleachBit"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "blockchain.com",
    "name": "Blockchain.com",
    "description": "Bitcoin explorer",
    "category": "company-business",
    "url": "https://blockchain.com/explorer",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[blockchain.com/explorer](https://blockchain.com/explorer)"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "blockchain.com-explorer",
    "name": "Blockchain.com Explorer",
    "description": "Bitcoin blockchain explorer",
    "category": "crypto-blockchain",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Blockchain.com Explorer",
      "raw": "Blockchain.com Explorer"
    },
    "tags": [
      "crypto-blockchain"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Blockchain.com Explorer"
    ],
    "sections_seen": [
      "Cryptocurrency & Blockchain"
    ],
    "archived": false
  },
  {
    "id": "blockchair",
    "name": "Blockchair",
    "description": "Universal blockchain explorer & search",
    "category": "crypto-blockchain",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Blockchair",
      "raw": "Blockchair"
    },
    "tags": [
      "crypto-blockchain"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Blockchair"
    ],
    "sections_seen": [
      "Cryptocurrency & Blockchain"
    ],
    "archived": false
  },
  {
    "id": "bloodhound",
    "name": "BloodHound",
    "description": "AD attack-path graph analysis",
    "category": "red-team-offensive",
    "url": "https://github.com/BloodHoundAD/BloodHound",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/BloodHoundAD/BloodHound.git",
      "raw": "`git clone https://github.com/BloodHoundAD/BloodHound.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bloodhound-ce",
    "name": "BloodHound CE",
    "description": "Community Edition of BloodHound — modernized stack",
    "category": "red-team-offensive",
    "url": "https://github.com/SpecterOps/BloodHound",
    "install": {
      "method": "docker",
      "kali": "docker pull specterops/bloodhound:latest",
      "raw": "`docker pull specterops/bloodhound:latest`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "brandwatch",
    "name": "BrandWatch",
    "description": "Social listening platform",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "💰 Paid",
      "raw": "💰 Paid"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "BrandWatch"
    ],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "brave-browser",
    "name": "Brave Browser",
    "description": "Privacy-focused browser with built-in Tor/IPFS support",
    "category": "vpn-privacy",
    "url": "https://brave.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[brave.com](https://brave.com)"
    },
    "tags": [
      "vpn-privacy",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "brave-search",
    "name": "Brave Search",
    "description": "Independent, transparent, ad-free search engine",
    "category": "search-dorking",
    "url": "https://search.brave.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[search.brave.com](https://search.brave.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "breachdirectory",
    "name": "BreachDirectory",
    "description": "Free breach search",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟢 Free",
      "raw": "🟢 Free"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "BreachDirectory"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "breachforums-mirror",
    "name": "BreachForums Status",
    "description": "Status tracking for the rotating BreachForums mirrors",
    "category": "data-breach",
    "url": "https://www.breachforums.cx",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.breachforums.cx](https://www.breachforums.cx)"
    },
    "tags": [
      "data-breach",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "breadcrumbs",
    "name": "Breadcrumbs",
    "description": "Free crypto investigation platform — visualize transaction flows",
    "category": "crypto-blockchain",
    "url": "https://breadcrumbs.app",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[breadcrumbs.app](https://breadcrumbs.app)"
    },
    "tags": [
      "crypto-blockchain",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "brightcloud",
    "name": "BrightCloud URL/IP Lookup",
    "description": "Reputation, category, and threat checks for URLs/IPs",
    "category": "malware-threat-intel",
    "url": "https://brightcloud.com/tools/url-ip-lookup.php",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[brightcloud.com](https://brightcloud.com/tools/url-ip-lookup.php)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "brightcloud-url",
    "name": "BrightCloud Threat Intelligence",
    "description": "URL/IP/threat reputation database",
    "category": "search-dorking",
    "url": "https://brightcloud.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[brightcloud.com](https://brightcloud.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "brute-ratel",
    "name": "Brute Ratel C4",
    "description": "Premium C2 with strong AV/EDR evasion",
    "category": "red-team-offensive",
    "url": "https://bruteratel.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bruteratel.com](https://bruteratel.com)"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bscscan",
    "name": "BscScan",
    "description": "Binance Smart Chain explorer — same UX as Etherscan",
    "category": "crypto-blockchain",
    "url": "https://bscscan.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bscscan.com](https://bscscan.com)"
    },
    "tags": [
      "crypto-blockchain",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "btfm-blueteam",
    "name": "BTFM: Blue Team Field Manual",
    "description": "Concise blue-team incident response reference",
    "category": "learning-resources",
    "url": "https://www.amazon.com/dp/154101636X",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.amazon.com](https://www.amazon.com/dp/154101636X)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bugbase",
    "name": "Bugbase",
    "description": "Indian-origin bug-bounty + vulnerability disclosure platform",
    "category": "bug-bounty",
    "url": "https://bugbase.ai",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bugbase.ai](https://bugbase.ai)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bugbountyhunter",
    "name": "BugBountyHunter",
    "description": "Web hacking training and labs",
    "category": "training-ctf",
    "url": "https://www.bugbountyhunter.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.bugbountyhunter.com](https://www.bugbountyhunter.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "bugcrowd",
    "name": "Bugcrowd",
    "description": "Crowdsourced security platform — bug bounty + pentesting",
    "category": "bug-bounty",
    "url": "https://bugcrowd.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[bugcrowd.com](https://bugcrowd.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "builtwith",
    "name": "BuiltWith",
    "description": "Web technology profiler",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "BuiltWith",
      "raw": "BuiltWith"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "BuiltWith"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "bulk-extractor",
    "name": "Bulk Extractor",
    "description": "Extract features from disk images",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install bulk-extractor`",
      "raw": "`apt install bulk-extractor`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Bulk Extractor"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "burp-suite",
    "name": "Burp Suite",
    "description": "Web app security testing proxy",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`burpsuite`",
      "raw": "`burpsuite`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Burp Suite"
    ],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "bus-pirate",
    "name": "Bus Pirate",
    "description": "Universal serial-protocol probe (I2C, SPI, UART, JTAG)",
    "category": "hardware-hacking",
    "url": "http://dangerousprototypes.com/docs/Bus_Pirate",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[dangerousprototypes.com](http://dangerousprototypes.com/docs/Bus_Pirate)"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cachedview",
    "name": "CachedView",
    "description": "View Google/Bing/Yandex cached versions of any page",
    "category": "document-metadata",
    "url": "https://cachedview.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[cachedview.com](https://cachedview.com)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "caldera",
    "name": "MITRE CALDERA",
    "description": "Cyber adversary emulation platform",
    "category": "blue-team-defensive",
    "url": "https://github.com/mitre/caldera",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/mitre/caldera.git",
      "raw": "`git clone https://github.com/mitre/caldera.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "calleridtest",
    "name": "CallerIDTest",
    "description": "Reverse phone lookup",
    "category": "email-phone",
    "url": "https://calleridtest.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[calleridtest.com](https://calleridtest.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "calyxvpn",
    "name": "CalyxVPN",
    "description": "Free VPN by Calyx Institute — no accounts required",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Website",
      "raw": "Website"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Unlimited, no account needed",
      "open-source:✅",
      "no-log:✅",
      "protocols:OpenVPN (Bitmask)"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "CalyxVPN"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "canary-tokens",
    "name": "Canary Tokens",
    "description": "Tracking tokens (URL, email, DNS, files)",
    "category": "geolocation",
    "url": "https://canarytokens.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[canarytokens.org](https://canarytokens.org/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "IP Tracking & Geolocation Links"
    ],
    "archived": false
  },
  {
    "id": "castrick",
    "name": "Castrick",
    "description": "Find social media accounts via email, username, phone",
    "category": "people-identity",
    "url": "https://castrickclues.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[castrickclues.com](https://castrickclues.com)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "censys",
    "name": "Censys",
    "description": "Internet-wide scan search",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Censys",
      "raw": "Censys"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Censys"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "censys-cli",
    "name": "Censys CLI",
    "description": "Official Python wrapper and CLI for Censys",
    "category": "search-dorking",
    "url": "https://github.com/censys/censys-python",
    "install": {
      "method": "pip",
      "kali": "pip3 install censys",
      "raw": "`pip3 install censys`"
    },
    "tags": [
      "search-dorking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "certipy",
    "name": "Certipy",
    "description": "Active Directory Certificate Services enumeration and abuse",
    "category": "red-team-offensive",
    "url": "https://github.com/ly4k/Certipy",
    "install": {
      "method": "pip",
      "kali": "pip3 install certipy-ad",
      "raw": "`pip3 install certipy-ad`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "certkit",
    "name": "CertKit Certificate Search",
    "description": "Fast search for public SSL/TLS certificate records",
    "category": "domain-ip-network",
    "url": "https://www.certkit.io/tools/ct-logs/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.certkit.io](https://www.certkit.io/tools/ct-logs/)"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cewl",
    "name": "CeWL",
    "description": "Custom wordlist generator from website",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install cewl`",
      "raw": "`apt install cewl`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "CeWL"
    ],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "chainabuse",
    "name": "Chainabuse",
    "description": "Public crypto-scam reporting database",
    "category": "crypto-blockchain",
    "url": "https://www.chainabuse.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.chainabuse.com](https://www.chainabuse.com)"
    },
    "tags": [
      "crypto-blockchain",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "chainalysis",
    "name": "Chainalysis",
    "description": "Blockchain analytics & investigation",
    "category": "crypto-blockchain",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Chainalysis",
      "raw": "Chainalysis"
    },
    "tags": [
      "crypto-blockchain"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Chainalysis"
    ],
    "sections_seen": [
      "Cryptocurrency & Blockchain"
    ],
    "archived": false
  },
  {
    "id": "chainalysis-reactor",
    "name": "Chainalysis Reactor",
    "description": "Premium blockchain investigation platform",
    "category": "crypto-blockchain",
    "url": "https://www.chainalysis.com/product/reactor/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.chainalysis.com](https://www.chainalysis.com/product/reactor/)"
    },
    "tags": [
      "crypto-blockchain",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "chainsaw",
    "name": "Chainsaw",
    "description": "Hunt threats in Windows event logs — fast forensics",
    "category": "blue-team-defensive",
    "url": "https://github.com/WithSecureLabs/chainsaw",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/WithSecureLabs/chainsaw.git",
      "raw": "`git clone https://github.com/WithSecureLabs/chainsaw.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "chatgpt",
    "name": "ChatGPT",
    "description": "OpenAI's AI assistant",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ GPT-4o mini",
      "raw": "✅ GPT-4o mini"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "checkleaked",
    "name": "CheckLeaked",
    "description": "Leak search engine (15B+ accounts)",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "checkuser",
    "name": "CheckUser",
    "description": "Search username across multiple social networks",
    "category": "username-social",
    "url": "https://checkuser.vercel.app",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[checkuser.vercel.app](https://checkuser.vercel.app)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "checkusernames",
    "name": "CheckUserNames",
    "description": "Check username across multiple platforms",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "CheckUserNames",
      "raw": "CheckUserNames"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "CheckUserNames"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "cisco-talos",
    "name": "Cisco Talos Intelligence",
    "description": "IP and Domain Reputation Center for real-time detection",
    "category": "malware-threat-intel",
    "url": "https://talosintelligence.com/reputation_center",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[talosintelligence.com](https://talosintelligence.com/reputation_center)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "claude",
    "name": "Claude",
    "description": "Best for reasoning & analysis",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free tier",
      "raw": "✅ Free tier"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "clearbit",
    "name": "Clearbit Connect",
    "description": "Email finder browser extension with company data",
    "category": "people-identity",
    "url": "https://connect.clearbit.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[connect.clearbit.com](https://connect.clearbit.com)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cloudflare-radar",
    "name": "Cloudflare Radar",
    "description": "Internet traffic patterns, attacks, technology trends",
    "category": "domain-ip-network",
    "url": "https://radar.cloudflare.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[radar.cloudflare.com](https://radar.cloudflare.com)"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "clustrmaps",
    "name": "Clustrmaps",
    "description": "Find people and address information",
    "category": "people-identity",
    "url": "https://clustrmaps.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[clustrmaps.com](https://clustrmaps.com)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cobalt-strike",
    "name": "Cobalt Strike",
    "description": "Premium adversary simulation / red team framework",
    "category": "red-team-offensive",
    "url": "https://www.cobaltstrike.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.cobaltstrike.com](https://www.cobaltstrike.com)"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "commandersearch",
    "name": "Commander Search",
    "description": "Boolean search builder for OSINT investigators",
    "category": "search-dorking",
    "url": "https://www.commandersearch.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.commandersearch.com](https://www.commandersearch.com)"
    },
    "tags": [
      "search-dorking",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "commentpicker-tg",
    "name": "Telemetr",
    "description": "Telegram channel/group analytics",
    "category": "username-social",
    "url": "https://telemetr.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[telemetr.io](https://telemetr.io)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "commix",
    "name": "Commix",
    "description": "Command injection exploiter",
    "category": "domain-ip-network",
    "url": "https://github.com/commixproject/commix",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/commixproject/commix`",
      "raw": "`git clone https://github.com/commixproject/commix`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "companies-house-uk",
    "name": "Companies House (UK)",
    "description": "UK company register",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Companies House (UK)",
      "raw": "Companies House (UK)"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Companies House (UK)"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "constella-intel",
    "name": "Constella Intelligence",
    "description": "Identity threat intel from breaches and dark web",
    "category": "people-identity",
    "url": "https://constellaintelligence.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[constellaintelligence.com](https://constellaintelligence.com)"
    },
    "tags": [
      "people-identity",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "contactout",
    "name": "ContactOut",
    "description": "Find emails and phones for 300M+ professionals",
    "category": "people-identity",
    "url": "https://contactout.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[contactout.com](https://contactout.com)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cortex",
    "name": "Cortex (TheHive)",
    "description": "Observable analysis and active response engine",
    "category": "blue-team-defensive",
    "url": "https://github.com/TheHive-Project/Cortex",
    "install": {
      "method": "docker",
      "kali": "docker pull thehiveproject/cortex:latest",
      "raw": "`docker pull thehiveproject/cortex:latest`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "court-listener",
    "name": "Court Listener",
    "description": "Free US court opinion search",
    "category": "vehicle-aviation-maritime",
    "url": "https://courtlistener.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[courtlistener.com](https://courtlistener.com/)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "crackmapexec",
    "name": "CrackMapExec",
    "description": "Post-exploitation tool for AD networks",
    "category": "red-team-offensive",
    "url": "https://github.com/byt3bl33d3r/CrackMapExec",
    "install": {
      "method": "pip",
      "kali": "pip3 install crackmapexec",
      "raw": "`pip3 install crackmapexec`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "credenshow",
    "name": "CredenShow",
    "description": "Identify your compromised credentials before others do",
    "category": "data-breach",
    "url": "https://credenshow.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[credenshow.com](https://credenshow.com)"
    },
    "tags": [
      "data-breach",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "criminal-ip",
    "name": "Criminal IP",
    "description": "AI-powered cyber threat intelligence",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Criminal IP",
      "raw": "Criminal IP"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Criminal IP"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "crlfuzz",
    "name": "CRLFuzz",
    "description": "Fast CRLF-injection scanner in Go",
    "category": "red-team-offensive",
    "url": "https://github.com/dwisiswant0/crlfuzz",
    "install": {
      "method": "go",
      "kali": "go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest",
      "raw": "`go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "crosslinked",
    "name": "CrossLinked",
    "description": "LinkedIn enumeration — generate username lists from LinkedIn profiles",
    "category": "people-identity",
    "url": "https://github.com/m8sec/CrossLinked",
    "install": {
      "method": "pip",
      "kali": "pip3 install crosslinked",
      "raw": "`pip3 install crosslinked`"
    },
    "tags": [
      "people-identity",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "crowdstrike-falcon-x",
    "name": "CrowdStrike Falcon Intelligence",
    "description": "Premium adversary intel from CrowdStrike",
    "category": "threat-intel-platforms",
    "url": "https://www.crowdstrike.com/products/threat-intelligence/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "crt.sh",
    "name": "crt.sh",
    "description": "Certificate transparency search",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "crt.sh",
      "raw": "crt.sh"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "crt.sh"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "crunch",
    "name": "Crunch",
    "description": "Pattern-based wordlist generator",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install crunch`",
      "raw": "`apt install crunch`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Crunch"
    ],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "crunchbase",
    "name": "Crunchbase",
    "description": "Company/startup database",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Crunchbase",
      "raw": "Crunchbase"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Crunchbase"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "ctftime",
    "name": "CTFtime",
    "description": "Calendar of upcoming and past CTF events",
    "category": "training-ctf",
    "url": "https://ctftime.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[ctftime.org](https://ctftime.org)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cupp",
    "name": "Cupp",
    "description": "Profile-based wordlist generator",
    "category": "data-breach",
    "url": "https://github.com/Mebus/cupp",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Mebus/cupp`",
      "raw": "`git clone https://github.com/Mebus/cupp`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Wordlist Generation & Brute Force"
    ],
    "archived": false
  },
  {
    "id": "cutter",
    "name": "Cutter",
    "description": "GUI for radare2/rizin reverse-engineering",
    "category": "digital-forensics",
    "url": "https://cutter.re",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/rizinorg/cutter.git",
      "raw": "`git clone https://github.com/rizinorg/cutter.git`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "cyberchef",
    "name": "CyberChef",
    "description": "Data analysis swiss army knife",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "CyberChef",
      "raw": "CyberChef"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "CyberChef"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "cybrary",
    "name": "Cybrary",
    "description": "Free + paid cybersecurity courses",
    "category": "training-ctf",
    "url": "https://www.cybrary.it",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.cybrary.it](https://www.cybrary.it)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dalfox",
    "name": "Dalfox",
    "description": "Fast, intelligent XSS scanner",
    "category": "red-team-offensive",
    "url": "https://github.com/hahwul/dalfox",
    "install": {
      "method": "go",
      "kali": "go install github.com/hahwul/dalfox/v2@latest",
      "raw": "`go install github.com/hahwul/dalfox/v2@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "daprofiler",
    "name": "DaProfiler",
    "description": "OSINT profiling tool with reports",
    "category": "people-identity",
    "url": "https://github.com/daprofiler/DaProfiler",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/daprofiler/DaProfiler`",
      "raw": "`git clone https://github.com/daprofiler/DaProfiler`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "DaProfiler"
    ],
    "sections_seen": [
      "People & Identity OSINT"
    ],
    "archived": false
  },
  {
    "id": "dark.fail",
    "name": "Dark.fail",
    "description": "Verified dark web links directory",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Dark.fail",
      "raw": "Dark.fail"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Dark.fail"
    ],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "darkscrape",
    "name": "DarkScrape",
    "description": "Dark web scraping tool",
    "category": "dark-web",
    "url": "https://github.com/itsmehacker/DarkScrape",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/itsmehacker/DarkScrape`",
      "raw": "`git clone https://github.com/itsmehacker/DarkScrape`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "DarkScrape"
    ],
    "sections_seen": [
      "Dark Web & Tor Intelligence"
    ],
    "archived": false
  },
  {
    "id": "darksearch",
    "name": "DarkSearch",
    "description": "Dark web search API (clearnet)",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "DarkSearch",
      "raw": "DarkSearch"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "DarkSearch"
    ],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "databreach.com",
    "name": "DataBreach.com",
    "description": "Data breach lookup",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟢 Free",
      "raw": "🟢 Free"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "db-ip",
    "name": "DB-IP",
    "description": "IP geolocation database",
    "category": "domain-ip-network",
    "url": "https://db-ip.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[db-ip.com](https://db-ip.com/)"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "dbpedia",
    "name": "DBpedia",
    "description": "Structured Wikipedia data — SPARQL endpoint",
    "category": "people-identity",
    "url": "https://www.dbpedia.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.dbpedia.org](https://www.dbpedia.org)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "deepface",
    "name": "DeepFace",
    "description": "AI face analysis (age, gender, emotion)",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install deepface`",
      "raw": "`pip install deepface`"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "DeepFace"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "deepseek",
    "name": "DeepSeek",
    "description": "Open-source, strong reasoning",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "dehashed",
    "name": "DeHashed",
    "description": "Breach search engine",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "💰 Paid",
      "raw": "💰 Paid"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "DeHashed"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "depix",
    "name": "Depix",
    "description": "Recover pixelated text from screenshots",
    "category": "image-facial",
    "url": "https://github.com/beurtschipper/Depix",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/beurtschipper/Depix`",
      "raw": "`git clone https://github.com/beurtschipper/Depix`"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Depix"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "digital-footprint-check",
    "name": "Digital Footprint Check",
    "description": "Free username check on hundreds of sites",
    "category": "username-social",
    "url": "https://www.digitalfootprintcheck.com/free-checker.html",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.digitalfootprintcheck.com](https://www.digitalfootprintcheck.com/free-checker.html)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "digital-shadows",
    "name": "Digital Shadows SearchLight",
    "description": "Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP)",
    "category": "threat-intel-platforms",
    "url": "https://www.reliaquest.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.reliaquest.com](https://www.reliaquest.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dirb",
    "name": "Dirb",
    "description": "Web directory brute-forcer",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install dirb`",
      "raw": "`apt install dirb`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Dirb"
    ],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "dirsearch",
    "name": "dirsearch",
    "description": "Web path scanner — advanced wordlist-based directory bruteforce",
    "category": "domain-ip-network",
    "url": "https://github.com/maurosoria/dirsearch",
    "install": {
      "method": "pip",
      "kali": "pip3 install dirsearch",
      "raw": "`pip3 install dirsearch`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "disboard",
    "name": "Disboard",
    "description": "Discord server discovery platform",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Disboard",
      "raw": "Disboard"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Disboard"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "disclose-io",
    "name": "Disclose.io",
    "description": "Standardized vulnerability-disclosure language and tools",
    "category": "bug-bounty",
    "url": "https://disclose.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[disclose.io](https://disclose.io)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "discord-history",
    "name": "DiscordHistory",
    "description": "Search public Discord servers and messages",
    "category": "username-social",
    "url": "https://disboard.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[disboard.org](https://disboard.org)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "discord-history-tracker",
    "name": "Discord History Tracker",
    "description": "Save Discord chat history",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Discord History Tracker",
      "raw": "Discord History Tracker"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Discord History Tracker"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "discord-lookup",
    "name": "Discord Lookup",
    "description": "Look up Discord user info via ID",
    "category": "username-social",
    "url": "https://discordlookup.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[discordlookup.com](https://discordlookup.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "discordbee",
    "name": "DiscordBee",
    "description": "Discord user and server search engine",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "DiscordBee",
      "raw": "DiscordBee"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "DiscordBee"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "discordhub",
    "name": "DiscordHub",
    "description": "Discord user search platform",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "DiscordHub",
      "raw": "DiscordHub"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "DiscordHub"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "dissect",
    "name": "Dissect",
    "description": "Fox-IT framework for fast forensic image analysis",
    "category": "digital-forensics",
    "url": "https://docs.dissect.tools",
    "install": {
      "method": "pip",
      "kali": "pip3 install dissect",
      "raw": "`pip3 install dissect`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dnsdumpster",
    "name": "DNSDumpster",
    "description": "DNS reconnaissance & mapping",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "DNSDumpster",
      "raw": "DNSDumpster"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "DNSDumpster"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "dnshistory",
    "name": "DNS History",
    "description": "Historical DNS records lookup",
    "category": "domain-ip-network",
    "url": "https://dnshistory.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[dnshistory.org](https://dnshistory.org)"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dnsrecon",
    "name": "dnsrecon",
    "description": "DNS enumeration and reconnaissance",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install dnsrecon`",
      "raw": "`pip install dnsrecon`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "dnsrecon"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "dnstwist",
    "name": "dnstwist",
    "description": "Domain name permutation engine for phishing detection",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install dnstwist`",
      "raw": "`pip3 install dnstwist`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "dnstwist"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "documentcloud",
    "name": "DocumentCloud",
    "description": "Platform for analyzing, annotating, publishing documents",
    "category": "document-metadata",
    "url": "https://www.documentcloud.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.documentcloud.org](https://www.documentcloud.org)"
    },
    "tags": [
      "document-metadata",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dork-cli",
    "name": "dork-cli",
    "description": "Run Google dorks from the command line",
    "category": "search-dorking",
    "url": "https://github.com/jgor/dork-cli",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/jgor/dork-cli.git",
      "raw": "`git clone https://github.com/jgor/dork-cli.git`"
    },
    "tags": [
      "search-dorking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dorkgenius",
    "name": "DorkGenius",
    "description": "AI-powered search query generator for Google, Bing, DuckDuckGo",
    "category": "search-dorking",
    "url": "https://dorkgenius.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[dorkgenius.com](https://dorkgenius.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dorkgpt",
    "name": "DorkGPT",
    "description": "Generate Google Dorks with AI",
    "category": "search-dorking",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "DorkGPT",
      "raw": "DorkGPT"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "DorkGPT"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "dorksearch",
    "name": "DorkSearch",
    "description": "Google dork search engine",
    "category": "search-dorking",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "DorkSearch",
      "raw": "DorkSearch"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "DorkSearch"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "dorky-com",
    "name": "Dorky",
    "description": "Online dork builder for Google/Bing/DuckDuckGo",
    "category": "search-dorking",
    "url": "https://dorky.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[dorky.io](https://dorky.io)"
    },
    "tags": [
      "search-dorking",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "duckduckgo-onion",
    "name": "DuckDuckGo Onion",
    "description": "Private search on Tor",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`",
      "raw": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "dune",
    "name": "Dune Analytics",
    "description": "SQL queries over indexed blockchain data",
    "category": "crypto-blockchain",
    "url": "https://dune.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[dune.com](https://dune.com)"
    },
    "tags": [
      "crypto-blockchain",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "dvwa",
    "name": "DVWA",
    "description": "Damn Vulnerable Web Application — classic appsec lab",
    "category": "training-ctf",
    "url": "https://github.com/digininja/DVWA",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/digininja/DVWA.git",
      "raw": "`git clone https://github.com/digininja/DVWA.git`"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "eclecticiq",
    "name": "EclecticIQ Intelligence Center",
    "description": "STIX/TAXII-native threat intel platform",
    "category": "threat-intel-platforms",
    "url": "https://www.eclecticiq.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.eclecticiq.com](https://www.eclecticiq.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "elk-elastic",
    "name": "Elastic Stack (ELK)",
    "description": "Elasticsearch + Logstash + Kibana — log analytics",
    "category": "blue-team-defensive",
    "url": "https://www.elastic.co/elastic-stack",
    "install": {
      "method": "docker",
      "kali": "docker pull docker.elastic.co/elasticsearch/elasticsearch:latest",
      "raw": "`docker pull docker.elastic.co/elasticsearch/elasticsearch:latest`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "elliptic",
    "name": "Elliptic",
    "description": "Crypto financial-crime detection and investigation",
    "category": "crypto-blockchain",
    "url": "https://www.elliptic.co",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.elliptic.co](https://www.elliptic.co)"
    },
    "tags": [
      "crypto-blockchain",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "email-checker",
    "name": "Email-Checker",
    "description": "Email validation tool",
    "category": "email-phone",
    "url": "https://email-checker.net/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[email-checker.net](https://email-checker.net/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "emailanalyzer",
    "name": "EmailAnalyzer",
    "description": "Analyze suspicious .eml files",
    "category": "email-phone",
    "url": "https://github.com/keraattin/EmailAnalyzer",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/keraattin/EmailAnalyzer`",
      "raw": "`git clone https://github.com/keraattin/EmailAnalyzer`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "emailheader-analyzer",
    "name": "EmailHeader-Analyzer",
    "description": "CLI email header parser + OSINT",
    "category": "email-phone",
    "url": "https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`",
      "raw": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "emailrep",
    "name": "EmailRep",
    "description": "Email address reputation and risk scoring",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "EmailRep",
      "raw": "EmailRep"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "EmailRep"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "emailrep-io",
    "name": "EmailRep.io",
    "description": "Free email reputation API by Sublime Security",
    "category": "email-phone",
    "url": "https://emailrep.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[emailrep.io](https://emailrep.io)"
    },
    "tags": [
      "email-phone",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "empire",
    "name": "PowerShell Empire",
    "description": "Post-exploitation framework with PS-based agents",
    "category": "red-team-offensive",
    "url": "https://github.com/BC-SECURITY/Empire",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/BC-SECURITY/Empire.git",
      "raw": "`git clone https://github.com/BC-SECURITY/Empire.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "epieos",
    "name": "Epieos",
    "description": "Get info linked to any email address",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Epieos",
      "raw": "Epieos"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Epieos"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "epieos-tools",
    "name": "Epieos Tools",
    "description": "Reverse-lookup email/phone for Google profile data",
    "category": "people-identity",
    "url": "https://tools.epieos.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[tools.epieos.com](https://tools.epieos.com)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "epstein-exposed",
    "name": "Epstein Exposed",
    "description": "Searchable database of 2M+ DOJ Epstein case docs and network graphs",
    "category": "document-metadata",
    "url": "https://epsteinexposed.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[epsteinexposed.com](https://epsteinexposed.com)"
    },
    "tags": [
      "document-metadata",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "eric-zimmerman-tools",
    "name": "Eric Zimmerman's Tools",
    "description": "Suite of free Windows DFIR utilities",
    "category": "digital-forensics",
    "url": "https://ericzimmerman.github.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[ericzimmerman.github.io](https://ericzimmerman.github.io)"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "etda-apt",
    "name": "ETDA APT Groups",
    "description": "Search threat-actor groups and their tools",
    "category": "malware-threat-intel",
    "url": "https://apt.etda.or.th/cgi-bin/listgroups.cgi",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[apt.etda.or.th](https://apt.etda.or.th/cgi-bin/listgroups.cgi)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "etherscan",
    "name": "Etherscan",
    "description": "Ethereum blockchain explorer",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Etherscan",
      "raw": "Etherscan"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Etherscan"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "etherscan-cli",
    "name": "etherscan-py",
    "description": "Python wrapper for Etherscan API",
    "category": "crypto-blockchain",
    "url": "https://github.com/pcko1/etherscan-python",
    "install": {
      "method": "pip",
      "kali": "pip3 install etherscan-python",
      "raw": "`pip3 install etherscan-python`"
    },
    "tags": [
      "crypto-blockchain",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ettercap",
    "name": "Ettercap",
    "description": "MITM attack suite",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install ettercap-common`",
      "raw": "`apt install ettercap-common`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "evil-winrm",
    "name": "Evil-WinRM",
    "description": "Ultimate WinRM shell for hacking/pentesting",
    "category": "red-team-offensive",
    "url": "https://github.com/Hackplayers/evil-winrm",
    "install": {
      "method": "apt",
      "kali": "apt install evil-winrm",
      "raw": "`apt install evil-winrm`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "evilginx2",
    "name": "Evilginx2",
    "description": "Man-in-the-middle reverse proxy",
    "category": "people-identity",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/kgretzky/evilginx2@latest`",
      "raw": "`go install github.com/kgretzky/evilginx2@latest`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "exiftool",
    "name": "ExifTool",
    "description": "Complete metadata extraction from images/docs",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install libimage-exiftool-perl`",
      "raw": "`apt install libimage-exiftool-perl`"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "ExifTool"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "exploitdb",
    "name": "ExploitDB",
    "description": "Exploit database (searchsploit)",
    "category": "domain-ip-network",
    "url": "https://www.exploit-db.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[exploit-db.com](https://www.exploit-db.com/)"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "exportdata",
    "name": "ExportData",
    "description": "Historical tweet, follower, and trend export tool",
    "category": "username-social",
    "url": "https://www.exportdata.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.exportdata.io](https://www.exportdata.io)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "eyewitness",
    "name": "EyeWitness",
    "description": "Take screenshots of web pages",
    "category": "misc",
    "url": "https://github.com/RedSiege/EyeWitness",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/RedSiege/EyeWitness`",
      "raw": "`git clone https://github.com/RedSiege/EyeWitness`"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "EyeWitness"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "f4map",
    "name": "F4map",
    "description": "3D interactive world map",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "F4map",
      "raw": "F4map"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "F4map"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "facecheck.id",
    "name": "FaceCheck.ID",
    "description": "Face recognition search engine",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FaceCheck.ID",
      "raw": "FaceCheck.ID"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FaceCheck.ID"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "facerecognition",
    "name": "facerecognition",
    "description": "Python face recognition library",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install face_recognition`",
      "raw": "`pip install face_recognition`"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "face_recognition",
      "facerecognition"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "faceseek",
    "name": "FaceSeek",
    "description": "AI-powered reverse face search",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FaceSeek",
      "raw": "FaceSeek"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FaceSeek"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "fake-image-detector",
    "name": "Fake Image Detector",
    "description": "AI-based fake image detection",
    "category": "image-facial",
    "url": "https://www.fakeimagedetector.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[fakeimagedetector.com](https://www.fakeimagedetector.com/)"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "falco",
    "name": "Falco",
    "description": "Cloud-native runtime security",
    "category": "blue-team-defensive",
    "url": "https://falco.org",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/falcosecurity/falco.git",
      "raw": "`git clone https://github.com/falcosecurity/falco.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "familytreenow",
    "name": "FamilyTreeNow",
    "description": "Free genealogy search — addresses, phones, emails",
    "category": "people-identity",
    "url": "https://familytreenow.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[familytreenow.com](https://familytreenow.com)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "fastpeoplesearch",
    "name": "FastPeopleSearch",
    "description": "Free people finder",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FastPeopleSearch",
      "raw": "FastPeopleSearch"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FastPeopleSearch"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "faxvin",
    "name": "FAXVIN",
    "description": "Free VIN decoder and vehicle history",
    "category": "vehicle-aviation-maritime",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FAXVIN",
      "raw": "FAXVIN"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FAXVIN"
    ],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "fern-wifi-cracker",
    "name": "Fern Wifi Cracker",
    "description": "GUI-based Wi-Fi audit tool",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install fern-wifi-cracker`",
      "raw": "`apt install fern-wifi-cracker`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "feroxbuster",
    "name": "Feroxbuster",
    "description": "Fast recursive content discovery",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install feroxbuster`",
      "raw": "`apt install feroxbuster`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "ffuf",
    "name": "ffuf",
    "description": "Fast Go-based web fuzzer — directory, parameter, vhost discovery",
    "category": "domain-ip-network",
    "url": "https://github.com/ffuf/ffuf",
    "install": {
      "method": "go",
      "kali": "go install github.com/ffuf/ffuf/v2@latest",
      "raw": "`go install github.com/ffuf/ffuf/v2@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "filesec",
    "name": "Filesec.io",
    "description": "Catalog of malicious file extensions, risks, OS-level mitigations",
    "category": "malware-threat-intel",
    "url": "https://filesec.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[filesec.io](https://filesec.io)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "finalrecon",
    "name": "FinalRecon",
    "description": "The last web recon tool you'll need",
    "category": "frameworks",
    "url": "https://github.com/thewhiteh4t/FinalRecon",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/thewhiteh4t/FinalRecon`",
      "raw": "`git clone https://github.com/thewhiteh4t/FinalRecon`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "FinalRecon"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "findomain",
    "name": "Findomain",
    "description": "Cross-platform subdomain enumerator with monitoring features",
    "category": "domain-ip-network",
    "url": "https://github.com/Findomain/Findomain",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/Findomain/Findomain.git",
      "raw": "`git clone https://github.com/Findomain/Findomain.git`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "firmadyne",
    "name": "Firmadyne",
    "description": "Automated and scalable system for firmware emulation",
    "category": "hardware-hacking",
    "url": "https://github.com/firmadyne/firmadyne",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/firmadyne/firmadyne.git",
      "raw": "`git clone https://github.com/firmadyne/firmadyne.git`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "firms",
    "name": "FIRMS",
    "description": "NASA fire/thermal hotspots",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FIRMS",
      "raw": "FIRMS"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FIRMS"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "firmwalker",
    "name": "firmwalker",
    "description": "Script for searching extracted firmware filesystems",
    "category": "hardware-hacking",
    "url": "https://github.com/craigz28/firmwalker",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/craigz28/firmwalker.git",
      "raw": "`git clone https://github.com/craigz28/firmwalker.git`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "flashpoint",
    "name": "Flashpoint",
    "description": "Business risk intel from criminal forums and dark web",
    "category": "threat-intel-platforms",
    "url": "https://flashpoint.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[flashpoint.io](https://flashpoint.io)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "flashrom",
    "name": "flashrom",
    "description": "Tool for identifying/reading/writing flash chips",
    "category": "hardware-hacking",
    "url": "https://www.flashrom.org",
    "install": {
      "method": "apt",
      "kali": "apt install flashrom",
      "raw": "`apt install flashrom`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "flickr-search",
    "name": "Flickr",
    "description": "Photo-sharing — geosearch + license + camera EXIF intact",
    "category": "image-facial",
    "url": "https://www.flickr.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.flickr.com](https://www.flickr.com)"
    },
    "tags": [
      "image-facial",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "flightaware",
    "name": "FlightAware",
    "description": "Flight tracking and data platform",
    "category": "vehicle-aviation-maritime",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FlightAware",
      "raw": "FlightAware"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "FlightAware"
    ],
    "sections_seen": [
      "Vehicle, Aviation & Maritime"
    ],
    "archived": false
  },
  {
    "id": "flightradar24",
    "name": "FlightRadar24",
    "description": "Real-time flight tracking",
    "category": "vehicle-aviation-maritime",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FlightRadar24",
      "raw": "FlightRadar24"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "FlightRadar24"
    ],
    "sections_seen": [
      "Vehicle, Aviation & Maritime"
    ],
    "archived": false
  },
  {
    "id": "flipper-zero",
    "name": "Flipper Zero",
    "description": "Multi-tool for pentesters and geeks — RF/RFID/NFC/IR/GPIO",
    "category": "hardware-hacking",
    "url": "https://flipperzero.one",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[flipperzero.one](https://flipperzero.one)"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "fluxion",
    "name": "Fluxion",
    "description": "Wi-Fi social engineering (evil twin)",
    "category": "domain-ip-network",
    "url": "https://github.com/FluxionNetwork/fluxion",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/FluxionNetwork/fluxion`",
      "raw": "`git clone https://github.com/FluxionNetwork/fluxion`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "foca",
    "name": "FOCA",
    "description": "Metadata extraction from documents",
    "category": "image-facial",
    "url": "https://github.com/ElevenPaths/FOCA",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/ElevenPaths/FOCA`",
      "raw": "`git clone https://github.com/ElevenPaths/FOCA`"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FOCA"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "fofa",
    "name": "FOFA",
    "description": "Asset search and analysis tool",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FOFA",
      "raw": "FOFA"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "FOFA"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "foia.gov",
    "name": "FOIA.gov",
    "description": "Freedom of Information Act portal",
    "category": "vehicle-aviation-maritime",
    "url": "https://foia.gov/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[foia.gov](https://foia.gov/)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "foller-me",
    "name": "Foller.me",
    "description": "Twitter analytics — bio, languages, hashtags, mentions",
    "category": "username-social",
    "url": "https://foller.me",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[foller.me](https://foller.me)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "foremost",
    "name": "Foremost",
    "description": "File carving (recover deleted files)",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install foremost`",
      "raw": "`apt install foremost`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Foremost"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "forensically",
    "name": "Forensically",
    "description": "Online image forensics suite",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Forensically",
      "raw": "Forensically"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Forensically"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "forensicallybeta",
    "name": "Forensically Beta",
    "description": "Online image forensics — clone detection, level sweep",
    "category": "image-facial",
    "url": "https://29a.ch/photo-forensics",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[29a.ch](https://29a.ch/photo-forensics)"
    },
    "tags": [
      "image-facial",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "fotoforensics",
    "name": "FotoForensics",
    "description": "Image forensic analysis (ELA)",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FotoForensics",
      "raw": "FotoForensics"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "FotoForensics"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "frida",
    "name": "Frida",
    "description": "Dynamic instrumentation toolkit",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install frida-tools`",
      "raw": "`pip install frida-tools`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "fsociety",
    "name": "fsociety",
    "description": "Mr. Robot-inspired hacking framework",
    "category": "frameworks",
    "url": "https://github.com/Manisso/fsociety",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Manisso/fsociety`",
      "raw": "`git clone https://github.com/Manisso/fsociety`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "fsociety"
    ],
    "sections_seen": [
      "Termux Hacking Toolkit (Complete)"
    ],
    "archived": false
  },
  {
    "id": "ftk-imager",
    "name": "FTK Imager",
    "description": "Forensic disk imaging tool by AccessData",
    "category": "digital-forensics",
    "url": "https://www.exterro.com/ftk-imager",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.exterro.com](https://www.exterro.com/ftk-imager)"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "fullcontact",
    "name": "FullContact",
    "description": "Identity-resolution API and person enrichment",
    "category": "people-identity",
    "url": "https://www.fullcontact.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.fullcontact.com](https://www.fullcontact.com)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "fullhunt",
    "name": "FullHunt",
    "description": "External attack surface management",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "FullHunt",
      "raw": "FullHunt"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "FullHunt"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "gau",
    "name": "gau (getallurls)",
    "description": "Fetch URLs from AlienVault OTX, Wayback, Common Crawl, URLScan",
    "category": "domain-ip-network",
    "url": "https://github.com/lc/gau",
    "install": {
      "method": "go",
      "kali": "go install github.com/lc/gau/v2/cmd/gau@latest",
      "raw": "`go install github.com/lc/gau/v2/cmd/gau@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "geocreepy",
    "name": "Geocreepy",
    "description": "Geolocation aggregator — pulls geotagged posts across networks",
    "category": "geolocation",
    "url": "http://www.geocreepy.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.geocreepy.com](http://www.geocreepy.com)"
    },
    "tags": [
      "geolocation",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "geoguessr",
    "name": "GeoGuessr",
    "description": "Geolocation training game",
    "category": "geolocation",
    "url": "https://geoguessr.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[geoguessr.com](https://geoguessr.com/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "geohints",
    "name": "GeoHints",
    "description": "Browser-based satellite/streetview geolocation training & investigation",
    "category": "geolocation",
    "url": "https://geohints.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[geohints.com](https://geohints.com)"
    },
    "tags": [
      "geolocation",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "geospy",
    "name": "GeoSpy",
    "description": "AI-powered image geolocation",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "GeoSpy",
      "raw": "GeoSpy"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "GeoSpy"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "geospy-pro",
    "name": "GeoSpy Pro",
    "description": "Premium AI image geolocation by Graylark",
    "category": "geolocation",
    "url": "https://geospy.ai/pro",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[geospy.ai](https://geospy.ai/pro)"
    },
    "tags": [
      "geolocation",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "get-metadata",
    "name": "Get-Metadata.com",
    "description": "Online EXIF extractor — handles .DOCX/.PDF too",
    "category": "document-metadata",
    "url": "https://www.get-metadata.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.get-metadata.com](https://www.get-metadata.com)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "getcontact",
    "name": "GetContact",
    "description": "See how number is saved by others",
    "category": "email-phone",
    "url": "https://getcontact.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[getcontact.com](https://getcontact.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "getnotify",
    "name": "GetNotify",
    "description": "Email open tracking + geolocation",
    "category": "email-phone",
    "url": "https://getnotify.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[getnotify.com](https://getnotify.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "GetNotify"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "gf-tomnomnom",
    "name": "gf",
    "description": "Wrapper around grep with patterns for bug-bounty workflow",
    "category": "domain-ip-network",
    "url": "https://github.com/tomnomnom/gf",
    "install": {
      "method": "go",
      "kali": "go install github.com/tomnomnom/gf@latest",
      "raw": "`go install github.com/tomnomnom/gf@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ghauri",
    "name": "Ghauri",
    "description": "Advanced cross-platform tool to detect/exploit SQLi",
    "category": "red-team-offensive",
    "url": "https://github.com/r0oth3x49/ghauri",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/r0oth3x49/ghauri.git",
      "raw": "`git clone https://github.com/r0oth3x49/ghauri.git`"
    },
    "tags": [
      "red-team-offensive",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ghdb",
    "name": "Google Hacking Database (GHDB)",
    "description": "Index of dorks for finding publicly exposed info",
    "category": "search-dorking",
    "url": "https://www.exploit-db.com/google-hacking-database",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.exploit-db.com](https://www.exploit-db.com/google-hacking-database)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ghidra",
    "name": "Ghidra",
    "description": "NSA's open-source software reverse engineering suite",
    "category": "digital-forensics",
    "url": "https://ghidra-sre.org",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/NationalSecurityAgency/ghidra.git",
      "raw": "`git clone https://github.com/NationalSecurityAgency/ghidra.git`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ghiro",
    "name": "Ghiro",
    "description": "Automated digital image forensics",
    "category": "image-facial",
    "url": "https://www.getghiro.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.getghiro.org](https://www.getghiro.org)"
    },
    "tags": [
      "image-facial",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ghunt",
    "name": "GHunt",
    "description": "Investigate Google emails and documents",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install ghunt`",
      "raw": "`pip3 install ghunt`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "GHunt"
    ],
    "sections_seen": [
      "Email & Phone Intelligence"
    ],
    "archived": false
  },
  {
    "id": "githound",
    "name": "git-hound",
    "description": "Find sensitive data exposed via GitHub code search",
    "category": "document-metadata",
    "url": "https://github.com/tillson/git-hound",
    "install": {
      "method": "go",
      "kali": "go install github.com/tillson/git-hound@latest",
      "raw": "`go install github.com/tillson/git-hound@latest`"
    },
    "tags": [
      "document-metadata",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "github_monitor",
    "name": "github_monitor",
    "description": "Real-time tracking of GitHub user activity and repo changes",
    "category": "username-social",
    "url": "https://github.com/misiektoja/github_monitor",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/misiektoja/github_monitor.git",
      "raw": "`git clone https://github.com/misiektoja/github_monitor.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "gitleaks",
    "name": "gitleaks",
    "description": "Detect secrets, credentials, and API keys in git repos",
    "category": "document-metadata",
    "url": "https://github.com/gitleaks/gitleaks",
    "install": {
      "method": "go",
      "kali": "go install github.com/gitleaks/gitleaks/v8@latest",
      "raw": "`go install github.com/gitleaks/gitleaks/v8@latest`"
    },
    "tags": [
      "document-metadata",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "gitrecon",
    "name": "Gitrecon",
    "description": "GitHub OSINT reconnaissance",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install gitrecon`",
      "raw": "`pip install gitrecon`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Gitrecon"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "gnu-radio",
    "name": "GNU Radio",
    "description": "Toolkit for building software-defined radio systems",
    "category": "hardware-hacking",
    "url": "https://www.gnuradio.org",
    "install": {
      "method": "apt",
      "kali": "apt install gnuradio",
      "raw": "`apt install gnuradio`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "gobuster",
    "name": "Gobuster",
    "description": "URI/DNS brute-forcer (Go)",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/OJ/gobuster/v3@latest`",
      "raw": "`go install github.com/OJ/gobuster/v3@latest`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "goldeneye",
    "name": "GoldenEye",
    "description": "HTTP DoS tool (authorized load testing)",
    "category": "domain-ip-network",
    "url": "https://github.com/jseidl/GoldenEye",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/jseidl/GoldenEye`",
      "raw": "`git clone https://github.com/jseidl/GoldenEye`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "goofuzz",
    "name": "GooFuzz",
    "description": "Google dorking fuzzer",
    "category": "search-dorking",
    "url": "https://github.com/m3n0sd0n4ld/GooFuzz",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`",
      "raw": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "GooFuzz"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "google-alerts",
    "name": "Google Alerts",
    "description": "Free web monitoring",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Searcher Platforms"
    ],
    "archived": false
  },
  {
    "id": "google-earth-pro",
    "name": "Google Earth Pro",
    "description": "Advanced satellite imagery",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Google Earth Pro",
      "raw": "Google Earth Pro"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Google Earth Pro"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "google-gemini",
    "name": "Google Gemini",
    "description": "Google AI with web search",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "google-hacking-db",
    "name": "Google Hacking DB",
    "description": "Exploit-DB Google dork database",
    "category": "search-dorking",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Google Hacking DB",
      "raw": "Google Hacking DB"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Google Hacking DB"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "google-reverse-image",
    "name": "Google Reverse Image",
    "description": "Google image search",
    "category": "image-facial",
    "url": "https://images.google.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[images.google.com](https://images.google.com/)"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "googleguide",
    "name": "Google Guide Advanced Operators",
    "description": "Reference for Google search operators",
    "category": "search-dorking",
    "url": "http://www.googleguide.com/advanced_operators_reference.html",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.googleguide.com](http://www.googleguide.com/advanced_operators_reference.html)"
    },
    "tags": [
      "search-dorking",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "gophish",
    "name": "Gophish",
    "description": "Enterprise phishing simulation platform",
    "category": "people-identity",
    "url": "https://getgophish.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[getgophish.com](https://getgophish.com/)"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "gosearch",
    "name": "GoSearch",
    "description": "Fast username search tool in Go",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/ibnaleem/gosearch@latest`",
      "raw": "`go install github.com/ibnaleem/gosearch@latest`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "GoSearch"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "gospider",
    "name": "GoSpider",
    "description": "Fast Go web spider for crawling/audit",
    "category": "domain-ip-network",
    "url": "https://github.com/jaeles-project/gospider",
    "install": {
      "method": "go",
      "kali": "go install github.com/jaeles-project/gospider@latest",
      "raw": "`go install github.com/jaeles-project/gospider@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "gowitness",
    "name": "gowitness",
    "description": "Modern Go-based web screenshot utility (Aquatone successor)",
    "category": "domain-ip-network",
    "url": "https://github.com/sensepost/gowitness",
    "install": {
      "method": "go",
      "kali": "go install github.com/sensepost/gowitness@latest",
      "raw": "`go install github.com/sensepost/gowitness@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "gqrx",
    "name": "Gqrx SDR",
    "description": "Software-defined radio receiver GUI",
    "category": "hardware-hacking",
    "url": "https://gqrx.dk",
    "install": {
      "method": "apt",
      "kali": "apt install gqrx-sdr",
      "raw": "`apt install gqrx-sdr`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "grabify",
    "name": "Grabify",
    "description": "IP grabber & URL shortener",
    "category": "geolocation",
    "url": "https://grabify.link/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[grabify.link](https://grabify.link/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "IP Tracking & Geolocation Links"
    ],
    "archived": false
  },
  {
    "id": "grayhatwarfare",
    "name": "GrayhatWarfare",
    "description": "Index of open Amazon S3 buckets — find exposed cloud data",
    "category": "domain-ip-network",
    "url": "https://grayhatwarfare.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[grayhatwarfare.com](https://grayhatwarfare.com)"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "graylog",
    "name": "Graylog",
    "description": "Open-source log management / SIEM",
    "category": "blue-team-defensive",
    "url": "https://www.graylog.org",
    "install": {
      "method": "docker",
      "kali": "docker pull graylog/graylog:latest",
      "raw": "`docker pull graylog/graylog:latest`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "grep.app",
    "name": "Grep.app",
    "description": "Search code across all public GitHub repos",
    "category": "search-dorking",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Grep.app",
      "raw": "Grep.app"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Grep.app"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "greynoise",
    "name": "GreyNoise",
    "description": "Search exposed internet assets and malicious IPs",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "GreyNoise",
      "raw": "GreyNoise"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "GreyNoise"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "greynoise-cli",
    "name": "GreyNoise CLI",
    "description": "Command-line tool for GreyNoise mass-scanner intel",
    "category": "iot-devices",
    "url": "https://github.com/GreyNoise-Intelligence/pygreynoise",
    "install": {
      "method": "pip",
      "kali": "pip3 install greynoise",
      "raw": "`pip3 install greynoise`"
    },
    "tags": [
      "iot-devices",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "greynoise-viz",
    "name": "GreyNoise Visualizer",
    "description": "Tells you which IPs are noise vs targeted threats",
    "category": "iot-devices",
    "url": "https://viz.greynoise.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[viz.greynoise.io](https://viz.greynoise.io)"
    },
    "tags": [
      "iot-devices",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "grok",
    "name": "Grok",
    "description": "Real-time X/Twitter data",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free on X",
      "raw": "✅ Free on X"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "gxss-tomnomnom",
    "name": "Gxss",
    "description": "Test parameters for cross-site scripting reflection",
    "category": "red-team-offensive",
    "url": "https://github.com/KathanP19/Gxss",
    "install": {
      "method": "go",
      "kali": "go install github.com/KathanP19/Gxss@latest",
      "raw": "`go install github.com/KathanP19/Gxss@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "h8mail",
    "name": "h8mail",
    "description": "Email OSINT & breach hunting",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install h8mail`",
      "raw": "`pip install h8mail`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "h8mail"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "hacker101",
    "name": "Hacker101",
    "description": "Free HackerOne course library and CTF",
    "category": "training-ctf",
    "url": "https://www.hacker101.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.hacker101.com](https://www.hacker101.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hackerone",
    "name": "HackerOne",
    "description": "Largest bug-bounty platform — public and private programs",
    "category": "bug-bounty",
    "url": "https://hackerone.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[hackerone.com](https://hackerone.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hacking-art-of-exploitation",
    "name": "Hacking: The Art of Exploitation (book)",
    "description": "Classic by Jon Erickson — low-level attack fundamentals",
    "category": "learning-resources",
    "url": "https://nostarch.com/hacking2.htm",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[nostarch.com](https://nostarch.com/hacking2.htm)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hackingtool",
    "name": "Hackingtool",
    "description": "All-in-one hacking tool (100+ categories)",
    "category": "frameworks",
    "url": "https://github.com/Z4nzu/hackingtool",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Z4nzu/hackingtool`",
      "raw": "`git clone https://github.com/Z4nzu/hackingtool`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Hackingtool"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "hackrf",
    "name": "HackRF One",
    "description": "SDR transceiver covering 1 MHz to 6 GHz",
    "category": "hardware-hacking",
    "url": "https://greatscottgadgets.com/hackrf/",
    "install": {
      "method": "apt",
      "kali": "apt install hackrf",
      "raw": "`apt install hackrf`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hackthebox",
    "name": "Hack The Box",
    "description": "Online pentesting labs and CTFs",
    "category": "training-ctf",
    "url": "https://www.hackthebox.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.hackthebox.com](https://www.hackthebox.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hacktricks",
    "name": "HackTricks",
    "description": "Pentesting / hacking knowledge base by carlospolop",
    "category": "red-team-offensive",
    "url": "https://book.hacktricks.xyz",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[book.hacktricks.xyz](https://book.hacktricks.xyz)"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hacktrophy",
    "name": "HackTrophy",
    "description": "European bug-bounty platform",
    "category": "bug-bounty",
    "url": "https://hacktrophy.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[hacktrophy.com](https://hacktrophy.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hak5-tools",
    "name": "Hak5 Tools (Bash Bunny, Rubber Ducky, Wi-Fi Pineapple)",
    "description": "Premium offensive hardware tools",
    "category": "hardware-hacking",
    "url": "https://shop.hak5.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[shop.hak5.org](https://shop.hak5.org)"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hakrawler",
    "name": "hakrawler",
    "description": "Fast Go web crawler for endpoint and asset discovery",
    "category": "domain-ip-network",
    "url": "https://github.com/hakluke/hakrawler",
    "install": {
      "method": "go",
      "kali": "go install github.com/hakluke/hakrawler@latest",
      "raw": "`go install github.com/hakluke/hakrawler@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "harpa-ai",
    "name": "HARPA AI",
    "description": "AI browser agent for OSINT",
    "category": "misc",
    "url": "https://harpa.ai/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[harpa.ai](https://harpa.ai/)"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "harpoon",
    "name": "Harpoon",
    "description": "CLI tool for OSINT investigations",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install harpoon`",
      "raw": "`pip3 install harpoon`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Harpoon"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "hashcat",
    "name": "Hashcat",
    "description": "Advanced password recovery (GPU-accelerated)",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install hashcat`",
      "raw": "`apt install hashcat`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Hashcat"
    ],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "hashlookup-circl",
    "name": "CIRCL Hashlookup",
    "description": "Free public hashlookup for known software files",
    "category": "malware-threat-intel",
    "url": "https://www.circl.lu/services/hashlookup",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.circl.lu](https://www.circl.lu/services/hashlookup)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "have-i-been-pwned",
    "name": "Have I Been Pwned",
    "description": "Check email/phone in breaches",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟢 Free",
      "raw": "🟢 Free"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Have I Been Pwned"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "haveibeenransom",
    "name": "HIB Ransomed",
    "description": "Check if your data has been leaked by ransomware groups",
    "category": "data-breach",
    "url": "https://haveibeenransom.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[haveibeenransom.com](https://haveibeenransom.com)"
    },
    "tags": [
      "data-breach",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "haveibeenzuckered",
    "name": "haveibeenzuckered",
    "description": "Check if a phone number is in the 533M Facebook breach",
    "category": "data-breach",
    "url": "https://haveibeenzuckered.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[haveibeenzuckered.com](https://haveibeenzuckered.com)"
    },
    "tags": [
      "data-breach",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "havoc",
    "name": "Havoc",
    "description": "Modern, malleable post-exploitation C2 framework",
    "category": "red-team-offensive",
    "url": "https://github.com/HavocFramework/Havoc",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/HavocFramework/Havoc.git",
      "raw": "`git clone https://github.com/HavocFramework/Havoc.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hayabusa",
    "name": "Hayabusa",
    "description": "Windows event log fast forensics timeline generator",
    "category": "blue-team-defensive",
    "url": "https://github.com/Yamato-Security/hayabusa",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/Yamato-Security/hayabusa.git",
      "raw": "`git clone https://github.com/Yamato-Security/hayabusa.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "haystak",
    "name": "Haystak",
    "description": "Dark web search with filtering",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`",
      "raw": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Haystak"
    ],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "hcxtools",
    "name": "hcxtools",
    "description": "Wi-Fi packet capture conversion",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install hcxtools`",
      "raw": "`apt install hcxtools`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "hidden-wiki",
    "name": "The Hidden Wiki",
    "description": "Curated directory of dark-web sites (mirror-dependent)",
    "category": "dark-web",
    "url": "https://thehiddenwiki.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[thehiddenwiki.org](https://thehiddenwiki.org)"
    },
    "tags": [
      "dark-web",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hive-moderation",
    "name": "Hive Moderation",
    "description": "AI content detection",
    "category": "image-facial",
    "url": "https://hivemoderation.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[hivemoderation.com](https://hivemoderation.com/)"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "hlr-lookups",
    "name": "Hlr-Lookups",
    "description": "HLR phone number lookup",
    "category": "email-phone",
    "url": "https://www.hlr-lookups.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[hlr-lookups.com](https://www.hlr-lookups.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "holehe",
    "name": "Holehe",
    "description": "Check if email is registered on 120+ sites",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install holehe`",
      "raw": "`pip install holehe`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Holehe"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "hootsuite",
    "name": "Hootsuite",
    "description": "Social media management",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Searcher Platforms"
    ],
    "archived": false
  },
  {
    "id": "httprobe",
    "name": "httprobe",
    "description": "Take a list of domains and probe for working HTTP/HTTPS",
    "category": "domain-ip-network",
    "url": "https://github.com/tomnomnom/httprobe",
    "install": {
      "method": "go",
      "kali": "go install github.com/tomnomnom/httprobe@latest",
      "raw": "`go install github.com/tomnomnom/httprobe@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "httpx",
    "name": "HTTPx",
    "description": "Fast HTTP toolkit / probing",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`",
      "raw": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "HTTPx"
    ],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "hudson-rock",
    "name": "Hudson Rock",
    "description": "Free infostealer-compromise check tools (domain/email/IP)",
    "category": "people-identity",
    "url": "https://www.hudsonrock.com/free-tools",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.hudsonrock.com](https://www.hudsonrock.com/free-tools)"
    },
    "tags": [
      "people-identity",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hudson-rock-cavalier",
    "name": "Hudson Rock Cavalier",
    "description": "Infostealer intelligence & breach data",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Hudson Rock Cavalier"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "huggingchat",
    "name": "HuggingChat",
    "description": "Open-source AI chat",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "hunter.how",
    "name": "Hunter.how",
    "description": "Internet asset search and discovery",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Hunter.how",
      "raw": "Hunter.how"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Hunter.how"
    ],
    "sections_seen": [
      "IoT & Device Intelligence"
    ],
    "archived": false
  },
  {
    "id": "hunter.io",
    "name": "Hunter.io",
    "description": "Find professional email addresses by domain",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Hunter.io",
      "raw": "Hunter.io"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Hunter.io"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "hybrid-analysis",
    "name": "Hybrid Analysis",
    "description": "Free advanced malware analysis service by CrowdStrike",
    "category": "malware-threat-intel",
    "url": "https://www.hybrid-analysis.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.hybrid-analysis.com](https://www.hybrid-analysis.com)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "hydra",
    "name": "Hydra",
    "description": "Network login brute-forcer",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install hydra`",
      "raw": "`apt install hydra`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Hydra"
    ],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "icij-offshore-leaks",
    "name": "ICIJ Offshore Leaks",
    "description": "Panama/Pandora/Paradise Papers",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ICIJ Offshore Leaks",
      "raw": "ICIJ Offshore Leaks"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "ICIJ Offshore Leaks"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "ida-free",
    "name": "IDA Free",
    "description": "Free version of IDA disassembler/decompiler",
    "category": "digital-forensics",
    "url": "https://hex-rays.com/ida-free/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[hex-rays.com](https://hex-rays.com/ida-free/)"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "idcrawl",
    "name": "IDCrawl",
    "description": "Free people search engine",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "IDCrawl",
      "raw": "IDCrawl"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "IDCrawl"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "ignorant",
    "name": "Ignorant",
    "description": "Check phone registrations on sites",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install ignorant`",
      "raw": "`pip install ignorant`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Ignorant"
    ],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "ikyourdad",
    "name": "IKnowYour.Dad",
    "description": "Data breach search engine",
    "category": "data-breach",
    "url": "https://iknowyour.dad",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[iknowyour.dad](https://iknowyour.dad)"
    },
    "tags": [
      "data-breach",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "illuminarty",
    "name": "Illuminarty",
    "description": "AI image detection",
    "category": "image-facial",
    "url": "https://illuminarty.ai/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[illuminarty.ai](https://illuminarty.ai/)"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "imgur-search",
    "name": "Imgur",
    "description": "Image hosting — meme tracing and reverse search",
    "category": "image-facial",
    "url": "https://imgur.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[imgur.com](https://imgur.com)"
    },
    "tags": [
      "image-facial",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "immersivelabs",
    "name": "Immersive Labs",
    "description": "Cyber skills platform with hands-on exercises",
    "category": "training-ctf",
    "url": "https://www.immersivelabs.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.immersivelabs.com](https://www.immersivelabs.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "immunefi",
    "name": "Immunefi",
    "description": "Web3 / crypto-focused bug bounty platform",
    "category": "bug-bounty",
    "url": "https://immunefi.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[immunefi.com](https://immunefi.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "impacket",
    "name": "Impacket",
    "description": "Python classes for working with network protocols (Windows attacks)",
    "category": "red-team-offensive",
    "url": "https://github.com/fortra/impacket",
    "install": {
      "method": "pip",
      "kali": "pip3 install impacket",
      "raw": "`pip3 install impacket`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "infoga",
    "name": "Infoga",
    "description": "Email OSINT gathering",
    "category": "email-phone",
    "url": "https://github.com/m4ll0k/Infoga",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/m4ll0k/Infoga`",
      "raw": "`git clone https://github.com/m4ll0k/Infoga`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Infoga"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "insecam",
    "name": "Insecam",
    "description": "Live cameras directory",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Insecam",
      "raw": "Insecam"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Insecam"
    ],
    "sections_seen": [
      "IoT & Device Intelligence"
    ],
    "archived": false
  },
  {
    "id": "instagram_monitor",
    "name": "instagram_monitor",
    "description": "Real-time tracking of Instagram users with email alerts and CSV logs",
    "category": "username-social",
    "url": "https://github.com/misiektoja/instagram_monitor",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/misiektoja/instagram_monitor.git",
      "raw": "`git clone https://github.com/misiektoja/instagram_monitor.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "instaloader",
    "name": "Instaloader",
    "description": "Instagram data downloader",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install instaloader`",
      "raw": "`pip install instaloader`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "instant-username-search",
    "name": "Instant Username Search",
    "description": "Real-time username availability checker",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Instant Username Search",
      "raw": "Instant Username Search"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Instant Username Search"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "intel-471",
    "name": "Intel 471",
    "description": "Cybercrime intelligence platform",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Intel 471",
      "raw": "Intel 471"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Intel 471"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "intel471",
    "name": "Intel471",
    "description": "Premium adversary intelligence and underground monitoring platform",
    "category": "threat-intel-platforms",
    "url": "https://intel471.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[intel471.com](https://intel471.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "intelligence-x",
    "name": "Intelligence X",
    "description": "Search breaches, darknet, leaks",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "💰 Paid",
      "raw": "💰 Paid"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Intelligence X"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "intelx",
    "name": "Intelligence X (intelx.io)",
    "description": "Selective archive search — emails, leaks, paste sites, dark-web",
    "category": "search-dorking",
    "url": "https://intelx.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[intelx.io](https://intelx.io)"
    },
    "tags": [
      "search-dorking",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "interlace",
    "name": "Interlace",
    "description": "Easily turn single-threaded CLI apps into multi-threaded jobs",
    "category": "domain-ip-network",
    "url": "https://github.com/codingo/Interlace",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/codingo/Interlace.git",
      "raw": "`git clone https://github.com/codingo/Interlace.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "intigriti",
    "name": "Intigriti",
    "description": "European bug-bounty platform with fast triage",
    "category": "bug-bounty",
    "url": "https://www.intigriti.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.intigriti.com](https://www.intigriti.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "intsights",
    "name": "IntSights",
    "description": "External threat protection and intel (now part of Rapid7)",
    "category": "threat-intel-platforms",
    "url": "https://intsights.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[intsights.com](https://intsights.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "investigo",
    "name": "Investigo",
    "description": "Username checker (Go-based)",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/tdh8316/investigo@latest`",
      "raw": "`go install github.com/tdh8316/investigo@latest`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Investigo"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "invid",
    "name": "InVID",
    "description": "Video verification toolkit (browser extension)",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "InVID",
      "raw": "InVID"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "InVID"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "ip-api",
    "name": "IP-API",
    "description": "IP geolocation API",
    "category": "geolocation",
    "url": "http://ip-api.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[ip-api.com](http://ip-api.com/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "IP Tracking & Geolocation Links"
    ],
    "archived": false
  },
  {
    "id": "ipgeolocation",
    "name": "IPGeoLocation",
    "description": "IP address geolocation",
    "category": "domain-ip-network",
    "url": "https://github.com/maldevel/IPGeoLocation",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/maldevel/IPGeoLocation`",
      "raw": "`git clone https://github.com/maldevel/IPGeoLocation`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "IPGeoLocation"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "ipinfo",
    "name": "IPinfo",
    "description": "IP address data & geolocation",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "IPinfo",
      "raw": "IPinfo"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "IPinfo"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "iplogger",
    "name": "IPLogger",
    "description": "IP logging URL shortener",
    "category": "geolocation",
    "url": "https://iplogger.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[iplogger.org](https://iplogger.org/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "IP Tracking & Geolocation Links"
    ],
    "archived": false
  },
  {
    "id": "ippsec-rocks",
    "name": "IppSec.rocks",
    "description": "Indexed walkthroughs of HackTheBox machines (video)",
    "category": "learning-resources",
    "url": "https://ippsec.rocks",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[ippsec.rocks](https://ippsec.rocks)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ivpn",
    "name": "IVPN",
    "description": "Privacy-first VPN — open-source, audited, no email signup",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Website",
      "raw": "Website"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Paid only — included for privacy excellence",
      "open-source:✅",
      "no-log:✅",
      "protocols:WireGuard, OpenVPN"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "IVPN"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "jadx",
    "name": "jadx",
    "description": "Android APK decompiler (GUI)",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install jadx`",
      "raw": "`apt install jadx`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "joe-sandbox",
    "name": "Joe Sandbox",
    "description": "Deep automated malware analysis (free tier)",
    "category": "malware-threat-intel",
    "url": "https://www.joesandbox.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.joesandbox.com](https://www.joesandbox.com)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "john-hammond",
    "name": "John Hammond",
    "description": "Cybersecurity YouTube — CTFs, malware, walkthroughs",
    "category": "learning-resources",
    "url": "https://www.youtube.com/@_JohnHammond",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.youtube.com](https://www.youtube.com/@_JohnHammond)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "john-the-ripper",
    "name": "John the Ripper",
    "description": "Classic password cracker",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install john`",
      "raw": "`apt install john`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "John the Ripper"
    ],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "jsfinder",
    "name": "JSFinder",
    "description": "Find JS files referenced from a URL — endpoints / API paths",
    "category": "domain-ip-network",
    "url": "https://github.com/Threezh1/JSFinder",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/Threezh1/JSFinder.git",
      "raw": "`git clone https://github.com/Threezh1/JSFinder.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "juice-shop",
    "name": "OWASP Juice Shop",
    "description": "Modern, intentionally insecure web app — covers OWASP Top 10",
    "category": "training-ctf",
    "url": "https://github.com/juice-shop/juice-shop",
    "install": {
      "method": "docker",
      "kali": "docker pull bkimminich/juice-shop",
      "raw": "`docker pull bkimminich/juice-shop`"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "kagi",
    "name": "Kagi Search",
    "description": "Premium privacy-respecting search engine, no ads, no tracking",
    "category": "search-dorking",
    "url": "https://kagi.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[kagi.com](https://kagi.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "kape",
    "name": "KAPE",
    "description": "Kroll Artifact Parser and Extractor — fast triage collection",
    "category": "digital-forensics",
    "url": "https://www.kroll.com/kape",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.kroll.com](https://www.kroll.com/kape)"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "kartaview",
    "name": "KartaView",
    "description": "Street-level imagery (OpenStreetCam)",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "KartaView",
      "raw": "KartaView"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "KartaView"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "katana",
    "name": "Katana",
    "description": "Web crawler",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`",
      "raw": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "keepassxc",
    "name": "KeePassXC",
    "description": "Offline password manager",
    "category": "vpn-privacy",
    "url": "https://keepassxc.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[keepassxc.org](https://keepassxc.org/)"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "kela",
    "name": "KELA",
    "description": "Cybercrime intelligence and dark-web monitoring",
    "category": "threat-intel-platforms",
    "url": "https://kelacyber.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[kelacyber.com](https://kelacyber.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "kerbrute",
    "name": "Kerbrute",
    "description": "Tool for performing Kerberos pre-auth bruteforcing",
    "category": "red-team-offensive",
    "url": "https://github.com/ropnop/kerbrute",
    "install": {
      "method": "go",
      "kali": "go install github.com/ropnop/kerbrute@latest",
      "raw": "`go install github.com/ropnop/kerbrute@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "king-phisher",
    "name": "King Phisher",
    "description": "Phishing campaign toolkit",
    "category": "people-identity",
    "url": "https://github.com/rsmusllp/king-phisher",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher)"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "kismet",
    "name": "Kismet",
    "description": "Wireless network detector & sniffer",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install kismet`",
      "raw": "`apt install kismet`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "kiterunner",
    "name": "kiterunner",
    "description": "Contextual content-discovery for modern API endpoints",
    "category": "red-team-offensive",
    "url": "https://github.com/assetnote/kiterunner",
    "install": {
      "method": "go",
      "kali": "go install github.com/assetnote/kiterunner/cmd/kr@latest",
      "raw": "`go install github.com/assetnote/kiterunner/cmd/kr@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "knock",
    "name": "knock",
    "description": "Domain knock — security testing via DNS",
    "category": "domain-ip-network",
    "url": "https://github.com/guelfoweb/knock",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/guelfoweb/knock.git",
      "raw": "`git clone https://github.com/guelfoweb/knock.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "knockpy",
    "name": "Knockpy",
    "description": "Subdomain enumeration scan with virtual host discovery",
    "category": "domain-ip-network",
    "url": "https://github.com/guelfoweb/knock",
    "install": {
      "method": "pip",
      "kali": "pip3 install knock-subdomains",
      "raw": "`pip3 install knock-subdomains`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "knowem",
    "name": "KnowEm",
    "description": "Username search on 500+ sites",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "KnowEm",
      "raw": "KnowEm"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "KnowEm"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "lantern",
    "name": "Lantern",
    "description": "Free censorship circumvention tool — peer-to-peer",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Website",
      "raw": "Website"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:500MB/month free",
      "open-source:✅",
      "no-log:⚠️",
      "protocols:Proprietary"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Lantern"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "lazagne",
    "name": "LaZagne",
    "description": "Credentials recovery tool (post-exploit)",
    "category": "data-breach",
    "url": "https://github.com/AlessandroZ/LaZagne",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/AlessandroZ/LaZagne`",
      "raw": "`git clone https://github.com/AlessandroZ/LaZagne`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "leakcheck",
    "name": "LeakCheck",
    "description": "Email/username/phone breach search",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "LeakCheck"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "leakpeek",
    "name": "LeakPeek",
    "description": "Search leaked databases",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "LeakPeek"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "lei-search",
    "name": "LEI Search",
    "description": "Legal Entity Identifier lookup",
    "category": "company-business",
    "url": "https://search.gleif.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[search.gleif.org](https://search.gleif.org/)"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "lenso.ai",
    "name": "Lenso.ai",
    "description": "Reverse image search with facial recognition",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Lenso.ai",
      "raw": "Lenso.ai"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Lenso.ai"
    ],
    "sections_seen": [
      "Image & Facial Recognition"
    ],
    "archived": false
  },
  {
    "id": "linkedin2username",
    "name": "linkedin2username",
    "description": "Generate usernames from a target's LinkedIn employees",
    "category": "people-identity",
    "url": "https://github.com/initstring/linkedin2username",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/initstring/linkedin2username.git",
      "raw": "`git clone https://github.com/initstring/linkedin2username.git`"
    },
    "tags": [
      "people-identity",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "linkedindumper",
    "name": "LinkedInDumper",
    "description": "Dump/scrape company employees from LinkedIn API",
    "category": "username-social",
    "url": "https://github.com/l4rm4nd/LinkedInDumper",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/l4rm4nd/LinkedInDumper.git",
      "raw": "`git clone https://github.com/l4rm4nd/LinkedInDumper.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "linkfinder",
    "name": "LinkFinder",
    "description": "Discover endpoints in JavaScript",
    "category": "domain-ip-network",
    "url": "https://github.com/GerbenJavado/LinkFinder",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/GerbenJavado/LinkFinder`",
      "raw": "`git clone https://github.com/GerbenJavado/LinkFinder`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "linux-for-osint-cipher387",
    "name": "Linux for OSINT (cipher387)",
    "description": "21-day Linux-for-OSINT course (free)",
    "category": "learning-resources",
    "url": "https://github.com/cipher387/linux-for-OSINT-21-days",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/cipher387/linux-for-OSINT-21-days.git",
      "raw": "`git clone https://github.com/cipher387/linux-for-OSINT-21-days.git`"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "liveoverflow",
    "name": "LiveOverflow",
    "description": "Hacking and security YouTube — deep technical content",
    "category": "learning-resources",
    "url": "https://www.youtube.com/@LiveOverflow",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.youtube.com](https://www.youtube.com/@LiveOverflow)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "loki-yara",
    "name": "Loki",
    "description": "Simple IOC and YARA scanner by Florian Roth",
    "category": "blue-team-defensive",
    "url": "https://github.com/Neo23x0/Loki",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/Neo23x0/Loki.git",
      "raw": "`git clone https://github.com/Neo23x0/Loki.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mac-changer",
    "name": "MAC Changer",
    "description": "Change/spoof MAC address",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install macchanger`",
      "raw": "`apt install macchanger`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "MAC Changer"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "maigret",
    "name": "Maigret",
    "description": "Advanced username search across 3000+ sites with reports",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install maigret`",
      "raw": "`pip install maigret`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Maigret"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "mailheaderdetective",
    "name": "MailHeaderDetective",
    "description": "Email header forensics",
    "category": "email-phone",
    "url": "https://github.com/akajhon/MailHeaderDetective",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/akajhon/MailHeaderDetective`",
      "raw": "`git clone https://github.com/akajhon/MailHeaderDetective`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "mailtoanalyzer",
    "name": "mailtoanalyzer",
    "description": "Email exposure analysis",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install mailto-analyzer`",
      "raw": "`pip install mailto-analyzer`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "malpedia",
    "name": "Malpedia",
    "description": "Threat-actor groups, malware families, and analysis by Fraunhofer",
    "category": "malware-threat-intel",
    "url": "https://malpedia.caad.fkie.fraunhofer.de",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[malpedia.caad.fkie.fraunhofer.de](https://malpedia.caad.fkie.fraunhofer.de)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "malshare",
    "name": "MalShare",
    "description": "Free malware sample repository for researchers",
    "category": "malware-threat-intel",
    "url": "https://malshare.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[malshare.com](https://malshare.com)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "maltego",
    "name": "Maltego",
    "description": "Visual OSINT link analysis platform",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install maltego`",
      "raw": "`apt install maltego`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Maltego"
    ],
    "sections_seen": [
      "Kali Linux OSINT Toolkit"
    ],
    "archived": false
  },
  {
    "id": "malwarebazaar",
    "name": "MalwareBazaar",
    "description": "Search & download confirmed malware samples",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "MalwareBazaar",
      "raw": "MalwareBazaar"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "MalwareBazaar"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "mandiant-advantage",
    "name": "Mandiant Advantage",
    "description": "Threat intel from Google's Mandiant team",
    "category": "threat-intel-platforms",
    "url": "https://www.mandiant.com/advantage",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.mandiant.com](https://www.mandiant.com/advantage)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mapillary",
    "name": "Mapillary",
    "description": "Street-level imagery",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Mapillary",
      "raw": "Mapillary"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Mapillary"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "marinetraffic",
    "name": "MarineTraffic",
    "description": "Real-time ship tracking",
    "category": "vehicle-aviation-maritime",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "MarineTraffic",
      "raw": "MarineTraffic"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "MarineTraffic"
    ],
    "sections_seen": [
      "Vehicle, Aviation & Maritime"
    ],
    "archived": false
  },
  {
    "id": "masscan",
    "name": "Masscan",
    "description": "Fastest internet port scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install masscan`",
      "raw": "`apt install masscan`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Masscan"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "massdns",
    "name": "massdns",
    "description": "High-performance DNS stub resolver for bulk lookups",
    "category": "domain-ip-network",
    "url": "https://github.com/blechschmidt/massdns",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/blechschmidt/massdns.git",
      "raw": "`git clone https://github.com/blechschmidt/massdns.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "maxar",
    "name": "Maxar",
    "description": "Commercial satellite imagery",
    "category": "geolocation",
    "url": "https://maxar.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[maxar.com](https://maxar.com/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "maxmind-geoip",
    "name": "MaxMind GeoIP",
    "description": "IP geolocation database",
    "category": "geolocation",
    "url": "https://maxmind.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[maxmind.com](https://maxmind.com/)"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "IP Tracking & Geolocation Links"
    ],
    "archived": false
  },
  {
    "id": "medusa",
    "name": "Medusa",
    "description": "Parallel brute-force tool",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install medusa`",
      "raw": "`apt install medusa`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "meg-tomnomnom",
    "name": "meg",
    "description": "Fetch many paths for many hosts without flooding",
    "category": "domain-ip-network",
    "url": "https://github.com/tomnomnom/meg",
    "install": {
      "method": "go",
      "kali": "go install github.com/tomnomnom/meg@latest",
      "raw": "`go install github.com/tomnomnom/meg@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "memento-time-travel",
    "name": "Memento Time Travel",
    "description": "Federated search across multiple web archives",
    "category": "document-metadata",
    "url": "https://timetravel.mementoweb.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[timetravel.mementoweb.org](https://timetravel.mementoweb.org)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mention",
    "name": "Mention",
    "description": "Social media monitoring",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Mention"
    ],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "merlin",
    "name": "Merlin",
    "description": "Cross-platform HTTP/2 post-exploitation server and agent in Go",
    "category": "red-team-offensive",
    "url": "https://github.com/Ne0nd0g/merlin",
    "install": {
      "method": "go",
      "kali": "go install github.com/Ne0nd0g/merlin@latest",
      "raw": "`go install github.com/Ne0nd0g/merlin@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "metadata2go",
    "name": "Metadata2Go",
    "description": "Free online metadata extractor for any file",
    "category": "document-metadata",
    "url": "https://www.metadata2go.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.metadata2go.com](https://www.metadata2go.com)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "metadefender-cloud",
    "name": "MetaDefender Cloud",
    "description": "Multi-engine file/URL/IP scanning by OPSWAT",
    "category": "malware-threat-intel",
    "url": "https://metadefender.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[metadefender.com](https://metadefender.com)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "metagoofil",
    "name": "Metagoofil",
    "description": "Document metadata harvester from public docs",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install metagoofil`",
      "raw": "`pip install metagoofil`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Metagoofil"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "metasleuth",
    "name": "MetaSleuth",
    "description": "Free + paid crypto transaction tracing tool",
    "category": "crypto-blockchain",
    "url": "https://metasleuth.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[metasleuth.io](https://metasleuth.io)"
    },
    "tags": [
      "crypto-blockchain",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "metasploit",
    "name": "Metasploit",
    "description": "Industry-standard pen testing framework",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install metasploit-framework`",
      "raw": "`apt install metasploit-framework`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Metasploit"
    ],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "metasploit-framework",
    "name": "Metasploit Framework",
    "description": "Industry-standard exploitation framework with 2000+ modules",
    "category": "red-team-offensive",
    "url": "https://github.com/rapid7/metasploit-framework",
    "install": {
      "method": "apt",
      "kali": "apt install metasploit-framework",
      "raw": "`apt install metasploit-framework`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "metasploitable",
    "name": "Metasploitable",
    "description": "Intentionally vulnerable Linux VM for Metasploit practice",
    "category": "training-ctf",
    "url": "https://docs.rapid7.com/metasploit/metasploitable-2/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "microsoft-copilot",
    "name": "Microsoft Copilot",
    "description": "AI with Bing search integration",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "mimikatz",
    "name": "Mimikatz",
    "description": "Windows credential dumper",
    "category": "data-breach",
    "url": "https://github.com/gentilkiwi/mimikatz",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/gentilkiwi/mimikatz`",
      "raw": "`git clone https://github.com/gentilkiwi/mimikatz`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "misp",
    "name": "MISP",
    "description": "Malware Information Sharing Platform",
    "category": "malware-threat-intel",
    "url": "https://github.com/MISP/MISP",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/MISP/MISP`",
      "raw": "`git clone https://github.com/MISP/MISP`"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "MISP"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "misp-galaxy",
    "name": "MISP Galaxy",
    "description": "Adversary group identification used by SOCs/ISACs",
    "category": "malware-threat-intel",
    "url": "https://www.misp-galaxy.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.misp-galaxy.org](https://www.misp-galaxy.org)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mitaka",
    "name": "Mitaka",
    "description": "Browser extension for OSINT — extract IoCs from highlighted text",
    "category": "frameworks",
    "url": "https://github.com/ninoseki/mitaka",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/ninoseki/mitaka.git",
      "raw": "`git clone https://github.com/ninoseki/mitaka.git`"
    },
    "tags": [
      "frameworks",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mitre-attack",
    "name": "MITRE ATT&CK",
    "description": "Adversary tactics, techniques, and procedures knowledge base",
    "category": "blue-team-defensive",
    "url": "https://attack.mitre.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[attack.mitre.org](https://attack.mitre.org)"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mitre-d3fend",
    "name": "MITRE D3FEND",
    "description": "Defensive countermeasure knowledge graph",
    "category": "blue-team-defensive",
    "url": "https://d3fend.mitre.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[d3fend.mitre.org](https://d3fend.mitre.org)"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mobsf",
    "name": "MobSF",
    "description": "Mobile Security Framework (static+dynamic)",
    "category": "iot-devices",
    "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF)"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "modlishka",
    "name": "Modlishka",
    "description": "Reverse proxy phishing framework",
    "category": "people-identity",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/drk1wi/Modlishka@latest`",
      "raw": "`go install github.com/drk1wi/Modlishka@latest`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "mojeek",
    "name": "Mojeek",
    "description": "Independent search engine that doesn't track users",
    "category": "search-dorking",
    "url": "https://www.mojeek.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.mojeek.com](https://www.mojeek.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mr.holmes",
    "name": "Mr.Holmes",
    "description": "OSINT investigation tool",
    "category": "people-identity",
    "url": "https://github.com/Lucksi/Mr.Holmes",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Lucksi/Mr.Holmes`",
      "raw": "`git clone https://github.com/Lucksi/Mr.Holmes`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Mr.Holmes"
    ],
    "sections_seen": [
      "People & Identity OSINT"
    ],
    "archived": false
  },
  {
    "id": "msfpc",
    "name": "MSFPC",
    "description": "MSF payload creator",
    "category": "iot-devices",
    "url": "https://github.com/g0tmi1k/msfpc",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/g0tmi1k/msfpc`",
      "raw": "`git clone https://github.com/g0tmi1k/msfpc`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "mullvad-vpn",
    "name": "Mullvad VPN",
    "description": "Privacy-first VPN — no email needed, cash accepted",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install mullvad-vpn`",
      "raw": "`apt install mullvad-vpn`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Mullvad VPN"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "mxtoolbox",
    "name": "MXToolbox",
    "description": "Email header analysis & DNS checks",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "MXToolbox",
      "raw": "MXToolbox"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "MXToolbox"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "mylnikov-geolocation",
    "name": "Mylnikov Geolocation",
    "description": "BSSID/Wi-Fi MAC to coordinates lookup",
    "category": "geolocation",
    "url": "https://www.mylnikov.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.mylnikov.org](https://www.mylnikov.org)"
    },
    "tags": [
      "geolocation",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "mythic",
    "name": "Mythic",
    "description": "Cross-platform, post-exploit, multi-user red team framework",
    "category": "red-team-offensive",
    "url": "https://github.com/its-a-feature/Mythic",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/its-a-feature/Mythic.git",
      "raw": "`git clone https://github.com/its-a-feature/Mythic.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "naabu",
    "name": "Naabu",
    "description": "Fast Go-based port scanner from ProjectDiscovery",
    "category": "domain-ip-network",
    "url": "https://github.com/projectdiscovery/naabu",
    "install": {
      "method": "go",
      "kali": "go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest",
      "raw": "`go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "nahamsec",
    "name": "NahamSec",
    "description": "Bug bounty and offensive security YouTube content",
    "category": "learning-resources",
    "url": "https://www.youtube.com/@nahamsec",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.youtube.com](https://www.youtube.com/@nahamsec)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "namecheckr",
    "name": "Name Checkr",
    "description": "Check domain and username across many platforms",
    "category": "username-social",
    "url": "https://www.namecheckr.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.namecheckr.com](https://www.namecheckr.com)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "namecheckup",
    "name": "Name Checkup",
    "description": "Check username availability across social media",
    "category": "username-social",
    "url": "https://namecheckup.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[namecheckup.com](https://namecheckup.com)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "namechk",
    "name": "Namechk",
    "description": "Username & domain availability checker",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Namechk",
      "raw": "Namechk"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Namechk"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "nameketchup",
    "name": "NameKetchup",
    "description": "Check domain + username on popular social media",
    "category": "username-social",
    "url": "https://nameketchup.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[nameketchup.com](https://nameketchup.com)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "national-cellular-directory",
    "name": "National Cellular Directory",
    "description": "Phone owner lookup",
    "category": "email-phone",
    "url": "https://www.nationalcellulardirectory.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "naver",
    "name": "Naver",
    "description": "South Korean search engine — local content not on Google",
    "category": "search-dorking",
    "url": "https://www.naver.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.naver.com](https://www.naver.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "nerdydata",
    "name": "NerdyData",
    "description": "Search engine for source code across the public web",
    "category": "search-dorking",
    "url": "https://nerdydata.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[nerdydata.com](https://nerdydata.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "netcat",
    "name": "Netcat",
    "description": "The TCP/IP swiss army knife",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install netcat-openbsd`",
      "raw": "`apt install netcat-openbsd`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "netcraft",
    "name": "Netcraft Site Report",
    "description": "Web technology, hosting history, takedown service",
    "category": "domain-ip-network",
    "url": "https://sitereport.netcraft.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[sitereport.netcraft.com](https://sitereport.netcraft.com)"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "netexec",
    "name": "NetExec (nxc)",
    "description": "CrackMapExec maintained successor — AD network exploitation",
    "category": "red-team-offensive",
    "url": "https://github.com/Pennyw0rth/NetExec",
    "install": {
      "method": "pip",
      "kali": "pip3 install git+https://github.com/Pennyw0rth/NetExec",
      "raw": "`pip3 install git+https://github.com/Pennyw0rth/NetExec`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "netlas-cookbook",
    "name": "Netlas Cookbook",
    "description": "Free OSINT automation cookbook",
    "category": "learning-resources",
    "url": "https://academy.netlas.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[academy.netlas.io](https://academy.netlas.io)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "netlas.io",
    "name": "Netlas.io",
    "description": "Internet scanning and intelligence",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Netlas.io",
      "raw": "Netlas.io"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Netlas.io"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "nexfil",
    "name": "NExfil",
    "description": "Find profiles by username on various platforms",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install nexfil`",
      "raw": "`pip install nexfil`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "NExfil"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "nexphisher",
    "name": "NexPhisher",
    "description": "Multi-platform phishing tool",
    "category": "people-identity",
    "url": "https://github.com/htr-tech/nexphisher",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/htr-tech/nexphisher`",
      "raw": "`git clone https://github.com/htr-tech/nexphisher`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "NexPhisher"
    ],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "nicb-vincheck",
    "name": "NICB VINCheck",
    "description": "Stolen vehicle check",
    "category": "vehicle-aviation-maritime",
    "url": "https://www.nicb.org/vincheck",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[nicb.org/vincheck](https://www.nicb.org/vincheck)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "nighthawk",
    "name": "Nighthawk",
    "description": "Premium evasive C2 by MDSec (Cobalt Strike alt)",
    "category": "red-team-offensive",
    "url": "https://www.mdsec.co.uk/nighthawk/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/)"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "nikto",
    "name": "Nikto",
    "description": "Web server vulnerability scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install nikto`",
      "raw": "`apt install nikto`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Nikto"
    ],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "nmap",
    "name": "Nmap",
    "description": "Network scanner & mapper",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install nmap`",
      "raw": "`apt install nmap`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Nmap"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "nosqlmap",
    "name": "NoSQLMap",
    "description": "Automated NoSQL database enumeration and exploitation",
    "category": "red-team-offensive",
    "url": "https://github.com/codingo/NoSQLMap",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/codingo/NoSQLMap.git",
      "raw": "`git clone https://github.com/codingo/NoSQLMap.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "notebooklm",
    "name": "NotebookLM",
    "description": "Google's document analysis AI",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "nuclei",
    "name": "Nuclei",
    "description": "Template-based fast vulnerability scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`",
      "raw": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Nuclei"
    ],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "nuclei-templates",
    "name": "Nuclei Templates",
    "description": "Community-curated templates for Nuclei",
    "category": "red-team-offensive",
    "url": "https://github.com/projectdiscovery/nuclei-templates",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/projectdiscovery/nuclei-templates.git",
      "raw": "`git clone https://github.com/projectdiscovery/nuclei-templates.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "numlookup",
    "name": "NumLookup",
    "description": "Free reverse phone lookup",
    "category": "email-phone",
    "url": "https://www.numlookup.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[numlookup.com](https://www.numlookup.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "numverify",
    "name": "NumVerify",
    "description": "Phone number validation API",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "NumVerify",
      "raw": "NumVerify"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "NumVerify"
    ],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "objection",
    "name": "Objection",
    "description": "Runtime mobile exploration",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install objection`",
      "raw": "`pip install objection`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Mobile Hacking & Phone Exploitation"
    ],
    "archived": false
  },
  {
    "id": "oblivion-loseys",
    "name": "Oblivion",
    "description": "OSINT framework",
    "category": "frameworks",
    "url": "https://github.com/loseys/Oblivion",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/loseys/Oblivion.git",
      "raw": "`git clone https://github.com/loseys/Oblivion.git`"
    },
    "tags": [
      "frameworks",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "odin-search",
    "name": "ODIN",
    "description": "Search hosts, CVEs, exposed buckets — 10 free searches/day",
    "category": "domain-ip-network",
    "url": "https://search.odin.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[search.odin.io](https://search.odin.io)"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "offensivesecurity-proving",
    "name": "OffSec Proving Grounds",
    "description": "OSCP-style training labs by Offensive Security",
    "category": "training-ctf",
    "url": "https://www.offsec.com/labs/individual/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.offsec.com](https://www.offsec.com/labs/individual/)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "offshoreleaks",
    "name": "Offshore Leaks Database",
    "description": "Panama/Pandora/Paradise Papers searchable database",
    "category": "document-metadata",
    "url": "https://offshoreleaks.icij.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[offshoreleaks.icij.org](https://offshoreleaks.icij.org)"
    },
    "tags": [
      "document-metadata",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "onionland",
    "name": "OnionLand Search",
    "description": "Search engine for dark-web content",
    "category": "dark-web",
    "url": "https://onionlandsearchengine.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[onionlandsearchengine.com](https://onionlandsearchengine.com)"
    },
    "tags": [
      "dark-web",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "onionscan",
    "name": "OnionScan",
    "description": "Scan & analyze .onion sites",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/s-rah/onionscan@latest`",
      "raw": "`go install github.com/s-rah/onionscan@latest`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "OnionScan"
    ],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "onionsearch",
    "name": "OnionSearch",
    "description": "Search .onion URLs from multiple engines",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install onionsearch`",
      "raw": "`pip3 install onionsearch`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "OnionSearch"
    ],
    "sections_seen": [
      "Dark Web & Tor Intelligence"
    ],
    "archived": false
  },
  {
    "id": "onionshare",
    "name": "OnionShare",
    "description": "Anonymous file sharing via Tor",
    "category": "vpn-privacy",
    "url": "https://onionshare.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[onionshare.org](https://onionshare.org/)"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "onyphe",
    "name": "ONYPHE",
    "description": "OSINT engine indexing exposed assets",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ONYPHE",
      "raw": "ONYPHE"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "ONYPHE"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "oosint",
    "name": "Open-Source Intelligence (Reverse Image)",
    "description": "Yandex/Bing/TinEye combined reverse-image search",
    "category": "image-facial",
    "url": "https://oosint.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[oosint.com](https://oosint.com)"
    },
    "tags": [
      "image-facial",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "openbugbounty",
    "name": "Open Bug Bounty",
    "description": "Free coordinated-disclosure platform",
    "category": "bug-bounty",
    "url": "https://www.openbugbounty.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.openbugbounty.org](https://www.openbugbounty.org)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "opencellid",
    "name": "OpenCellID",
    "description": "Largest public database of cell-tower IDs",
    "category": "geolocation",
    "url": "https://opencellid.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[opencellid.org](https://opencellid.org)"
    },
    "tags": [
      "geolocation",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "opencorporates",
    "name": "OpenCorporates",
    "description": "Global corporate database",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "OpenCorporates",
      "raw": "OpenCorporates"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "OpenCorporates"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "opencorporates-cli",
    "name": "opencorporates-cli",
    "description": "Command-line client for OpenCorporates API",
    "category": "company-business",
    "url": "https://github.com/octohedron/opencorporates",
    "install": {
      "method": "pip",
      "kali": "pip3 install opencorporates",
      "raw": "`pip3 install opencorporates`"
    },
    "tags": [
      "company-business",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "opencti",
    "name": "OpenCTI",
    "description": "Open-source CTI platform structured around STIX2",
    "category": "threat-intel-platforms",
    "url": "https://www.opencti.io",
    "install": {
      "method": "docker",
      "kali": "docker pull opencti/platform",
      "raw": "`docker pull opencti/platform`"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "opencv",
    "name": "OpenCV",
    "description": "Computer vision library",
    "category": "misc",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install opencv-python`",
      "raw": "`pip install opencv-python`"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "openocd",
    "name": "OpenOCD",
    "description": "Open On-Chip Debugger — JTAG/SWD interface for embedded",
    "category": "hardware-hacking",
    "url": "https://openocd.org",
    "install": {
      "method": "apt",
      "kali": "apt install openocd",
      "raw": "`apt install openocd`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "openphish",
    "name": "OpenPhish",
    "description": "Live phishing URL feed",
    "category": "malware-threat-intel",
    "url": "https://openphish.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[openphish.com](https://openphish.com)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "openrailwaymap",
    "name": "OpenRailwayMap",
    "description": "Worldwide rail network map — rolling stock, infrastructure, signals",
    "category": "vehicle-aviation-maritime",
    "url": "https://www.openrailwaymap.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.openrailwaymap.org](https://www.openrailwaymap.org)"
    },
    "tags": [
      "vehicle-aviation-maritime",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "opensanctions",
    "name": "OpenSanctions",
    "description": "Consolidated database of sanctioned entities across 200+ sources",
    "category": "company-business",
    "url": "https://opensanctions.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[opensanctions.org](https://opensanctions.org)"
    },
    "tags": [
      "company-business",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "openstreetmap",
    "name": "OpenStreetMap",
    "description": "Free collaborative world map",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "OpenStreetMap",
      "raw": "OpenStreetMap"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "OpenStreetMap"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "openvas",
    "name": "OpenVAS",
    "description": "Open-source vulnerability scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install openvas`",
      "raw": "`apt install openvas`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "openvpn",
    "name": "OpenVPN",
    "description": "Industry-standard open-source VPN protocol",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install openvpn`",
      "raw": "`apt install openvpn`"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Free open-source (self-hosted)",
      "open-source:✅",
      "no-log:✅",
      "protocols:OpenVPN"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "OpenVPN"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "ophcrack",
    "name": "Ophcrack",
    "description": "Windows password cracker (rainbow tables)",
    "category": "data-breach",
    "url": "https://ophcrack.sourceforge.io/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/)"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "orbit",
    "name": "Orbit",
    "description": "Bitcoin address investigator",
    "category": "company-business",
    "url": "https://github.com/s0md3v/Orbit",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/s0md3v/Orbit`",
      "raw": "`git clone https://github.com/s0md3v/Orbit`"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Orbit"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "osint-curious",
    "name": "OSINT Curious",
    "description": "Community blog, podcast, and learning resources",
    "category": "learning-resources",
    "url": "https://osintcurio.us",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[osintcurio.us](https://osintcurio.us)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "osint-framework",
    "name": "OSINT Framework",
    "description": "Visual map of all OSINT tools",
    "category": "username-social",
    "url": "https://osintframework.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[osintframework.com](https://osintframework.com/)"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "osint-framework-web",
    "name": "OSINT Framework (Web)",
    "description": "Visual map of all OSINT tools",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "OSINT Framework (Web)",
      "raw": "OSINT Framework (Web)"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "OSINT Framework (Web)"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "osint-industries",
    "name": "OSINT Industries",
    "description": "People search + social media lookup",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "OSINT Industries",
      "raw": "OSINT Industries"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "OSINT Industries"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "osint-san",
    "name": "OSINT-SAN",
    "description": "OSINT Swiss Army Knife framework",
    "category": "frameworks",
    "url": "https://github.com/Bafomet666/OSINT-SAN",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Bafomet666/OSINT-SAN`",
      "raw": "`git clone https://github.com/Bafomet666/OSINT-SAN`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "OSINT-SAN"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "osint-spy",
    "name": "OSINT-SPY",
    "description": "OSINT tool with Tor support",
    "category": "dark-web",
    "url": "https://github.com/SharadKumar97/OSINT-SPY",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/SharadKumar97/OSINT-SPY`",
      "raw": "`git clone https://github.com/SharadKumar97/OSINT-SPY`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "osint-techniques",
    "name": "OSINT Techniques",
    "description": "Michael Bazzell's resources, books, and search tools",
    "category": "learning-resources",
    "url": "https://inteltechniques.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[inteltechniques.com](https://inteltechniques.com)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "osint-training",
    "name": "Bellingcat's Online Investigations Toolkit",
    "description": "Bellingcat-curated tools and methodology guide",
    "category": "learning-resources",
    "url": "https://www.bellingcat.com/resources/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.bellingcat.com](https://www.bellingcat.com/resources/)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "osintgram",
    "name": "Osintgram",
    "description": "Instagram OSINT tool",
    "category": "username-social",
    "url": "https://github.com/Datalux/Osintgram",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Datalux/Osintgram`",
      "raw": "`git clone https://github.com/Datalux/Osintgram`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "osmedeus",
    "name": "osmedeus",
    "description": "Full automated reconnaissance workflow",
    "category": "frameworks",
    "url": "https://github.com/j3ssie/osmedeus",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/j3ssie/osmedeus`",
      "raw": "`git clone https://github.com/j3ssie/osmedeus`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "osmedeus"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "osquery",
    "name": "osquery",
    "description": "SQL-powered OS instrumentation/monitoring/analytics",
    "category": "blue-team-defensive",
    "url": "https://osquery.io",
    "install": {
      "method": "apt",
      "kali": "apt install osquery",
      "raw": "`apt install osquery`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "osrframework",
    "name": "OSRFramework",
    "description": "Username research framework with multiple tools",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install osrframework`",
      "raw": "`pip install osrframework`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "OSRFramework"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "outline-vpn",
    "name": "Outline VPN",
    "description": "Google Jigsaw's self-hosted VPN — censorship circumvention",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Website",
      "raw": "Website"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Free (self-hosted)",
      "open-source:✅",
      "no-log:✅",
      "protocols:Shadowsocks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Outline VPN"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "overpass-turbo",
    "name": "Overpass Turbo",
    "description": "OpenStreetMap data query",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Overpass Turbo",
      "raw": "Overpass Turbo"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Overpass Turbo"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "overthewire",
    "name": "OverTheWire Wargames",
    "description": "Free wargames for learning offensive security from scratch",
    "category": "training-ctf",
    "url": "https://overthewire.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[overthewire.org](https://overthewire.org)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "owasp-zap",
    "name": "OWASP ZAP",
    "description": "Open-source web app scanner",
    "category": "domain-ip-network",
    "url": "https://zaproxy.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[zaproxy.org](https://zaproxy.org/)"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "oxt",
    "name": "OXT (OpenXt)",
    "description": "Bitcoin transaction graph explorer with clustering",
    "category": "crypto-blockchain",
    "url": "https://oxt.me",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[oxt.me](https://oxt.me)"
    },
    "tags": [
      "crypto-blockchain",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "oxt.me",
    "name": "OXT.me",
    "description": "Bitcoin transaction graph analysis",
    "category": "crypto-blockchain",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "OXT.me",
      "raw": "OXT.me"
    },
    "tags": [
      "crypto-blockchain"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "OXT.me"
    ],
    "sections_seen": [
      "Cryptocurrency & Blockchain"
    ],
    "archived": false
  },
  {
    "id": "pacer",
    "name": "PACER",
    "description": "US federal court records",
    "category": "vehicle-aviation-maritime",
    "url": "https://pacer.uscourts.gov/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[pacer.uscourts.gov](https://pacer.uscourts.gov/)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "pagodo",
    "name": "Pagodo",
    "description": "Automated Google dorking tool",
    "category": "search-dorking",
    "url": "https://github.com/opsdisk/pagodo",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/opsdisk/pagodo`",
      "raw": "`git clone https://github.com/opsdisk/pagodo`"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Pagodo"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "paramminer",
    "name": "ParamMiner (Burp ext)",
    "description": "Discover hidden, unlinked HTTP parameters in Burp",
    "category": "red-team-offensive",
    "url": "https://github.com/PortSwigger/param-miner",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/PortSwigger/param-miner.git",
      "raw": "`git clone https://github.com/PortSwigger/param-miner.git`"
    },
    "tags": [
      "red-team-offensive",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "paramspider",
    "name": "ParamSpider",
    "description": "Parameter discovery from web archives",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install paramspider`",
      "raw": "`pip install paramspider`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "passivedns-mnemonic",
    "name": "Mnemonic Passive DNS",
    "description": "Free passive-DNS query tool",
    "category": "domain-ip-network",
    "url": "https://passivedns.mnemonic.no",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[passivedns.mnemonic.no](https://passivedns.mnemonic.no)"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "passivetotal",
    "name": "PassiveTotal (RiskIQ)",
    "description": "Passive DNS, WHOIS, SSL cert pivots — now Microsoft Defender TI",
    "category": "domain-ip-network",
    "url": "https://community.riskiq.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[community.riskiq.com](https://community.riskiq.com)"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "payloadsallthethings",
    "name": "PayloadsAllTheThings",
    "description": "Web app pentest payloads, bypasses, and methodology",
    "category": "red-team-offensive",
    "url": "https://github.com/swisskyrepo/PayloadsAllTheThings",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git",
      "raw": "`git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "peekalink",
    "name": "Peekalink",
    "description": "Preview any URL — title, description, screenshot via API",
    "category": "document-metadata",
    "url": "https://www.peekalink.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.peekalink.io](https://www.peekalink.io)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pentest-tools-scanner",
    "name": "Pentest-Tools Scanner",
    "description": "Website vulnerability scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Pentest-Tools Scanner",
      "raw": "Pentest-Tools Scanner"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Pentest-Tools Scanner"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "pentesterlab",
    "name": "PentesterLab",
    "description": "Hands-on web-app pentesting training",
    "category": "training-ctf",
    "url": "https://pentesterlab.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[pentesterlab.com](https://pentesterlab.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "perplexity-ai",
    "name": "Perplexity AI",
    "description": "AI search with cited sources",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ 5 Pro/day",
      "raw": "✅ 5 Pro/day"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "petitpotam",
    "name": "PetitPotam",
    "description": "PoC tool to coerce Windows hosts to authenticate to attacker",
    "category": "red-team-offensive",
    "url": "https://github.com/topotam/PetitPotam",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/topotam/PetitPotam.git",
      "raw": "`git clone https://github.com/topotam/PetitPotam.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "phind",
    "name": "Phind",
    "description": "AI search for developers",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "phishstats",
    "name": "PhishStats",
    "description": "Live phishing intelligence feed and search",
    "category": "malware-threat-intel",
    "url": "https://phishstats.info",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[phishstats.info](https://phishstats.info)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "phishtank",
    "name": "PhishTank",
    "description": "Anti-phishing community — verified phishing URLs",
    "category": "malware-threat-intel",
    "url": "https://phishtank.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[phishtank.org](https://phishtank.org)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "phobos",
    "name": "Phobos",
    "description": "Dark web search engine",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`",
      "raw": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "phonebook.cz",
    "name": "Phonebook.cz",
    "description": "Email, domain & URL search",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Phonebook.cz",
      "raw": "Phonebook.cz"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Phonebook.cz"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "phoneinfoga",
    "name": "PhoneInfoga",
    "description": "Advanced phone number scanner",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install phoneinfoga`",
      "raw": "`pip install phoneinfoga`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "PhoneInfoga"
    ],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "phonesploit",
    "name": "PhoneSploit",
    "description": "ADB-based phone exploitation",
    "category": "email-phone",
    "url": "https://github.com/aerosol-can/PhoneSploit",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/aerosol-can/PhoneSploit`",
      "raw": "`git clone https://github.com/aerosol-can/PhoneSploit`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "PhoneSploit"
    ],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "photon",
    "name": "Photon",
    "description": "Web crawler for OSINT data",
    "category": "domain-ip-network",
    "url": "https://github.com/s0md3v/Photon",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/s0md3v/Photon`",
      "raw": "`git clone https://github.com/s0md3v/Photon`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "photorec",
    "name": "PhotoRec",
    "description": "File data recovery — focuses on multimedia",
    "category": "digital-forensics",
    "url": "https://www.cgsecurity.org/wiki/PhotoRec",
    "install": {
      "method": "apt",
      "kali": "apt install testdisk",
      "raw": "`apt install testdisk`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "picarta",
    "name": "Picarta.ai",
    "description": "AI-powered photo geolocation predictor",
    "category": "geolocation",
    "url": "https://picarta.ai",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[picarta.ai](https://picarta.ai)"
    },
    "tags": [
      "geolocation",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "picoctf",
    "name": "picoCTF",
    "description": "Free CTF and learning platform built by CMU",
    "category": "training-ctf",
    "url": "https://picoctf.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[picoctf.org](https://picoctf.org)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pimeyes",
    "name": "PimEyes",
    "description": "Face search engine from photos",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "PimEyes",
      "raw": "PimEyes"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "PimEyes"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "pinterest-search",
    "name": "Pinterest",
    "description": "Visual search engine — alternate reverse-image source",
    "category": "image-facial",
    "url": "https://www.pinterest.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.pinterest.com](https://www.pinterest.com)"
    },
    "tags": [
      "image-facial",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pipl",
    "name": "Pipl",
    "description": "Deep people search engine",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Pipl",
      "raw": "Pipl"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Pipl"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "plaso",
    "name": "Plaso (log2timeline)",
    "description": "Super-timeline creation from forensic artifacts",
    "category": "digital-forensics",
    "url": "https://github.com/log2timeline/plaso",
    "install": {
      "method": "pip",
      "kali": "pip3 install plaso",
      "raw": "`pip3 install plaso`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "polygonscan",
    "name": "PolygonScan",
    "description": "Polygon (Matic) blockchain explorer",
    "category": "crypto-blockchain",
    "url": "https://polygonscan.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[polygonscan.com](https://polygonscan.com)"
    },
    "tags": [
      "crypto-blockchain",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "portswigger-academy",
    "name": "PortSwigger Web Security Academy",
    "description": "Free, world-class web security training (by Burp Suite team)",
    "category": "training-ctf",
    "url": "https://portswigger.net/web-security",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[portswigger.net](https://portswigger.net/web-security)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "predictasearch",
    "name": "Predicta Search",
    "description": "Search social accounts by email or phone",
    "category": "people-identity",
    "url": "https://predictasearch.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[predictasearch.com](https://predictasearch.com)"
    },
    "tags": [
      "people-identity",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "privadovpn-free",
    "name": "PrivadoVPN Free",
    "description": "Free VPN with 10GB/month and zero-log policy",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Website",
      "raw": "Website"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:10GB/month, 12 servers",
      "open-source:❌",
      "no-log:✅",
      "protocols:WireGuard, OpenVPN, IKEv2"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "PrivadoVPN Free"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "proton-vpn-free",
    "name": "Proton VPN Free",
    "description": "Best free VPN — unlimited data, no-log, open-source, Swiss privacy",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install protonvpn-cli`",
      "raw": "`pip3 install protonvpn-cli`"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Unlimited data, 5 countries, 1 device",
      "open-source:✅",
      "no-log:✅",
      "protocols:WireGuard, OpenVPN, Stealth"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Proton VPN Free"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "protonmail",
    "name": "ProtonMail",
    "description": "Encrypted email",
    "category": "vpn-privacy",
    "url": "https://proton.me/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[proton.me](https://proton.me/)"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "protonvpn",
    "name": "ProtonVPN",
    "description": "Free encrypted VPN",
    "category": "vpn-privacy",
    "url": "https://protonvpn.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[protonvpn.com](https://protonvpn.com/)"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "prowl",
    "name": "Prowl",
    "description": "Email & domain reconnaissance",
    "category": "email-phone",
    "url": "https://github.com/nettitude/Prowl",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/nettitude/Prowl`",
      "raw": "`git clone https://github.com/nettitude/Prowl`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "proxmark3",
    "name": "Proxmark3",
    "description": "RFID/NFC research and exploitation hardware + software",
    "category": "hardware-hacking",
    "url": "https://github.com/RfidResearchGroup/proxmark3",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/RfidResearchGroup/proxmark3.git",
      "raw": "`git clone https://github.com/RfidResearchGroup/proxmark3.git`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "public-transport-maps",
    "name": "Public Transport Maps",
    "description": "20+ online public transport maps by country",
    "category": "vehicle-aviation-maritime",
    "url": "https://cipher387.github.io/public_transport_maps/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[cipher387.github.io](https://cipher387.github.io/public_transport_maps/)"
    },
    "tags": [
      "vehicle-aviation-maritime",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "publicwww",
    "name": "PublicWWW",
    "description": "Search the web's source code (HTML/JS/CSS) for snippets, trackers, scripts",
    "category": "search-dorking",
    "url": "https://publicwww.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[publicwww.com](https://publicwww.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pullpush",
    "name": "PullPush",
    "description": "Index/retrieval service for Reddit (incl. deleted content)",
    "category": "username-social",
    "url": "https://pullpush.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[pullpush.io](https://pullpush.io)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pulsedive",
    "name": "Pulsedive",
    "description": "Threat intelligence enrichment",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Pulsedive",
      "raw": "Pulsedive"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Pulsedive"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "pushshift",
    "name": "Pushshift API",
    "description": "Historical Reddit data — posts, comments, metadata",
    "category": "username-social",
    "url": "https://pushshift.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[pushshift.io](https://pushshift.io)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pwn-college",
    "name": "pwn.college",
    "description": "Free college-level cybersecurity education from ASU",
    "category": "training-ctf",
    "url": "https://pwn.college",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[pwn.college](https://pwn.college)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "pwndb",
    "name": "Pwndb",
    "description": "Dark web breach database (Tor)",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟢 Free",
      "raw": "🟢 Free"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "pwnedhub",
    "name": "PwnedHub",
    "description": "Intentionally-vulnerable web app for hands-on appsec training",
    "category": "training-ctf",
    "url": "https://github.com/practisec/pwnedhub",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/practisec/pwnedhub.git",
      "raw": "`git clone https://github.com/practisec/pwnedhub.git`"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "python-for-osint-cipher387",
    "name": "Python for OSINT (cipher387)",
    "description": "21-day Python-for-OSINT course (free)",
    "category": "learning-resources",
    "url": "https://github.com/cipher387/python-for-OSINT-21-days",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/cipher387/python-for-OSINT-21-days.git",
      "raw": "`git clone https://github.com/cipher387/python-for-OSINT-21-days.git`"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "quake-360",
    "name": "Quake (360.cn)",
    "description": "Chinese internet asset search engine",
    "category": "iot-devices",
    "url": "https://quake.360.net",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[quake.360.net](https://quake.360.net)"
    },
    "tags": [
      "iot-devices",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "quttera",
    "name": "Quttera",
    "description": "Online website malware scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Quttera",
      "raw": "Quttera"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Quttera"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "radare2",
    "name": "radare2",
    "description": "Reverse engineering framework",
    "category": "digital-forensics",
    "url": "https://www.radare.org",
    "install": {
      "method": "apt",
      "kali": "apt install radare2",
      "raw": "`apt install radare2`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rainbowcrack",
    "name": "RainbowCrack",
    "description": "Rainbow table cracker",
    "category": "data-breach",
    "url": "https://project-rainbowcrack.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[project-rainbowcrack.com](https://project-rainbowcrack.com/)"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "real-world-bug-hunting",
    "name": "Real-World Bug Hunting (book)",
    "description": "Peter Yaworski — bug bounty methodology and real reports",
    "category": "learning-resources",
    "url": "https://nostarch.com/bughunting",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[nostarch.com](https://nostarch.com/bughunting)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "reaver",
    "name": "Reaver",
    "description": "WPS brute force tool",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install reaver`",
      "raw": "`apt install reaver`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "recap-archive",
    "name": "RECAP Archive",
    "description": "Public archive of PACER court documents",
    "category": "document-metadata",
    "url": "https://www.courtlistener.com/recap/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.courtlistener.com](https://www.courtlistener.com/recap/)"
    },
    "tags": [
      "document-metadata",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "recon-ng",
    "name": "Recon-ng",
    "description": "Module-based web reconnaissance framework",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install recon-ng`",
      "raw": "`pip3 install recon-ng`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Recon-ng"
    ],
    "sections_seen": [
      "Kali Linux OSINT Toolkit"
    ],
    "archived": false
  },
  {
    "id": "reconaizer",
    "name": "ReconAIzer",
    "description": "AI-enhanced Burp Suite extension",
    "category": "misc",
    "url": "https://github.com/hisxo/ReconAIzer",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer)"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "AI-Powered OSINT & Free AI Tools"
    ],
    "archived": false
  },
  {
    "id": "reconftw",
    "name": "reconFTW",
    "description": "Full-suite domain recon — subdomain enum, port scan, vuln scan in one pipeline",
    "category": "domain-ip-network",
    "url": "https://github.com/six2dez/reconftw",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/six2dez/reconftw.git",
      "raw": "`git clone https://github.com/six2dez/reconftw.git`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "recorded-future",
    "name": "Recorded Future",
    "description": "Threat intelligence platform",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Recorded Future",
      "raw": "Recorded Future"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Recorded Future"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "reddit-investigator",
    "name": "Reddit Investigator",
    "description": "Reddit user analysis",
    "category": "username-social",
    "url": "https://reddit-user-analyser.netlify.app/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/)"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "redditmetis",
    "name": "RedditMetis",
    "description": "Reddit user analysis — summary, top posts, activity stats",
    "category": "username-social",
    "url": "https://redditmetis.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[redditmetis.com](https://redditmetis.com)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "redditsearch-io",
    "name": "RedditSearch.io",
    "description": "Search archived Reddit content via Pushshift mirror",
    "category": "username-social",
    "url": "https://redditsearch.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[redditsearch.io](https://redditsearch.io)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "regripper",
    "name": "RegRipper",
    "description": "Open-source Windows registry parsing tool",
    "category": "digital-forensics",
    "url": "https://github.com/keydet89/RegRipper3.0",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/keydet89/RegRipper3.0.git",
      "raw": "`git clone https://github.com/keydet89/RegRipper3.0.git`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rekall",
    "name": "Rekall",
    "description": "Memory forensics tooling (legacy fork of Volatility)",
    "category": "digital-forensics",
    "url": "https://github.com/google/rekall",
    "install": {
      "method": "pip",
      "kali": "pip3 install rekall",
      "raw": "`pip3 install rekall`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "responder",
    "name": "Responder",
    "description": "LLMNR/NBT-NS/MDNS poisoner",
    "category": "data-breach",
    "url": "https://github.com/lgandx/Responder",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/lgandx/Responder`",
      "raw": "`git clone https://github.com/lgandx/Responder`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Password Cracking & Credential Tools"
    ],
    "archived": false
  },
  {
    "id": "revealer-cc",
    "name": "Revealer.cc",
    "description": "Discord-based account-checker & breach lookup",
    "category": "data-breach",
    "url": "https://revealer.cc",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[revealer.cc](https://revealer.cc)"
    },
    "tags": [
      "data-breach",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "reverse-whois-domaineye",
    "name": "DomainEye Reverse WHOIS",
    "description": "Search domains by registrant data",
    "category": "people-identity",
    "url": "https://domaineye.com/reverse-whois",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[domaineye.com](https://domaineye.com/reverse-whois)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "riseupvpn",
    "name": "RiseupVPN",
    "description": "Free VPN by Riseup collective — no accounts, no tracking",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install riseup-vpn`",
      "raw": "`apt install riseup-vpn`"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Unlimited, no account needed",
      "open-source:✅",
      "no-log:✅",
      "protocols:OpenVPN (Bitmask)"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "RiseupVPN"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "rita",
    "name": "RITA",
    "description": "Real Intelligence Threat Analytics — beaconing/long-conn detection",
    "category": "blue-team-defensive",
    "url": "https://github.com/activecm/rita",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/activecm/rita.git",
      "raw": "`git clone https://github.com/activecm/rita.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rizin",
    "name": "rizin",
    "description": "Modern fork of radare2 with cleaner API",
    "category": "digital-forensics",
    "url": "https://rizin.re",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/rizinorg/rizin.git",
      "raw": "`git clone https://github.com/rizinorg/rizin.git`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "robtex",
    "name": "Robtex",
    "description": "DNS lookup visualization",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Robtex",
      "raw": "Robtex"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Robtex"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "rocketreach",
    "name": "RocketReach",
    "description": "Find professional emails/phones for 700M+ profiles",
    "category": "people-identity",
    "url": "https://rocketreach.co",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[rocketreach.co](https://rocketreach.co)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rockyou",
    "name": "RockYou",
    "description": "Classic leaked password list",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Pre-installed in Kali (`/usr/share/wordlists/`)",
      "raw": "Pre-installed in Kali (`/usr/share/wordlists/`)"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Wordlist Generation & Brute Force"
    ],
    "archived": false
  },
  {
    "id": "root-me",
    "name": "Root-Me",
    "description": "500+ challenges and 100+ virtual labs",
    "category": "training-ctf",
    "url": "https://www.root-me.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.root-me.org](https://www.root-me.org)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rtfm-redteam",
    "name": "RTFM: Red Team Field Manual",
    "description": "Concise red-team command reference",
    "category": "learning-resources",
    "url": "https://www.amazon.com/dp/B07RJG62SJ",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.amazon.com](https://www.amazon.com/dp/B07RJG62SJ)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rtl-sdr",
    "name": "RTL-SDR",
    "description": "Cheap ($30) SDR receiver — entry into RF",
    "category": "hardware-hacking",
    "url": "https://www.rtl-sdr.com",
    "install": {
      "method": "apt",
      "kali": "apt install rtl-sdr",
      "raw": "`apt install rtl-sdr`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rubeus",
    "name": "Rubeus",
    "description": "C# toolset for raw Kerberos interaction and abuse",
    "category": "red-team-offensive",
    "url": "https://github.com/GhostPack/Rubeus",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/GhostPack/Rubeus.git",
      "raw": "`git clone https://github.com/GhostPack/Rubeus.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "rustscan",
    "name": "RustScan",
    "description": "Modern port scanner — finds open ports, then pipes to Nmap",
    "category": "domain-ip-network",
    "url": "https://github.com/RustScan/RustScan",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/RustScan/RustScan.git",
      "raw": "`git clone https://github.com/RustScan/RustScan.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "scalpel",
    "name": "Scalpel",
    "description": "File carving tool",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install scalpel`",
      "raw": "`apt install scalpel`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "scamadviser",
    "name": "ScamAdviser",
    "description": "Check website trustworthiness scores",
    "category": "malware-threat-intel",
    "url": "https://www.scamadviser.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.scamadviser.com](https://www.scamadviser.com)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "scatteredsecrets",
    "name": "ScatteredSecrets",
    "description": "Breach notification service",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟡 Freemium",
      "raw": "🟡 Freemium"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "scribd-search",
    "name": "Scribd",
    "description": "Search for documents, presentations, sheet music, ebooks",
    "category": "document-metadata",
    "url": "https://www.scribd.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.scribd.com](https://www.scribd.com)"
    },
    "tags": [
      "document-metadata",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "search-by-image",
    "name": "Search by Image",
    "description": "Multi-engine reverse image (browser ext)",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Chrome / Firefox extension",
      "raw": "Chrome / Firefox extension"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "search4faces",
    "name": "Search4faces",
    "description": "Face search in VK/OK social networks",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Search4faces",
      "raw": "Search4faces"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Search4faces"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "searchcode",
    "name": "searchcode",
    "description": "Search 75+ billion lines of public source code across GitHub/GitLab/Bitbucket",
    "category": "search-dorking",
    "url": "https://searchcode.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[searchcode.com](https://searchcode.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "searxng",
    "name": "SearXNG",
    "description": "Privacy-respecting metasearch engine",
    "category": "search-dorking",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "SearXNG",
      "raw": "SearXNG"
    },
    "tags": [
      "search-dorking"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "SearXNG"
    ],
    "sections_seen": [
      "Search & Dorking Tools"
    ],
    "archived": false
  },
  {
    "id": "sec-edgar",
    "name": "SEC EDGAR",
    "description": "US company filings",
    "category": "company-business",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "SEC EDGAR",
      "raw": "SEC EDGAR"
    },
    "tags": [
      "company-business"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "SEC EDGAR"
    ],
    "sections_seen": [
      "Financial & Corporate Intelligence"
    ],
    "archived": false
  },
  {
    "id": "seclists",
    "name": "SecLists",
    "description": "The ultimate security wordlist collection",
    "category": "data-breach",
    "url": "https://github.com/danielmiessler/SecLists",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/danielmiessler/SecLists`",
      "raw": "`git clone https://github.com/danielmiessler/SecLists`"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "SecLists"
    ],
    "sections_seen": [
      "Wordlist Generation & Brute Force"
    ],
    "archived": false
  },
  {
    "id": "security-onion",
    "name": "Security Onion",
    "description": "Linux distro for threat hunting, monitoring, and log management",
    "category": "blue-team-defensive",
    "url": "https://securityonionsolutions.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[securityonionsolutions.com](https://securityonionsolutions.com)"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "securitytrails",
    "name": "SecurityTrails",
    "description": "DNS & domain intelligence",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "SecurityTrails",
      "raw": "SecurityTrails"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "SecurityTrails"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "seeker",
    "name": "Seeker",
    "description": "Geolocation by phishing — collects precise GPS via WebRTC + browser geolocation",
    "category": "people-identity",
    "url": "https://github.com/thewhiteh4t/seeker",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/thewhiteh4t/seeker.git",
      "raw": "`git clone https://github.com/thewhiteh4t/seeker.git`"
    },
    "tags": [
      "people-identity",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "seekr",
    "name": "Seekr",
    "description": "Multi-purpose OSINT toolkit with web interface",
    "category": "username-social",
    "url": "https://github.com/seekr-osint/seekr",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/seekr-osint/seekr`",
      "raw": "`git clone https://github.com/seekr-osint/seekr`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Seekr"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "sentinel-hub",
    "name": "Sentinel Hub",
    "description": "Multi-source satellite imagery access",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Sentinel Hub",
      "raw": "Sentinel Hub"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Sentinel Hub"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "set",
    "name": "SET",
    "description": "Social engineering toolkit",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`setoolkit`",
      "raw": "`setoolkit`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Kali Linux OSINT Toolkit"
    ],
    "archived": false
  },
  {
    "id": "set-social-engineering-toolkit",
    "name": "SET (Social Engineering Toolkit)",
    "description": "Complete SE framework",
    "category": "people-identity",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install set`",
      "raw": "`apt install set`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "shadowmap",
    "name": "ShadowMap",
    "description": "Shadow analysis for time estimation",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ShadowMap",
      "raw": "ShadowMap"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "ShadowMap"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "shadowserver-dashboard",
    "name": "Shadowserver Dashboard",
    "description": "Global statistics on cyber threats by Shadowserver Foundation",
    "category": "malware-threat-intel",
    "url": "https://dashboard.shadowserver.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[dashboard.shadowserver.org](https://dashboard.shadowserver.org/)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sharphound",
    "name": "SharpHound",
    "description": "C# data collector for BloodHound",
    "category": "red-team-offensive",
    "url": "https://github.com/BloodHoundAD/SharpHound",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/BloodHoundAD/SharpHound.git",
      "raw": "`git clone https://github.com/BloodHoundAD/SharpHound.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sherlock",
    "name": "Sherlock",
    "description": "Hunt down social media accounts by username across 400+ sites",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install sherlock-project`",
      "raw": "`pip install sherlock-project`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Sherlock"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "sherlockeye",
    "name": "SherlockEye",
    "description": "Search publicly available info connected to a username",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "SherlockEye",
      "raw": "SherlockEye"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "SherlockEye"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "sherloq",
    "name": "Sherloq",
    "description": "Open-source image forensics toolset",
    "category": "image-facial",
    "url": "https://github.com/GuidoBartoli/sherloq",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/GuidoBartoli/sherloq.git",
      "raw": "`git clone https://github.com/GuidoBartoli/sherloq.git`"
    },
    "tags": [
      "image-facial",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "shodan",
    "name": "Shodan",
    "description": "Internet-connected device search",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install shodan`",
      "raw": "`pip3 install shodan`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Shodan"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "shodan-cli-tool",
    "name": "Shodan CLI",
    "description": "Official Shodan command-line client",
    "category": "search-dorking",
    "url": "https://github.com/achillean/shodan-python",
    "install": {
      "method": "pip",
      "kali": "pip3 install shodan",
      "raw": "`pip3 install shodan`"
    },
    "tags": [
      "search-dorking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "shodan-iot",
    "name": "Shodan (IoT)",
    "description": "IoT and device search engine",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install shodan`",
      "raw": "`pip3 install shodan`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Shodan (IoT)"
    ],
    "sections_seen": [
      "IoT & Device Intelligence"
    ],
    "archived": false
  },
  {
    "id": "shodanspider",
    "name": "ShodanSpider",
    "description": "Shodan scanning automation tool",
    "category": "iot-devices",
    "url": "https://github.com/shubhamrooter/ShodanSpider",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/shubhamrooter/ShodanSpider`",
      "raw": "`git clone https://github.com/shubhamrooter/ShodanSpider`"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "ShodanSpider"
    ],
    "sections_seen": [
      "IoT & Device Intelligence"
    ],
    "archived": false
  },
  {
    "id": "sigma",
    "name": "Sigma",
    "description": "Generic signature format for SIEM detections",
    "category": "blue-team-defensive",
    "url": "https://github.com/SigmaHQ/sigma",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/SigmaHQ/sigma.git",
      "raw": "`git clone https://github.com/SigmaHQ/sigma.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sigma-cli",
    "name": "sigma-cli",
    "description": "Convert Sigma rules to native SIEM queries",
    "category": "blue-team-defensive",
    "url": "https://github.com/SigmaHQ/sigma-cli",
    "install": {
      "method": "pip",
      "kali": "pip3 install sigma-cli",
      "raw": "`pip3 install sigma-cli`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "signal",
    "name": "Signal",
    "description": "Encrypted messaging",
    "category": "vpn-privacy",
    "url": "https://signal.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[signal.org](https://signal.org/)"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "simplelogin",
    "name": "SimpleLogin",
    "description": "Email alias service for OSINT",
    "category": "email-phone",
    "url": "https://simplelogin.io/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[simplelogin.io](https://simplelogin.io/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "sleuthkit",
    "name": "The Sleuth Kit",
    "description": "Library and CLI tools for forensic disk analysis",
    "category": "digital-forensics",
    "url": "https://www.sleuthkit.org",
    "install": {
      "method": "apt",
      "kali": "apt install sleuthkit",
      "raw": "`apt install sleuthkit`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "slideshare-search",
    "name": "SlideShare",
    "description": "Search public PowerPoint/PDF presentations",
    "category": "document-metadata",
    "url": "https://www.slideshare.net",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.slideshare.net](https://www.slideshare.net)"
    },
    "tags": [
      "document-metadata",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sliver",
    "name": "Sliver",
    "description": "Open-source adversary emulation/red-team framework (Cobalt Strike alt)",
    "category": "red-team-offensive",
    "url": "https://github.com/BishopFox/sliver",
    "install": {
      "method": "go",
      "kali": "go install github.com/bishopfox/sliver/server@latest",
      "raw": "`go install github.com/bishopfox/sliver/server@latest`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "smap",
    "name": "smap",
    "description": "Drop-in replacement for nmap powered by shodan.io",
    "category": "domain-ip-network",
    "url": "https://github.com/s0md3v/Smap",
    "install": {
      "method": "go",
      "kali": "go install github.com/s0md3v/smap/cmd/smap@latest",
      "raw": "`go install github.com/s0md3v/smap/cmd/smap@latest`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sn0int",
    "name": "sn0int",
    "description": "Semi-automatic OSINT framework in Rust",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install sn0int`",
      "raw": "`apt install sn0int`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "sn0int"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "sn1per",
    "name": "Sn1per",
    "description": "Automated pentest reconnaissance scanner",
    "category": "domain-ip-network",
    "url": "https://github.com/1N3/Sn1per.git",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/1N3/Sn1per.git`",
      "raw": "`git clone https://github.com/1N3/Sn1per.git`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Sn1per"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "snoop",
    "name": "Snoop",
    "description": "Username search with Russian-focused platforms",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install snoop`",
      "raw": "`pip install snoop`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Snoop"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "snort",
    "name": "Snort",
    "description": "Open-source intrusion-prevention/detection system",
    "category": "blue-team-defensive",
    "url": "https://www.snort.org",
    "install": {
      "method": "apt",
      "kali": "apt install snort",
      "raw": "`apt install snort`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "snov.io",
    "name": "Snov.io",
    "description": "Email finder & verifier",
    "category": "email-phone",
    "url": "https://snov.io/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[snov.io](https://snov.io/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "snscrape",
    "name": "snscrape",
    "description": "Social media scraper (Twitter, Reddit, etc.)",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install snscrape`",
      "raw": "`pip install snscrape`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "snusbase",
    "name": "Snusbase",
    "description": "Breach data search engine",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "💰 Paid",
      "raw": "💰 Paid"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Snusbase"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "snusbase-cli",
    "name": "Snusbase API",
    "description": "API access to breach data (premium)",
    "category": "data-breach",
    "url": "https://snusbase.com/api",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[snusbase.com](https://snusbase.com/api)"
    },
    "tags": [
      "data-breach",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "social-analyzer",
    "name": "Social Analyzer",
    "description": "API-based social media profiler for 1000+ sites",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install social-analyzer`",
      "raw": "`pip install social-analyzer`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Social Analyzer"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "social-mention",
    "name": "Social Mention",
    "description": "Social media aggregator",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Yes",
      "raw": "✅ Yes"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Searcher Platforms"
    ],
    "archived": false
  },
  {
    "id": "social-searcher",
    "name": "Social Searcher",
    "description": "Real-time social media search",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Yes",
      "raw": "✅ Yes"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Searcher Platforms"
    ],
    "archived": false
  },
  {
    "id": "social-searcher",
    "name": "Social-Searcher",
    "description": "Free social media search engine",
    "category": "username-social",
    "url": "https://www.social-searcher.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[social-searcher.com](https://www.social-searcher.com/)"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "socialblade",
    "name": "SocialBlade",
    "description": "Social media analytics",
    "category": "username-social",
    "url": "https://socialblade.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[socialblade.com](https://socialblade.com/)"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "socialfish",
    "name": "SocialFish",
    "description": "Social media phishing",
    "category": "people-identity",
    "url": "https://github.com/UndeadSec/SocialFish",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/UndeadSec/SocialFish`",
      "raw": "`git clone https://github.com/UndeadSec/SocialFish`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "socialscan",
    "name": "socialscan",
    "description": "Check email/username availability",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install socialscan`",
      "raw": "`pip install socialscan`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "socialscan"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "socid-extractor",
    "name": "Socid-extractor",
    "description": "Extract user info from web page source code",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install socid-extractor`",
      "raw": "`pip install socid-extractor`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Socid-extractor"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "socradar",
    "name": "SOCRadar",
    "description": "Extended threat intel — attack surface + dark web + brand",
    "category": "threat-intel-platforms",
    "url": "https://socradar.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[socradar.io](https://socradar.io)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sourcegraph",
    "name": "SourceGraph",
    "description": "Search code from millions of open-source repos",
    "category": "search-dorking",
    "url": "https://sourcegraph.com/search",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[sourcegraph.com](https://sourcegraph.com/search)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "spiderfoot",
    "name": "SpiderFoot",
    "description": "OSINT automation platform (200+ modules)",
    "category": "frameworks",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install spiderfoot`",
      "raw": "`pip3 install spiderfoot`"
    },
    "tags": [
      "frameworks"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "SpiderFoot"
    ],
    "sections_seen": [
      "Frameworks & All-in-One Platforms"
    ],
    "archived": false
  },
  {
    "id": "spokeo",
    "name": "Spokeo",
    "description": "People search aggregator",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Spokeo",
      "raw": "Spokeo"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Spokeo"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "spycloud",
    "name": "SpyCloud",
    "description": "Account-takeover prevention + identity exposure data",
    "category": "people-identity",
    "url": "https://spycloud.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[spycloud.com](https://spycloud.com)"
    },
    "tags": [
      "people-identity",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "spydialer",
    "name": "SpyDialer",
    "description": "Free reverse phone lookup",
    "category": "email-phone",
    "url": "https://spydialer.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[spydialer.com](https://spydialer.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "sqlmap",
    "name": "SQLMap",
    "description": "Automated SQL injection tool",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install sqlmap`",
      "raw": "`apt install sqlmap`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "SQLMap"
    ],
    "sections_seen": [
      "Vulnerability Scanning & Exploitation"
    ],
    "archived": false
  },
  {
    "id": "ssl-labs",
    "name": "SSL Labs",
    "description": "SSL/TLS server testing",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "SSL Labs",
      "raw": "SSL Labs"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "SSL Labs"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "ssrfmap",
    "name": "SSRFmap",
    "description": "Automated SSRF detection and exploitation framework",
    "category": "red-team-offensive",
    "url": "https://github.com/swisskyrepo/SSRFmap",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/swisskyrepo/SSRFmap.git",
      "raw": "`git clone https://github.com/swisskyrepo/SSRFmap.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "startpage",
    "name": "Startpage",
    "description": "Privacy-focused search — Google results with no tracking",
    "category": "search-dorking",
    "url": "https://www.startpage.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.startpage.com](https://www.startpage.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "stealseek",
    "name": "StealSeek",
    "description": "Search engine for finding and analyzing data breaches",
    "category": "data-breach",
    "url": "https://stealseek.io",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[stealseek.io](https://stealseek.io)"
    },
    "tags": [
      "data-breach",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "storm-breaker",
    "name": "Storm-Breaker",
    "description": "Access webcam/mic/location (SE)",
    "category": "people-identity",
    "url": "https://github.com/ultrasecurity/Storm-Breaker",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/ultrasecurity/Storm-Breaker`",
      "raw": "`git clone https://github.com/ultrasecurity/Storm-Breaker`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Storm-Breaker"
    ],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "subfinder",
    "name": "Subfinder",
    "description": "Fast passive subdomain discovery",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "go",
      "kali": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`",
      "raw": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Subfinder"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "sublist3r",
    "name": "Sublist3r",
    "description": "Subdomain enumeration",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install sublist3r`",
      "raw": "`pip install sublist3r`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Sublist3r"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "subredditstats",
    "name": "SubredditStats",
    "description": "Subreddit user-overlap, growth, top posts",
    "category": "username-social",
    "url": "https://subredditstats.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[subredditstats.com](https://subredditstats.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sucuri-sitecheck",
    "name": "Sucuri SiteCheck",
    "description": "Free website malware scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Sucuri SiteCheck",
      "raw": "Sucuri SiteCheck"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Sucuri SiteCheck"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "suncalc",
    "name": "SunCalc",
    "description": "Sun position/time calculator from photos",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "SunCalc",
      "raw": "SunCalc"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "SunCalc"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "suricata",
    "name": "Suricata",
    "description": "High-perf network IDS / IPS / NSM",
    "category": "blue-team-defensive",
    "url": "https://suricata.io",
    "install": {
      "method": "apt",
      "kali": "apt install suricata",
      "raw": "`apt install suricata`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "synack",
    "name": "Synack",
    "description": "Crowdsourced + vetted-researcher pentesting platform",
    "category": "bug-bounty",
    "url": "https://www.synack.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.synack.com](https://www.synack.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "sync.me",
    "name": "Sync.me",
    "description": "Phone number lookup",
    "category": "email-phone",
    "url": "https://sync.me/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[sync.me](https://sync.me/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "tails-os",
    "name": "Tails OS",
    "description": "Amnesic live OS (no trace)",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Tails OS",
      "raw": "Tails OS"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Tails OS"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "talkwalker",
    "name": "Talkwalker",
    "description": "Social listening & analytics",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "💰 Paid",
      "raw": "💰 Paid"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Searcher Platforms"
    ],
    "archived": false
  },
  {
    "id": "tcpdump",
    "name": "tcpdump",
    "description": "Command-line packet analyzer",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install tcpdump`",
      "raw": "`apt install tcpdump`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "telegago",
    "name": "Telegago",
    "description": "Google CSE for finding public/private Telegram channels",
    "category": "username-social",
    "url": "https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[cse.google.com](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "telegram-nearby-map",
    "name": "Telegram Nearby Map",
    "description": "Find positions of nearby Telegram users via OSM",
    "category": "username-social",
    "url": "https://github.com/tejado/telegram-nearby-map",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/tejado/telegram-nearby-map.git",
      "raw": "`git clone https://github.com/tejado/telegram-nearby-map.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "telegram-osinter",
    "name": "TeleGram-OSINTer",
    "description": "Telegram profile investigation",
    "category": "username-social",
    "url": "https://github.com/Alb-310/TeleGram-OSINTer",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`",
      "raw": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Telegram OSINT Bots & Channels"
    ],
    "archived": false
  },
  {
    "id": "telegramdb",
    "name": "TelegramDB",
    "description": "Telegram user & group lookup database",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "TelegramDB",
      "raw": "TelegramDB"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "TelegramDB"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "telepathy",
    "name": "Telepathy",
    "description": "Telegram OSINT analysis",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install telepathy`",
      "raw": "`pip install telepathy`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Telepathy"
    ],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "telerecon",
    "name": "Telerecon",
    "description": "Reconnaissance framework for investigating Telegram",
    "category": "username-social",
    "url": "https://github.com/sockysec/Telerecon",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/sockysec/Telerecon.git",
      "raw": "`git clone https://github.com/sockysec/Telerecon.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "teleteg",
    "name": "Teleteg",
    "description": "Telegram search engine — 10 free results",
    "category": "username-social",
    "url": "https://teleteg.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[teleteg.com](https://teleteg.com)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "telethon",
    "name": "Telethon",
    "description": "Python Telegram API library",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install telethon`",
      "raw": "`pip install telethon`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Telegram OSINT Bots & Channels"
    ],
    "archived": false
  },
  {
    "id": "telpoisk",
    "name": "TelPoisk",
    "description": "Russian phone directory",
    "category": "email-phone",
    "url": "https://telpoisk.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[telpoisk.com](https://telpoisk.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "tg-search-com",
    "name": "Telegram Search (lyzem.com)",
    "description": "Search public Telegram messages and channels",
    "category": "username-social",
    "url": "https://lyzem.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[lyzem.com](https://lyzem.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "tgstat",
    "name": "TGStat",
    "description": "Telegram channel analytics — post stats, audience overlap",
    "category": "username-social",
    "url": "https://tgstat.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[tgstat.com](https://tgstat.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "thatsthem",
    "name": "ThatsThem",
    "description": "Free people search by name/email/phone",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ThatsThem",
      "raw": "ThatsThem"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "ThatsThem"
    ],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "the-endorser",
    "name": "the-endorser",
    "description": "Map LinkedIn endorsements/skills to draw out person relationships",
    "category": "username-social",
    "url": "https://github.com/eth0izzle/the-endorser",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/eth0izzle/the-endorser.git",
      "raw": "`git clone https://github.com/eth0izzle/the-endorser.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "the-osint-rack",
    "name": "The OSINT Rack",
    "description": "Ransomware & data leak monitoring",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟢 Free",
      "raw": "🟢 Free"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "the-web-application-hackers-handbook",
    "name": "The Web Application Hacker's Handbook (book)",
    "description": "Stuttard & Pinto — appsec bible",
    "category": "learning-resources",
    "url": "https://www.amazon.com/dp/1118026470",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.amazon.com](https://www.amazon.com/dp/1118026470)"
    },
    "tags": [
      "learning-resources",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "theharvester",
    "name": "theHarvester",
    "description": "Email, subdomain & IP harvesting tool",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install theHarvester`",
      "raw": "`pip install theHarvester`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "theHarvester"
    ],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "thehive",
    "name": "TheHive",
    "description": "Scalable, free, open-source case management for SOCs",
    "category": "blue-team-defensive",
    "url": "https://thehive-project.org",
    "install": {
      "method": "docker",
      "kali": "docker pull strangebee/thehive:latest",
      "raw": "`docker pull strangebee/thehive:latest`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "threatconnect",
    "name": "ThreatConnect",
    "description": "Threat intel platform combining intel and SOAR",
    "category": "threat-intel-platforms",
    "url": "https://threatconnect.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[threatconnect.com](https://threatconnect.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "threatquotient",
    "name": "ThreatQ",
    "description": "Threat intel platform for SOCs",
    "category": "threat-intel-platforms",
    "url": "https://www.threatq.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.threatq.com](https://www.threatq.com)"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "tiktok-finder",
    "name": "TikTok Finder Country",
    "description": "Free OSINT lookup for TikTok account country/language",
    "category": "username-social",
    "url": "https://tiktokfindercountry.xyz",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[tiktokfindercountry.xyz](https://tiktokfindercountry.xyz)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "tiktok-scraper",
    "name": "TikTok Scraper",
    "description": "TikTok data extraction",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`npm install -g tiktok-scraper`",
      "raw": "`npm install -g tiktok-scraper`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "tineye",
    "name": "TinEye",
    "description": "Reverse image search",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "TinEye",
      "raw": "TinEye"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "TinEye"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "tor-browser",
    "name": "Tor Browser",
    "description": "Anonymous web browsing via Tor network",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install torbrowser-launcher`",
      "raw": "`apt install torbrowser-launcher`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Tor Browser"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "torch",
    "name": "Torch",
    "description": "Oldest & largest dark web search engine",
    "category": "dark-web",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`",
      "raw": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`"
    },
    "tags": [
      "dark-web"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Torch"
    ],
    "sections_seen": [
      "Dark Web Search Engines & Tools"
    ],
    "archived": false
  },
  {
    "id": "torghostng",
    "name": "TorghostNG",
    "description": "Anonymize all OS traffic via Tor (Linux)",
    "category": "dark-web",
    "url": "https://github.com/githacktools/TorghostNG",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/githacktools/TorghostNG.git",
      "raw": "`git clone https://github.com/githacktools/TorghostNG.git`"
    },
    "tags": [
      "dark-web",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "tosint",
    "name": "TOsint",
    "description": "Extract info from Telegram bots and channels",
    "category": "username-social",
    "url": "https://github.com/drego85/tosint",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/drego85/tosint.git",
      "raw": "`git clone https://github.com/drego85/tosint.git`"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "toutatis",
    "name": "Toutatis",
    "description": "Instagram OSINT by phone/email",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install toutatis`",
      "raw": "`pip install toutatis`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Toutatis"
    ],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "trace-manus",
    "name": "Trace",
    "description": "Search usernames, emails, phones across 600+ platforms with risk scoring",
    "category": "username-social",
    "url": "https://trace.manus.space",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[trace.manus.space](https://trace.manus.space)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "tracee",
    "name": "Tracee",
    "description": "Runtime security and forensics using eBPF (Aqua)",
    "category": "blue-team-defensive",
    "url": "https://github.com/aquasecurity/tracee",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/aquasecurity/tracee.git",
      "raw": "`git clone https://github.com/aquasecurity/tracee.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "transit-visualisation",
    "name": "Transit Visualisation Client",
    "description": "Real-time public transport across 700+ cities",
    "category": "vehicle-aviation-maritime",
    "url": "https://tracker.geops.ch",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[tracker.geops.ch](https://tracker.geops.ch)"
    },
    "tags": [
      "vehicle-aviation-maritime",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "trends24-tt",
    "name": "Trends24",
    "description": "Twitter trends history per country",
    "category": "username-social",
    "url": "https://trends24.in",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[trends24.in](https://trends24.in)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "triage",
    "name": "Hatching Triage",
    "description": "Modern malware sandbox with kernel-level monitoring",
    "category": "malware-threat-intel",
    "url": "https://tria.ge",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[tria.ge](https://tria.ge)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "trm-labs",
    "name": "TRM Labs",
    "description": "Crypto compliance and investigation platform",
    "category": "crypto-blockchain",
    "url": "https://www.trmlabs.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.trmlabs.com](https://www.trmlabs.com)"
    },
    "tags": [
      "crypto-blockchain",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "truecaller",
    "name": "Truecaller",
    "description": "Global reverse phone number lookup",
    "category": "email-phone",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Truecaller",
      "raw": "Truecaller"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Truecaller"
    ],
    "sections_seen": [
      "Phone Number OSINT"
    ],
    "archived": false
  },
  {
    "id": "trufflehog",
    "name": "trufflehog",
    "description": "Find secrets in git repos",
    "category": "misc",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install trufflehog`",
      "raw": "`pip3 install trufflehog`"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "trufflehog"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "tryhackme",
    "name": "TryHackMe",
    "description": "Beginner-friendly cybersecurity training platform",
    "category": "training-ctf",
    "url": "https://tryhackme.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[tryhackme.com](https://tryhackme.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "twayback",
    "name": "Twayback",
    "description": "Find deleted tweets",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install twayback`",
      "raw": "`pip install twayback`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "tweetbinder",
    "name": "TweetBinder",
    "description": "Twitter/X analytics dashboards",
    "category": "username-social",
    "url": "https://www.tweetbinder.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.tweetbinder.com](https://www.tweetbinder.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "twint",
    "name": "Twint",
    "description": "Twitter OSINT (no API needed)",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install twint`",
      "raw": "`pip install twint`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Monitoring"
    ],
    "archived": false
  },
  {
    "id": "twitch-search",
    "name": "Twitch Search",
    "description": "Search live streams by category, language, viewer count",
    "category": "username-social",
    "url": "https://www.twitch.tv/directory",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.twitch.tv](https://www.twitch.tv/directory)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "twiteur-osint",
    "name": "Twiteur",
    "description": "Twitter/X advanced search wrapper — geo, date, sentiment",
    "category": "username-social",
    "url": "https://twiteur.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[twiteur.com](https://twiteur.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "u-find-com",
    "name": "U-Find",
    "description": "Reddit user comment / submission scraper",
    "category": "username-social",
    "url": "https://u-find.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[u-find.com](https://u-find.com)"
    },
    "tags": [
      "username-social",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "ubertooth",
    "name": "Ubertooth One",
    "description": "Open-source 2.4 GHz wireless dev platform — Bluetooth research",
    "category": "hardware-hacking",
    "url": "https://greatscottgadgets.com/ubertoothone/",
    "install": {
      "method": "apt",
      "kali": "apt install ubertooth",
      "raw": "`apt install ubertooth`"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "uncover",
    "name": "uncover",
    "description": "ProjectDiscovery — quickly find exposed hosts via Shodan/Censys/Fofa",
    "category": "search-dorking",
    "url": "https://github.com/projectdiscovery/uncover",
    "install": {
      "method": "go",
      "kali": "go install github.com/projectdiscovery/uncover/cmd/uncover@latest",
      "raw": "`go install github.com/projectdiscovery/uncover/cmd/uncover@latest`"
    },
    "tags": [
      "search-dorking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "unfurl",
    "name": "Unfurl",
    "description": "URL & data artifact analysis tool",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Unfurl",
      "raw": "Unfurl"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Unfurl"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "urlcadiz",
    "name": "URLCADIZ",
    "description": "URL masking tool",
    "category": "people-identity",
    "url": "https://github.com/PerezMascato/URLCADIZ",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/PerezMascato/URLCADIZ`",
      "raw": "`git clone https://github.com/PerezMascato/URLCADIZ`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  },
  {
    "id": "urlcrazy",
    "name": "URLCrazy",
    "description": "Generate domain typos and check availability/registration",
    "category": "domain-ip-network",
    "url": "https://github.com/urbanadventurer/urlcrazy",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/urbanadventurer/urlcrazy.git",
      "raw": "`git clone https://github.com/urbanadventurer/urlcrazy.git`"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "urlhaus",
    "name": "URLhaus (abuse.ch)",
    "description": "Database of malicious URLs used for malware distribution",
    "category": "malware-threat-intel",
    "url": "https://urlhaus.abuse.ch",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[urlhaus.abuse.ch](https://urlhaus.abuse.ch)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "urlscan.io",
    "name": "urlscan.io",
    "description": "URL/domain analysis & screenshots",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "urlscan.io",
      "raw": "urlscan.io"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "urlscan.io"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "user-scanner",
    "name": "user-scanner",
    "description": "Check username presence across dev/social/gaming sites",
    "category": "username-social",
    "url": "https://github.com/kaifcodec/user-scanner.git",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/kaifcodec/user-scanner.git`",
      "raw": "`git clone https://github.com/kaifcodec/user-scanner.git`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "user-scanner"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "user-searcher",
    "name": "User-Searcher",
    "description": "Search a username across 2000+ websites",
    "category": "username-social",
    "url": "https://www.user-searcher.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.user-searcher.com](https://www.user-searcher.com)"
    },
    "tags": [
      "username-social",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "userrecon",
    "name": "UserRecon",
    "description": "Bash-based username finder across platforms",
    "category": "username-social",
    "url": "https://github.com/wishihab/userrecon.git",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/wishihab/userrecon.git`",
      "raw": "`git clone https://github.com/wishihab/userrecon.git`"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "UserRecon"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "usersearch.org",
    "name": "Usersearch.org",
    "description": "Free social network search",
    "category": "username-social",
    "url": "https://usersearch.org/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[usersearch.org](https://usersearch.org/)"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "vehicle-number-toolbox",
    "name": "Vehicle Number Search Toolbox",
    "description": "Search 14 country license plates from one page",
    "category": "vehicle-aviation-maritime",
    "url": "https://cipher387.github.io/venicle_number_search_toolbox/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[cipher387.github.io](https://cipher387.github.io/venicle_number_search_toolbox/)"
    },
    "tags": [
      "vehicle-aviation-maritime",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "velociraptor",
    "name": "Velociraptor",
    "description": "Endpoint visibility and digital forensics — query-driven",
    "category": "blue-team-defensive",
    "url": "https://github.com/Velocidex/velociraptor",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/Velocidex/velociraptor.git",
      "raw": "`git clone https://github.com/Velocidex/velociraptor.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "velocirector",
    "name": "Velociraptor Server",
    "description": "Centralized server for Velociraptor agents",
    "category": "blue-team-defensive",
    "url": "https://docs.velociraptor.app",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[docs.velociraptor.app](https://docs.velociraptor.app)"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "venacus",
    "name": "Venacus",
    "description": "Search for your data breaches and get notified when compromised",
    "category": "data-breach",
    "url": "https://venacus.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[venacus.com](https://venacus.com)"
    },
    "tags": [
      "data-breach",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "veracrypt",
    "name": "VeraCrypt",
    "description": "Disk encryption",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install veracrypt`",
      "raw": "`apt install veracrypt`"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "VeraCrypt"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "vesselfinder",
    "name": "VesselFinder",
    "description": "Free AIS vessel tracking",
    "category": "vehicle-aviation-maritime",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "VesselFinder",
      "raw": "VesselFinder"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "VesselFinder"
    ],
    "sections_seen": [
      "Vehicle, Aviation & Maritime"
    ],
    "archived": false
  },
  {
    "id": "viewdns",
    "name": "ViewDNS",
    "description": "Multiple DNS investigation tools",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ViewDNS",
      "raw": "ViewDNS"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "ViewDNS"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "vigilante-pw",
    "name": "Vigilante.pw",
    "description": "Index of dumped databases (educational)",
    "category": "data-breach",
    "url": "https://vigilante.pw",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[vigilante.pw](https://vigilante.pw)"
    },
    "tags": [
      "data-breach",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "villain",
    "name": "Villain",
    "description": "High-level stage 0/1 C2 framework for handling sibling agents",
    "category": "red-team-offensive",
    "url": "https://github.com/t3l3machus/Villain",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/t3l3machus/Villain.git",
      "raw": "`git clone https://github.com/t3l3machus/Villain.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "virustotal",
    "name": "VirusTotal",
    "description": "Domain/IP/file analysis",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "VirusTotal",
      "raw": "VirusTotal"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "VirusTotal"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "virustotal-threat",
    "name": "VirusTotal (Threat)",
    "description": "File/URL/domain malware analysis",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "VirusTotal (Threat)",
      "raw": "VirusTotal (Threat)"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "VirusTotal (Threat)"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "vmray",
    "name": "VMRay Analyzer",
    "description": "Malware sandbox analysis platform",
    "category": "malware-threat-intel",
    "url": "https://www.vmray.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.vmray.com](https://www.vmray.com)"
    },
    "tags": [
      "malware-threat-intel",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "voila-norbert",
    "name": "Voila Norbert",
    "description": "Find anyone's email",
    "category": "email-phone",
    "url": "https://voilanorbert.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[voilanorbert.com](https://voilanorbert.com/)"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "volatility",
    "name": "Volatility",
    "description": "Memory forensics framework",
    "category": "document-metadata",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install volatility3`",
      "raw": "`pip install volatility3`"
    },
    "tags": [
      "document-metadata"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Volatility"
    ],
    "sections_seen": [
      "Metadata & Digital Forensics"
    ],
    "archived": false
  },
  {
    "id": "volatility3",
    "name": "Volatility 3",
    "description": "Memory forensics framework",
    "category": "digital-forensics",
    "url": "https://github.com/volatilityfoundation/volatility3",
    "install": {
      "method": "pip",
      "kali": "pip3 install volatility3",
      "raw": "`pip3 install volatility3`"
    },
    "tags": [
      "digital-forensics",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "vulnhub",
    "name": "VulnHub",
    "description": "Free downloadable vulnerable VMs for offline practice",
    "category": "training-ctf",
    "url": "https://www.vulnhub.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.vulnhub.com](https://www.vulnhub.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "vulnyx",
    "name": "VulnYX",
    "description": "Online platform with vulnerable boxes (free + premium)",
    "category": "training-ctf",
    "url": "https://vulnyx.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[vulnyx.com](https://vulnyx.com)"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "walletexplorer",
    "name": "WalletExplorer",
    "description": "Smart bitcoin block explorer — clusters addresses by entity",
    "category": "crypto-blockchain",
    "url": "https://walletexplorer.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[walletexplorer.com](https://walletexplorer.com)"
    },
    "tags": [
      "crypto-blockchain",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "wappalyzer",
    "name": "Wappalyzer",
    "description": "Technology profiler (browser ext)",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Browser Extension",
      "raw": "Browser Extension"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Wappalyzer"
    ],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "wayback-machine",
    "name": "Wayback Machine",
    "description": "Web archive - explore website history",
    "category": "misc",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Wayback Machine",
      "raw": "Wayback Machine"
    },
    "tags": [
      "misc"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Wayback Machine"
    ],
    "sections_seen": [
      "Miscellaneous / Niche Tools"
    ],
    "archived": false
  },
  {
    "id": "waybackurls",
    "name": "waybackurls",
    "description": "Fetch all URLs the Wayback Machine knows about a domain",
    "category": "domain-ip-network",
    "url": "https://github.com/tomnomnom/waybackurls",
    "install": {
      "method": "go",
      "kali": "go install github.com/tomnomnom/waybackurls@latest",
      "raw": "`go install github.com/tomnomnom/waybackurls@latest`"
    },
    "tags": [
      "domain-ip-network",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "wazuh",
    "name": "Wazuh",
    "description": "Open-source XDR / SIEM platform",
    "category": "blue-team-defensive",
    "url": "https://wazuh.com",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/wazuh/wazuh.git",
      "raw": "`git clone https://github.com/wazuh/wazuh.git`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "weakpass",
    "name": "Weakpass",
    "description": "Massive wordlist collection",
    "category": "data-breach",
    "url": "https://weakpass.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[weakpass.com](https://weakpass.com/)"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Wordlist Generation & Brute Force"
    ],
    "archived": false
  },
  {
    "id": "web-check",
    "name": "Web-Check",
    "description": "All-in-one website analysis",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Web-Check",
      "raw": "Web-Check"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Web-Check"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "webgoat",
    "name": "OWASP WebGoat",
    "description": "Deliberately insecure Java-based web app for training",
    "category": "training-ctf",
    "url": "https://github.com/WebGoat/WebGoat",
    "install": {
      "method": "docker",
      "kali": "docker pull webgoat/webgoat",
      "raw": "`docker pull webgoat/webgoat`"
    },
    "tags": [
      "training-ctf",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "webhack",
    "name": "WebHack",
    "description": "Web hacking toolkit",
    "category": "domain-ip-network",
    "url": "https://github.com/yan4ikyt/webhack",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/yan4ikyt/webhack`",
      "raw": "`git clone https://github.com/yan4ikyt/webhack`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "webmii",
    "name": "WebMii",
    "description": "People search engine",
    "category": "image-facial",
    "url": "https://webmii.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[webmii.com](https://webmii.com/)"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Facial Recognition & People Search"
    ],
    "archived": false
  },
  {
    "id": "wfuzz",
    "name": "Wfuzz",
    "description": "Web fuzzer",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip install wfuzz`",
      "raw": "`pip install wfuzz`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "whatmail",
    "name": "WhatMail",
    "description": "Email header analysis CLI",
    "category": "email-phone",
    "url": "https://github.com/z0m31en7/WhatMail",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/z0m31en7/WhatMail`",
      "raw": "`git clone https://github.com/z0m31en7/WhatMail`"
    },
    "tags": [
      "email-phone"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Email OSINT Tools"
    ],
    "archived": false
  },
  {
    "id": "whatsmyname",
    "name": "WhatsMyName",
    "description": "Web-based username enumeration",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "WhatsMyName",
      "raw": "WhatsMyName"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "WhatsMyName"
    ],
    "sections_seen": [
      "Username & Social Media OSINT"
    ],
    "archived": false
  },
  {
    "id": "whatweb",
    "name": "Whatweb",
    "description": "Web technology identifier",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install whatweb`",
      "raw": "`apt install whatweb`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Whatweb"
    ],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "who-owns-what",
    "name": "Who Owns What",
    "description": "NYC landlord portfolio lookup",
    "category": "vehicle-aviation-maritime",
    "url": "https://whoownswhat.justfix.org/en/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "who-posted-what",
    "name": "Who Posted What",
    "description": "Facebook keyword search",
    "category": "username-social",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "✅ Free",
      "raw": "✅ Free"
    },
    "tags": [
      "username-social"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Social Media Searcher Platforms"
    ],
    "archived": false
  },
  {
    "id": "whois.com",
    "name": "WHOIS.com",
    "description": "WHOIS domain registration lookup",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "WHOIS.com",
      "raw": "WHOIS.com"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "WHOIS.com"
    ],
    "sections_seen": [
      "Domain & IP OSINT"
    ],
    "archived": false
  },
  {
    "id": "whoisology",
    "name": "Whoisology",
    "description": "Reverse WHOIS — find domains by registrant",
    "category": "domain-ip-network",
    "url": "https://whoisology.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[whoisology.com](https://whoisology.com)"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "whonix",
    "name": "Whonix",
    "description": "Anonymous OS via Tor (VM-based)",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Whonix",
      "raw": "Whonix"
    },
    "tags": [
      "vpn-privacy"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Whonix"
    ],
    "sections_seen": [
      "Anonymous & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "whoxy",
    "name": "Whoxy",
    "description": "WHOIS lookup with reverse-WHOIS, history, and bulk API",
    "category": "domain-ip-network",
    "url": "https://www.whoxy.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.whoxy.com](https://www.whoxy.com)"
    },
    "tags": [
      "domain-ip-network",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "wifi-pineapple",
    "name": "Wi-Fi Pineapple",
    "description": "Hak5's wireless auditing platform",
    "category": "hardware-hacking",
    "url": "https://shop.hak5.org/products/wifi-pineapple",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[shop.hak5.org](https://shop.hak5.org/products/wifi-pineapple)"
    },
    "tags": [
      "hardware-hacking",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "wifite",
    "name": "Wifite",
    "description": "Automated Wi-Fi auditing tool",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install wifite`",
      "raw": "`apt install wifite`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "wigle",
    "name": "WiGLE",
    "description": "Wireless network mapping database",
    "category": "iot-devices",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "WiGLE",
      "raw": "WiGLE"
    },
    "tags": [
      "iot-devices"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "WiGLE"
    ],
    "sections_seen": [
      "IoT & Device Intelligence"
    ],
    "archived": false
  },
  {
    "id": "wikidata",
    "name": "Wikidata",
    "description": "Wikipedia's structured-data backbone — query via SPARQL",
    "category": "people-identity",
    "url": "https://www.wikidata.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.wikidata.org](https://www.wikidata.org)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "wikimapia",
    "name": "Wikimapia",
    "description": "Collaborative world map with annotations",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Wikimapia",
      "raw": "Wikimapia"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Wikimapia"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "wikipedia-search",
    "name": "Wikipedia",
    "description": "Free encyclopedia — start of every people/place investigation",
    "category": "people-identity",
    "url": "https://en.wikipedia.org",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[en.wikipedia.org](https://en.wikipedia.org)"
    },
    "tags": [
      "people-identity",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "windscribe-free",
    "name": "Windscribe Free",
    "description": "Generous free VPN with 10GB/month and ad blocking",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Website",
      "raw": "Website"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:10GB/month, 10 countries",
      "open-source:❌",
      "no-log:✅",
      "protocols:WireGuard, OpenVPN, IKEv2"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Windscribe Free"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "wireguard",
    "name": "WireGuard",
    "description": "Modern VPN protocol — ultra-fast, minimal attack surface",
    "category": "vpn-privacy",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install wireguard`",
      "raw": "`apt install wireguard`"
    },
    "tags": [
      "vpn-privacy",
      "free-tier:Free open-source protocol (self-hosted)",
      "open-source:✅",
      "no-log:✅",
      "protocols:WireGuard (native)"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "WireGuard"
    ],
    "sections_seen": [
      "Free VPN & Privacy Tools"
    ],
    "archived": false
  },
  {
    "id": "wireshark",
    "name": "Wireshark",
    "description": "Network protocol analyzer",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install wireshark`",
      "raw": "`apt install wireshark`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Wireshark"
    ],
    "sections_seen": [
      "Network & Wireless Tools"
    ],
    "archived": false
  },
  {
    "id": "worldlicenseplates",
    "name": "WorldLicensePlates",
    "description": "Graphic index of license plates by country",
    "category": "vehicle-aviation-maritime",
    "url": "http://www.worldlicenseplates.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.worldlicenseplates.com](http://www.worldlicenseplates.com)"
    },
    "tags": [
      "vehicle-aviation-maritime",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "wpscan",
    "name": "WPScan",
    "description": "WordPress vulnerability scanner",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "`gem install wpscan`",
      "raw": "`gem install wpscan`"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "WPScan"
    ],
    "sections_seen": [
      "Web Application OSINT & Scanning"
    ],
    "archived": false
  },
  {
    "id": "xeuledoc",
    "name": "XeuleDoc",
    "description": "Fetch info on Google Docs/Sheets/Slides/Drawings without auth",
    "category": "document-metadata",
    "url": "https://github.com/Malfrats/xeuledoc",
    "install": {
      "method": "pip",
      "kali": "pip3 install xeuledoc",
      "raw": "`pip3 install xeuledoc`"
    },
    "tags": [
      "document-metadata",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "xposedornot",
    "name": "XposedOrNot",
    "description": "Breach exposure check",
    "category": "data-breach",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "🟢 Free",
      "raw": "🟢 Free"
    },
    "tags": [
      "data-breach"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "XposedOrNot"
    ],
    "sections_seen": [
      "Data Breach & Leak Search Engines"
    ],
    "archived": false
  },
  {
    "id": "xsstrike",
    "name": "XSStrike",
    "description": "Advanced XSS scanner with crawler and payload generator",
    "category": "red-team-offensive",
    "url": "https://github.com/s0md3v/XSStrike",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/s0md3v/XSStrike.git",
      "raw": "`git clone https://github.com/s0md3v/XSStrike.git`"
    },
    "tags": [
      "red-team-offensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "yandex-images",
    "name": "Yandex Images",
    "description": "Best reverse image search for faces/places",
    "category": "image-facial",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Yandex Images",
      "raw": "Yandex Images"
    },
    "tags": [
      "image-facial"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Yandex Images"
    ],
    "sections_seen": [
      "Image & Video OSINT"
    ],
    "archived": false
  },
  {
    "id": "yandex-search",
    "name": "Yandex",
    "description": "Russian search engine — strong reverse-image and Cyrillic support",
    "category": "search-dorking",
    "url": "https://www.yandex.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.yandex.com](https://www.yandex.com)"
    },
    "tags": [
      "search-dorking",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "yara",
    "name": "YARA",
    "description": "Pattern matching for malware research",
    "category": "malware-threat-intel",
    "url": "",
    "install": {
      "method": "apt",
      "kali": "`apt install yara`",
      "raw": "`apt install yara`"
    },
    "tags": [
      "malware-threat-intel"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "YARA"
    ],
    "sections_seen": [
      "Malware & Threat Intelligence"
    ],
    "archived": false
  },
  {
    "id": "yaraify",
    "name": "YARAify",
    "description": "Collaborative YARA engine for open threat intel via file pattern matching",
    "category": "malware-threat-intel",
    "url": "https://yaraify.abuse.ch/scan/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[yaraify.abuse.ch](https://yaraify.abuse.ch/scan/)"
    },
    "tags": [
      "malware-threat-intel",
      "curated-addition",
      "from-jivoi"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "yeswehack",
    "name": "YesWeHack",
    "description": "European-based bug-bounty and VDP platform",
    "category": "bug-bounty",
    "url": "https://www.yeswehack.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.yeswehack.com](https://www.yeswehack.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "yeti",
    "name": "Yeti",
    "description": "Open distributed threat intelligence platform",
    "category": "threat-intel-platforms",
    "url": "https://yeti-platform.io",
    "install": {
      "method": "git",
      "kali": "git clone https://github.com/yeti-platform/yeti.git",
      "raw": "`git clone https://github.com/yeti-platform/yeti.git`"
    },
    "tags": [
      "threat-intel-platforms",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "yumpu",
    "name": "Yumpu",
    "description": "Document publishing — sometimes leaks via search",
    "category": "document-metadata",
    "url": "https://www.yumpu.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.yumpu.com](https://www.yumpu.com)"
    },
    "tags": [
      "document-metadata",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "zeek",
    "name": "Zeek (Bro)",
    "description": "Powerful network analysis framework for security monitoring",
    "category": "blue-team-defensive",
    "url": "https://zeek.org",
    "install": {
      "method": "apt",
      "kali": "apt install zeek",
      "raw": "`apt install zeek`"
    },
    "tags": [
      "blue-team-defensive",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "zehef",
    "name": "Zehef",
    "description": "OSINT tool for email/phone/name investigations",
    "category": "people-identity",
    "url": "",
    "install": {
      "method": "pip",
      "kali": "`pip3 install zehef`",
      "raw": "`pip3 install zehef`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "Zehef"
    ],
    "sections_seen": [
      "People & Identity OSINT"
    ],
    "archived": false
  },
  {
    "id": "zerobounce",
    "name": "ZeroBounce",
    "description": "Email validation and deliverability service",
    "category": "email-phone",
    "url": "https://www.zerobounce.net",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[www.zerobounce.net](https://www.zerobounce.net)"
    },
    "tags": [
      "email-phone",
      "v2.1-deep-research"
    ],
    "source_versions": [
      "v2.1"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "zerodium",
    "name": "Zerodium",
    "description": "Premium 0day acquisition platform",
    "category": "bug-bounty",
    "url": "https://zerodium.com",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[zerodium.com](https://zerodium.com)"
    },
    "tags": [
      "bug-bounty",
      "v3.3-expansion"
    ],
    "source_versions": [
      "v3.3"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "zillow",
    "name": "Zillow",
    "description": "Property records & estimates",
    "category": "vehicle-aviation-maritime",
    "url": "https://zillow.com/",
    "install": {
      "method": "web",
      "kali": "",
      "raw": "[zillow.com](https://zillow.com/)"
    },
    "tags": [
      "vehicle-aviation-maritime"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [],
    "sections_seen": [
      "Vehicle, Property & Public Records"
    ],
    "archived": false
  },
  {
    "id": "zoom-earth",
    "name": "Zoom Earth",
    "description": "Real-time satellite & weather",
    "category": "geolocation",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "Zoom Earth",
      "raw": "Zoom Earth"
    },
    "tags": [
      "geolocation"
    ],
    "source_versions": [
      "v1",
      "v2"
    ],
    "aliases": [
      "Zoom Earth"
    ],
    "sections_seen": [
      "Geolocation & Maps OSINT"
    ],
    "archived": false
  },
  {
    "id": "zoomeye",
    "name": "ZoomEye",
    "description": "Cyberspace search engine for IoT",
    "category": "domain-ip-network",
    "url": "",
    "install": {
      "method": "manual",
      "kali": "ZoomEye",
      "raw": "ZoomEye"
    },
    "tags": [
      "domain-ip-network"
    ],
    "source_versions": [
      "v2"
    ],
    "aliases": [
      "ZoomEye"
    ],
    "sections_seen": [
      "Domain & IP / Network Recon"
    ],
    "archived": false
  },
  {
    "id": "zoomeye-cli",
    "name": "ZoomEye CLI",
    "description": "Command-line interface for ZoomEye internet asset search",
    "category": "iot-devices",
    "url": "https://github.com/knownsec/ZoomEye",
    "install": {
      "method": "pip",
      "kali": "pip3 install zoomeye",
      "raw": "`pip3 install zoomeye`"
    },
    "tags": [
      "iot-devices",
      "curated-addition"
    ],
    "source_versions": [
      "v3.1-curated"
    ],
    "aliases": [],
    "sections_seen": [],
    "archived": false
  },
  {
    "id": "zphisher",
    "name": "Zphisher",
    "description": "30+ phishing templates",
    "category": "people-identity",
    "url": "https://github.com/htr-tech/zphisher",
    "install": {
      "method": "git",
      "kali": "`git clone https://github.com/htr-tech/zphisher`",
      "raw": "`git clone https://github.com/htr-tech/zphisher`"
    },
    "tags": [
      "people-identity"
    ],
    "source_versions": [
      "v1"
    ],
    "aliases": [
      "Zphisher"
    ],
    "sections_seen": [
      "Social Engineering & Phishing"
    ],
    "archived": false
  }
]