RomanNum3ral
/
awesome-osint-arsenal
mirror of https://github.com/rawfilejson/awesome-osint-arsenal.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
awesome-osint-arsenal/tools.json

17624 lines
389 KiB
JSON
Raw Permalink Blame History

[
{
"id": "0xdf-hacks",
"name": "0xdf hacks stuff",
"description": "HTB writeups and pentesting writeups",
"category": "learning-resources",
"url": "https://0xdf.gitlab.io",
"install": {
"method": "web",
"kali": "",
"raw": "[0xdf.gitlab.io](https://0xdf.gitlab.io)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "abusech-hunting",
"name": "abuse.ch Hunting",
"description": "Hunt across all abuse.ch malware platforms with one query",
"category": "malware-threat-intel",
"url": "https://hunting.abuse.ch",
"install": {
"method": "web",
"kali": "",
"raw": "[hunting.abuse.ch](https://hunting.abuse.ch)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "abuseipdb",
"name": "AbuseIPDB",
"description": "IP address reputation database",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "AbuseIPDB",
"raw": "AbuseIPDB"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"AbuseIPDB"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "ad-attack-defense",
"name": "AD Attack & Defense",
"description": "Comprehensive Active Directory attack reference",
"category": "red-team-offensive",
"url": "https://github.com/infosecn1nja/AD-Attack-Defense",
"install": {
"method": "git",
"kali": "git clone https://github.com/infosecn1nja/AD-Attack-Defense.git",
"raw": "`git clone https://github.com/infosecn1nja/AD-Attack-Defense.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ads-b-exchange",
"name": "ADS-B Exchange",
"description": "Unfiltered flight tracking data",
"category": "vehicle-aviation-maritime",
"url": "",
"install": {
"method": "manual",
"kali": "ADS-B Exchange",
"raw": "ADS-B Exchange"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v2"
],
"aliases": [
"ADS-B Exchange"
],
"sections_seen": [
"Vehicle, Aviation & Maritime"
],
"archived": false
},
{
"id": "advphishing",
"name": "AdvPhishing",
"description": "Advanced phishing tool",
"category": "people-identity",
"url": "https://github.com/Ignitetch/AdvPhishing",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Ignitetch/AdvPhishing`",
"raw": "`git clone https://github.com/Ignitetch/AdvPhishing`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "ahmia",
"name": "Ahmia",
"description": "Clearnet search engine for dark web",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "Ahmia",
"raw": "Ahmia"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Ahmia"
],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "ahmyth-android-rat",
"name": "AhMyth Android RAT",
"description": "Android remote access tool",
"category": "iot-devices",
"url": "https://github.com/AhMyth/AhMyth-Android-RAT",
"install": {
"method": "git",
"kali": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`",
"raw": "`git clone https://github.com/AhMyth/AhMyth-Android-RAT`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "ai-or-not",
"name": "AI or Not",
"description": "Detect AI-generated images",
"category": "image-facial",
"url": "https://aiornot.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[aiornot.com](https://aiornot.com/)"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [
"AI or Not"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "aircrack-ng",
"name": "Aircrack-ng",
"description": "Wi-Fi security auditing suite",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install aircrack-ng`",
"raw": "`apt install aircrack-ng`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"Aircrack-ng"
],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "aleph-occrp",
"name": "Aleph (OCCRP)",
"description": "Global corporate & public records",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "Aleph (OCCRP)",
"raw": "Aleph (OCCRP)"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Aleph (OCCRP)"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "aleph-open-search",
"name": "Aleph Open Search",
"description": "Dark-web search engine by Aleph Networks",
"category": "dark-web",
"url": "https://open-search.aleph-networks.eu",
"install": {
"method": "web",
"kali": "",
"raw": "[open-search.aleph-networks.eu](https://open-search.aleph-networks.eu)"
},
"tags": [
"dark-web",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "aletheia-research",
"name": "Aletheia (image forensics)",
"description": "Detect manipulated/AI-generated images",
"category": "image-facial",
"url": "https://www.aletheia.ai",
"install": {
"method": "web",
"kali": "",
"raw": "[www.aletheia.ai](https://www.aletheia.ai)"
},
"tags": [
"image-facial",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "alfa-network",
"name": "Alfa Network Adapters",
"description": "Wi-Fi adapters known to support monitor/inject mode (AWUS036ACH etc.)",
"category": "hardware-hacking",
"url": "https://www.alfa.com.tw",
"install": {
"method": "web",
"kali": "",
"raw": "[www.alfa.com.tw](https://www.alfa.com.tw)"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "algo-vpn",
"name": "Algo VPN",
"description": "Self-hosted cloud VPN — sets up WireGuard/IPsec automatically",
"category": "vpn-privacy",
"url": "https://github.com/trailofbits/algo",
"install": {
"method": "git",
"kali": "`git clone https://github.com/trailofbits/algo`",
"raw": "`git clone https://github.com/trailofbits/algo`"
},
"tags": [
"vpn-privacy",
"free-tier:Free (self-hosted on cloud)",
"open-source:✅",
"no-log:✅",
"protocols:WireGuard, IPsec"
],
"source_versions": [
"v2"
],
"aliases": [
"Algo VPN"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "alienvault-otx",
"name": "AlienVault OTX",
"description": "Open threat exchange platform",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "manual",
"kali": "AlienVault OTX",
"raw": "AlienVault OTX"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"AlienVault OTX"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "altdns",
"name": "altdns",
"description": "Generates permutations, alterations and mutations of subdomains",
"category": "domain-ip-network",
"url": "https://github.com/infosec-au/altdns",
"install": {
"method": "pip",
"kali": "pip3 install py-altdns",
"raw": "`pip3 install py-altdns`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "amass",
"name": "Amass",
"description": "In-depth DNS enumeration and network mapping",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/owasp-amass/amass/v4/...@master`",
"raw": "`go install github.com/owasp-amass/amass/v4/...@master`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Amass"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "anew-tomnomnom",
"name": "anew",
"description": "Append lines from stdin to a file only if not already there",
"category": "domain-ip-network",
"url": "https://github.com/tomnomnom/anew",
"install": {
"method": "go",
"kali": "go install github.com/tomnomnom/anew@latest",
"raw": "`go install github.com/tomnomnom/anew@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "anomali",
"name": "Anomali ThreatStream",
"description": "Enterprise threat intel aggregation platform",
"category": "threat-intel-platforms",
"url": "https://www.anomali.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.anomali.com](https://www.anomali.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "anon-sms",
"name": "Anon-SMS",
"description": "Anonymous SMS sending",
"category": "vpn-privacy",
"url": "https://github.com/HACK3RY2J/Anon-SMS.git",
"install": {
"method": "git",
"kali": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`",
"raw": "`git clone https://github.com/HACK3RY2J/Anon-SMS.git`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "anonsurf",
"name": "Anonsurf",
"description": "Anonymize entire OS traffic through Tor",
"category": "vpn-privacy",
"url": "https://github.com/Und3rf10w/kali-anonsurf",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Und3rf10w/kali-anonsurf`",
"raw": "`git clone https://github.com/Und3rf10w/kali-anonsurf`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Anonsurf"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "any-run",
"name": "ANY.RUN",
"description": "Interactive online malware sandbox",
"category": "malware-threat-intel",
"url": "https://any.run",
"install": {
"method": "web",
"kali": "",
"raw": "[any.run](https://any.run)"
},
"tags": [
"malware-threat-intel",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "apktool",
"name": "Apktool",
"description": "Android APK decompiler/rebuilder",
"category": "iot-devices",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install apktool`",
"raw": "`apt install apktool`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "apollo-io",
"name": "Apollo.io",
"description": "B2B phone/email finder — 1200 free credits/yr",
"category": "people-identity",
"url": "https://www.apollo.io",
"install": {
"method": "web",
"kali": "",
"raw": "[www.apollo.io](https://www.apollo.io)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "apt-groups",
"name": "APT Groups and Operations",
"description": "Spreadsheet of threat actors, sponsoring countries, TTPs",
"category": "malware-threat-intel",
"url": "https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml",
"install": {
"method": "web",
"kali": "",
"raw": "[docs.google.com](https://docs.google.com/spreadsheets/u/0/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "aquatone",
"name": "Aquatone",
"description": "Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers)",
"category": "domain-ip-network",
"url": "https://github.com/michenriksen/aquatone",
"install": {
"method": "go",
"kali": "go install github.com/michenriksen/aquatone@latest",
"raw": "`go install github.com/michenriksen/aquatone@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "archive-today",
"name": "Archive.today",
"description": "Web archive — saves snapshots even when robots.txt blocks Wayback",
"category": "document-metadata",
"url": "https://archive.ph",
"install": {
"method": "web",
"kali": "",
"raw": "[archive.ph](https://archive.ph)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "arctic-shift",
"name": "Arctic Shift",
"description": "Tool for accessing large dumps of Reddit data via API/web",
"category": "username-social",
"url": "https://github.com/ArthurHeitmann/arctic_shift",
"install": {
"method": "git",
"kali": "git clone https://github.com/ArthurHeitmann/arctic_shift.git",
"raw": "`git clone https://github.com/ArthurHeitmann/arctic_shift.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "arin-whois",
"name": "ARIN WHOIS",
"description": "IP registration database",
"category": "domain-ip-network",
"url": "https://whois.arin.net/",
"install": {
"method": "web",
"kali": "",
"raw": "[whois.arin.net](https://whois.arin.net/)"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "arjun",
"name": "Arjun",
"description": "HTTP parameter discovery suite",
"category": "red-team-offensive",
"url": "https://github.com/s0md3v/Arjun",
"install": {
"method": "pip",
"kali": "pip3 install arjun",
"raw": "`pip3 install arjun`"
},
"tags": [
"red-team-offensive",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "arkham",
"name": "Arkham Intelligence",
"description": "On-chain intel — labels, entities, historical flows",
"category": "crypto-blockchain",
"url": "https://www.arkhamintelligence.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.arkhamintelligence.com](https://www.arkhamintelligence.com)"
},
"tags": [
"crypto-blockchain",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "assetfinder",
"name": "assetfinder",
"description": "Find domains and subdomains related to a given domain",
"category": "domain-ip-network",
"url": "https://github.com/tomnomnom/assetfinder",
"install": {
"method": "go",
"kali": "go install github.com/tomnomnom/assetfinder@latest",
"raw": "`go install github.com/tomnomnom/assetfinder@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "atomic-red-team",
"name": "Atomic Red Team",
"description": "Library of small detection-test scripts mapped to MITRE ATT&CK",
"category": "blue-team-defensive",
"url": "https://github.com/redcanaryco/atomic-red-team",
"install": {
"method": "git",
"kali": "git clone https://github.com/redcanaryco/atomic-red-team.git",
"raw": "`git clone https://github.com/redcanaryco/atomic-red-team.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "attify-badge",
"name": "Attify Badge",
"description": "Hardware tool for IoT firmware/UART/JTAG analysis",
"category": "hardware-hacking",
"url": "https://www.attify-store.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.attify-store.com](https://www.attify-store.com)"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "autocheck",
"name": "AutoCheck",
"description": "Vehicle history reports",
"category": "vehicle-aviation-maritime",
"url": "https://autocheck.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[autocheck.com](https://autocheck.com/)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "autopsy",
"name": "Autopsy",
"description": "Full digital forensics platform",
"category": "document-metadata",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install autopsy`",
"raw": "`apt install autopsy`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Autopsy"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "autorecon",
"name": "AutoRecon",
"description": "Multi-threaded network reconnaissance and enumeration framework",
"category": "domain-ip-network",
"url": "https://github.com/Tib3rius/AutoRecon",
"install": {
"method": "pip",
"kali": "pip3 install git+https://github.com/Tib3rius/AutoRecon.git",
"raw": "`pip3 install git+https://github.com/Tib3rius/AutoRecon.git`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "awesome-hacking-resources",
"name": "awesome-hacking-resources",
"description": "Beginner-friendly hacking learning resources",
"category": "learning-resources",
"url": "https://github.com/vitalysim/Awesome-Hacking-Resources",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com](https://github.com/vitalysim/Awesome-Hacking-Resources)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "awesome-incident-response",
"name": "awesome-incident-response",
"description": "Curated list of IR tools and resources",
"category": "learning-resources",
"url": "https://github.com/meirwah/awesome-incident-response",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com](https://github.com/meirwah/awesome-incident-response)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "awesome-malware-analysis",
"name": "awesome-malware-analysis",
"description": "Curated list of malware-analysis tools",
"category": "learning-resources",
"url": "https://github.com/rshipp/awesome-malware-analysis",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com](https://github.com/rshipp/awesome-malware-analysis)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "awesome-pentest",
"name": "awesome-pentest",
"description": "Massive curated list of pentesting tools and resources",
"category": "learning-resources",
"url": "https://github.com/enaqx/awesome-pentest",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com](https://github.com/enaqx/awesome-pentest)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "axiom",
"name": "Axiom",
"description": "Dynamic infra framework for parallel cloud-based recon",
"category": "domain-ip-network",
"url": "https://github.com/pry0cc/axiom",
"install": {
"method": "git",
"kali": "git clone https://github.com/pry0cc/axiom.git",
"raw": "`git clone https://github.com/pry0cc/axiom.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "backgroundchecks",
"name": "BackgroundChecks.com",
"description": "Background check aggregator (BeenVerified family)",
"category": "people-identity",
"url": "https://www.backgroundchecks.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.backgroundchecks.com](https://www.backgroundchecks.com)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "baidu",
"name": "Baidu",
"description": "Major Chinese search engine — essential for China-focused OSINT",
"category": "search-dorking",
"url": "https://www.baidu.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.baidu.com](https://www.baidu.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bbh-list-public",
"name": "Public Bug Bounty Programs (chaos)",
"description": "ProjectDiscovery's free BBH program list",
"category": "bug-bounty",
"url": "https://chaos.projectdiscovery.io",
"install": {
"method": "web",
"kali": "",
"raw": "[chaos.projectdiscovery.io](https://chaos.projectdiscovery.io)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bbot",
"name": "BBOT",
"description": "Recursive internet scanner for attack surface",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install bbot`",
"raw": "`pip3 install bbot`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"BBOT"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "beenverified",
"name": "BeenVerified",
"description": "People search & background check",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "BeenVerified",
"raw": "BeenVerified"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"BeenVerified"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "bettercap",
"name": "Bettercap",
"description": "MITM framework (ARP, DNS, HTTP)",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install bettercap`",
"raw": "`apt install bettercap`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "bevigil",
"name": "BeVigil",
"description": "Search subdomains, URLs, parameters from mobile applications",
"category": "domain-ip-network",
"url": "https://bevigil.com/search",
"install": {
"method": "web",
"kali": "",
"raw": "[bevigil.com](https://bevigil.com/search)"
},
"tags": [
"domain-ip-network",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bgp-toolkit",
"name": "BGP Toolkit",
"description": "BGP/ASN/IP intelligence",
"category": "domain-ip-network",
"url": "https://bgp.he.net/",
"install": {
"method": "web",
"kali": "",
"raw": "[bgp.he.net](https://bgp.he.net/)"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "bgp-tools",
"name": "BGP.tools",
"description": "Modern BGP toolkit for network reconnaissance",
"category": "domain-ip-network",
"url": "https://bgp.tools",
"install": {
"method": "web",
"kali": "",
"raw": "[bgp.tools](https://bgp.tools)"
},
"tags": [
"domain-ip-network",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "binary-ninja",
"name": "Binary Ninja",
"description": "Modern reverse engineering platform with API",
"category": "digital-forensics",
"url": "https://binary.ninja",
"install": {
"method": "web",
"kali": "",
"raw": "[binary.ninja](https://binary.ninja)"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "binaryedge",
"name": "BinaryEdge",
"description": "Cyber risk and attack-surface intelligence",
"category": "iot-devices",
"url": "https://www.binaryedge.io",
"install": {
"method": "web",
"kali": "",
"raw": "[www.binaryedge.io](https://www.binaryedge.io)"
},
"tags": [
"iot-devices",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bincheck",
"name": "BinCheck",
"description": "Bank card BIN lookup",
"category": "company-business",
"url": "https://bincheck.io/",
"install": {
"method": "web",
"kali": "",
"raw": "[bincheck.io](https://bincheck.io/)"
},
"tags": [
"company-business"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "binwalk",
"name": "Binwalk",
"description": "Firmware analysis & extraction",
"category": "document-metadata",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install binwalk`",
"raw": "`apt install binwalk`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Binwalk"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "bitquery",
"name": "Bitquery",
"description": "Blockchain data APIs for on-chain investigation",
"category": "crypto-blockchain",
"url": "https://bitquery.io",
"install": {
"method": "web",
"kali": "",
"raw": "[bitquery.io](https://bitquery.io)"
},
"tags": [
"crypto-blockchain",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "blackbird",
"name": "Blackbird",
"description": "Fast username search tool across 600+ websites",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install blackbird-osint`",
"raw": "`pip install blackbird-osint`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Blackbird"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "blackbookonline",
"name": "Black Book Online",
"description": "Free nationwide directory of public-record lookups",
"category": "people-identity",
"url": "https://www.blackbookonline.info",
"install": {
"method": "web",
"kali": "",
"raw": "[www.blackbookonline.info](https://www.blackbookonline.info)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "blackeye",
"name": "BlackEye",
"description": "32+ phishing template builder for credential capture (lab-only)",
"category": "people-identity",
"url": "https://github.com/An0nUD4Y/blackeye",
"install": {
"method": "git",
"kali": "git clone https://github.com/An0nUD4Y/blackeye.git",
"raw": "`git clone https://github.com/An0nUD4Y/blackeye.git`"
},
"tags": [
"people-identity",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bleachbit",
"name": "BleachBit",
"description": "Digital footprint cleaner",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install bleachbit`",
"raw": "`apt install bleachbit`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"BleachBit"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "blockchain.com",
"name": "Blockchain.com",
"description": "Bitcoin explorer",
"category": "company-business",
"url": "https://blockchain.com/explorer",
"install": {
"method": "web",
"kali": "",
"raw": "[blockchain.com/explorer](https://blockchain.com/explorer)"
},
"tags": [
"company-business"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "blockchain.com-explorer",
"name": "Blockchain.com Explorer",
"description": "Bitcoin blockchain explorer",
"category": "crypto-blockchain",
"url": "",
"install": {
"method": "manual",
"kali": "Blockchain.com Explorer",
"raw": "Blockchain.com Explorer"
},
"tags": [
"crypto-blockchain"
],
"source_versions": [
"v2"
],
"aliases": [
"Blockchain.com Explorer"
],
"sections_seen": [
"Cryptocurrency & Blockchain"
],
"archived": false
},
{
"id": "blockchair",
"name": "Blockchair",
"description": "Universal blockchain explorer & search",
"category": "crypto-blockchain",
"url": "",
"install": {
"method": "manual",
"kali": "Blockchair",
"raw": "Blockchair"
},
"tags": [
"crypto-blockchain"
],
"source_versions": [
"v2"
],
"aliases": [
"Blockchair"
],
"sections_seen": [
"Cryptocurrency & Blockchain"
],
"archived": false
},
{
"id": "bloodhound",
"name": "BloodHound",
"description": "AD attack-path graph analysis",
"category": "red-team-offensive",
"url": "https://github.com/BloodHoundAD/BloodHound",
"install": {
"method": "git",
"kali": "git clone https://github.com/BloodHoundAD/BloodHound.git",
"raw": "`git clone https://github.com/BloodHoundAD/BloodHound.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bloodhound-ce",
"name": "BloodHound CE",
"description": "Community Edition of BloodHound — modernized stack",
"category": "red-team-offensive",
"url": "https://github.com/SpecterOps/BloodHound",
"install": {
"method": "docker",
"kali": "docker pull specterops/bloodhound:latest",
"raw": "`docker pull specterops/bloodhound:latest`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "brandwatch",
"name": "BrandWatch",
"description": "Social listening platform",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "💰 Paid",
"raw": "💰 Paid"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [
"BrandWatch"
],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "brave-browser",
"name": "Brave Browser",
"description": "Privacy-focused browser with built-in Tor/IPFS support",
"category": "vpn-privacy",
"url": "https://brave.com",
"install": {
"method": "web",
"kali": "",
"raw": "[brave.com](https://brave.com)"
},
"tags": [
"vpn-privacy",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "brave-search",
"name": "Brave Search",
"description": "Independent, transparent, ad-free search engine",
"category": "search-dorking",
"url": "https://search.brave.com",
"install": {
"method": "web",
"kali": "",
"raw": "[search.brave.com](https://search.brave.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "breachdirectory",
"name": "BreachDirectory",
"description": "Free breach search",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟢 Free",
"raw": "🟢 Free"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"BreachDirectory"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "breachforums-mirror",
"name": "BreachForums Status",
"description": "Status tracking for the rotating BreachForums mirrors",
"category": "data-breach",
"url": "https://www.breachforums.cx",
"install": {
"method": "web",
"kali": "",
"raw": "[www.breachforums.cx](https://www.breachforums.cx)"
},
"tags": [
"data-breach",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "breadcrumbs",
"name": "Breadcrumbs",
"description": "Free crypto investigation platform — visualize transaction flows",
"category": "crypto-blockchain",
"url": "https://breadcrumbs.app",
"install": {
"method": "web",
"kali": "",
"raw": "[breadcrumbs.app](https://breadcrumbs.app)"
},
"tags": [
"crypto-blockchain",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "brightcloud",
"name": "BrightCloud URL/IP Lookup",
"description": "Reputation, category, and threat checks for URLs/IPs",
"category": "malware-threat-intel",
"url": "https://brightcloud.com/tools/url-ip-lookup.php",
"install": {
"method": "web",
"kali": "",
"raw": "[brightcloud.com](https://brightcloud.com/tools/url-ip-lookup.php)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "brightcloud-url",
"name": "BrightCloud Threat Intelligence",
"description": "URL/IP/threat reputation database",
"category": "search-dorking",
"url": "https://brightcloud.com",
"install": {
"method": "web",
"kali": "",
"raw": "[brightcloud.com](https://brightcloud.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "brute-ratel",
"name": "Brute Ratel C4",
"description": "Premium C2 with strong AV/EDR evasion",
"category": "red-team-offensive",
"url": "https://bruteratel.com",
"install": {
"method": "web",
"kali": "",
"raw": "[bruteratel.com](https://bruteratel.com)"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bscscan",
"name": "BscScan",
"description": "Binance Smart Chain explorer — same UX as Etherscan",
"category": "crypto-blockchain",
"url": "https://bscscan.com",
"install": {
"method": "web",
"kali": "",
"raw": "[bscscan.com](https://bscscan.com)"
},
"tags": [
"crypto-blockchain",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "btfm-blueteam",
"name": "BTFM: Blue Team Field Manual",
"description": "Concise blue-team incident response reference",
"category": "learning-resources",
"url": "https://www.amazon.com/dp/154101636X",
"install": {
"method": "web",
"kali": "",
"raw": "[www.amazon.com](https://www.amazon.com/dp/154101636X)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bugbase",
"name": "Bugbase",
"description": "Indian-origin bug-bounty + vulnerability disclosure platform",
"category": "bug-bounty",
"url": "https://bugbase.ai",
"install": {
"method": "web",
"kali": "",
"raw": "[bugbase.ai](https://bugbase.ai)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bugbountyhunter",
"name": "BugBountyHunter",
"description": "Web hacking training and labs",
"category": "training-ctf",
"url": "https://www.bugbountyhunter.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.bugbountyhunter.com](https://www.bugbountyhunter.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "bugcrowd",
"name": "Bugcrowd",
"description": "Crowdsourced security platform — bug bounty + pentesting",
"category": "bug-bounty",
"url": "https://bugcrowd.com",
"install": {
"method": "web",
"kali": "",
"raw": "[bugcrowd.com](https://bugcrowd.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "builtwith",
"name": "BuiltWith",
"description": "Web technology profiler",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "BuiltWith",
"raw": "BuiltWith"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"BuiltWith"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "bulk-extractor",
"name": "Bulk Extractor",
"description": "Extract features from disk images",
"category": "document-metadata",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install bulk-extractor`",
"raw": "`apt install bulk-extractor`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Bulk Extractor"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "burp-suite",
"name": "Burp Suite",
"description": "Web app security testing proxy",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "`burpsuite`",
"raw": "`burpsuite`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"Burp Suite"
],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "bus-pirate",
"name": "Bus Pirate",
"description": "Universal serial-protocol probe (I2C, SPI, UART, JTAG)",
"category": "hardware-hacking",
"url": "http://dangerousprototypes.com/docs/Bus_Pirate",
"install": {
"method": "web",
"kali": "",
"raw": "[dangerousprototypes.com](http://dangerousprototypes.com/docs/Bus_Pirate)"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cachedview",
"name": "CachedView",
"description": "View Google/Bing/Yandex cached versions of any page",
"category": "document-metadata",
"url": "https://cachedview.com",
"install": {
"method": "web",
"kali": "",
"raw": "[cachedview.com](https://cachedview.com)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "caldera",
"name": "MITRE CALDERA",
"description": "Cyber adversary emulation platform",
"category": "blue-team-defensive",
"url": "https://github.com/mitre/caldera",
"install": {
"method": "git",
"kali": "git clone https://github.com/mitre/caldera.git",
"raw": "`git clone https://github.com/mitre/caldera.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "calleridtest",
"name": "CallerIDTest",
"description": "Reverse phone lookup",
"category": "email-phone",
"url": "https://calleridtest.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[calleridtest.com](https://calleridtest.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "calyxvpn",
"name": "CalyxVPN",
"description": "Free VPN by Calyx Institute — no accounts required",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Website",
"raw": "Website"
},
"tags": [
"vpn-privacy",
"free-tier:Unlimited, no account needed",
"open-source:✅",
"no-log:✅",
"protocols:OpenVPN (Bitmask)"
],
"source_versions": [
"v2"
],
"aliases": [
"CalyxVPN"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "canary-tokens",
"name": "Canary Tokens",
"description": "Tracking tokens (URL, email, DNS, files)",
"category": "geolocation",
"url": "https://canarytokens.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[canarytokens.org](https://canarytokens.org/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"IP Tracking & Geolocation Links"
],
"archived": false
},
{
"id": "castrick",
"name": "Castrick",
"description": "Find social media accounts via email, username, phone",
"category": "people-identity",
"url": "https://castrickclues.com",
"install": {
"method": "web",
"kali": "",
"raw": "[castrickclues.com](https://castrickclues.com)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "censys",
"name": "Censys",
"description": "Internet-wide scan search",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Censys",
"raw": "Censys"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Censys"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "censys-cli",
"name": "Censys CLI",
"description": "Official Python wrapper and CLI for Censys",
"category": "search-dorking",
"url": "https://github.com/censys/censys-python",
"install": {
"method": "pip",
"kali": "pip3 install censys",
"raw": "`pip3 install censys`"
},
"tags": [
"search-dorking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "certipy",
"name": "Certipy",
"description": "Active Directory Certificate Services enumeration and abuse",
"category": "red-team-offensive",
"url": "https://github.com/ly4k/Certipy",
"install": {
"method": "pip",
"kali": "pip3 install certipy-ad",
"raw": "`pip3 install certipy-ad`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "certkit",
"name": "CertKit Certificate Search",
"description": "Fast search for public SSL/TLS certificate records",
"category": "domain-ip-network",
"url": "https://www.certkit.io/tools/ct-logs/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.certkit.io](https://www.certkit.io/tools/ct-logs/)"
},
"tags": [
"domain-ip-network",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cewl",
"name": "CeWL",
"description": "Custom wordlist generator from website",
"category": "data-breach",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install cewl`",
"raw": "`apt install cewl`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [
"CeWL"
],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "chainabuse",
"name": "Chainabuse",
"description": "Public crypto-scam reporting database",
"category": "crypto-blockchain",
"url": "https://www.chainabuse.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.chainabuse.com](https://www.chainabuse.com)"
},
"tags": [
"crypto-blockchain",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "chainalysis",
"name": "Chainalysis",
"description": "Blockchain analytics & investigation",
"category": "crypto-blockchain",
"url": "",
"install": {
"method": "manual",
"kali": "Chainalysis",
"raw": "Chainalysis"
},
"tags": [
"crypto-blockchain"
],
"source_versions": [
"v2"
],
"aliases": [
"Chainalysis"
],
"sections_seen": [
"Cryptocurrency & Blockchain"
],
"archived": false
},
{
"id": "chainalysis-reactor",
"name": "Chainalysis Reactor",
"description": "Premium blockchain investigation platform",
"category": "crypto-blockchain",
"url": "https://www.chainalysis.com/product/reactor/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.chainalysis.com](https://www.chainalysis.com/product/reactor/)"
},
"tags": [
"crypto-blockchain",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "chainsaw",
"name": "Chainsaw",
"description": "Hunt threats in Windows event logs — fast forensics",
"category": "blue-team-defensive",
"url": "https://github.com/WithSecureLabs/chainsaw",
"install": {
"method": "git",
"kali": "git clone https://github.com/WithSecureLabs/chainsaw.git",
"raw": "`git clone https://github.com/WithSecureLabs/chainsaw.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "chatgpt",
"name": "ChatGPT",
"description": "OpenAI's AI assistant",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ GPT-4o mini",
"raw": "✅ GPT-4o mini"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "checkleaked",
"name": "CheckLeaked",
"description": "Leak search engine (15B+ accounts)",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "checkuser",
"name": "CheckUser",
"description": "Search username across multiple social networks",
"category": "username-social",
"url": "https://checkuser.vercel.app",
"install": {
"method": "web",
"kali": "",
"raw": "[checkuser.vercel.app](https://checkuser.vercel.app)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "checkusernames",
"name": "CheckUserNames",
"description": "Check username across multiple platforms",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "CheckUserNames",
"raw": "CheckUserNames"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"CheckUserNames"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "cisco-talos",
"name": "Cisco Talos Intelligence",
"description": "IP and Domain Reputation Center for real-time detection",
"category": "malware-threat-intel",
"url": "https://talosintelligence.com/reputation_center",
"install": {
"method": "web",
"kali": "",
"raw": "[talosintelligence.com](https://talosintelligence.com/reputation_center)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "claude",
"name": "Claude",
"description": "Best for reasoning & analysis",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free tier",
"raw": "✅ Free tier"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "clearbit",
"name": "Clearbit Connect",
"description": "Email finder browser extension with company data",
"category": "people-identity",
"url": "https://connect.clearbit.com",
"install": {
"method": "web",
"kali": "",
"raw": "[connect.clearbit.com](https://connect.clearbit.com)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cloudflare-radar",
"name": "Cloudflare Radar",
"description": "Internet traffic patterns, attacks, technology trends",
"category": "domain-ip-network",
"url": "https://radar.cloudflare.com",
"install": {
"method": "web",
"kali": "",
"raw": "[radar.cloudflare.com](https://radar.cloudflare.com)"
},
"tags": [
"domain-ip-network",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "clustrmaps",
"name": "Clustrmaps",
"description": "Find people and address information",
"category": "people-identity",
"url": "https://clustrmaps.com",
"install": {
"method": "web",
"kali": "",
"raw": "[clustrmaps.com](https://clustrmaps.com)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cobalt-strike",
"name": "Cobalt Strike",
"description": "Premium adversary simulation / red team framework",
"category": "red-team-offensive",
"url": "https://www.cobaltstrike.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.cobaltstrike.com](https://www.cobaltstrike.com)"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "commandersearch",
"name": "Commander Search",
"description": "Boolean search builder for OSINT investigators",
"category": "search-dorking",
"url": "https://www.commandersearch.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.commandersearch.com](https://www.commandersearch.com)"
},
"tags": [
"search-dorking",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "commentpicker-tg",
"name": "Telemetr",
"description": "Telegram channel/group analytics",
"category": "username-social",
"url": "https://telemetr.io",
"install": {
"method": "web",
"kali": "",
"raw": "[telemetr.io](https://telemetr.io)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "commix",
"name": "Commix",
"description": "Command injection exploiter",
"category": "domain-ip-network",
"url": "https://github.com/commixproject/commix",
"install": {
"method": "git",
"kali": "`git clone https://github.com/commixproject/commix`",
"raw": "`git clone https://github.com/commixproject/commix`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "companies-house-uk",
"name": "Companies House (UK)",
"description": "UK company register",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "Companies House (UK)",
"raw": "Companies House (UK)"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Companies House (UK)"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "constella-intel",
"name": "Constella Intelligence",
"description": "Identity threat intel from breaches and dark web",
"category": "people-identity",
"url": "https://constellaintelligence.com",
"install": {
"method": "web",
"kali": "",
"raw": "[constellaintelligence.com](https://constellaintelligence.com)"
},
"tags": [
"people-identity",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "contactout",
"name": "ContactOut",
"description": "Find emails and phones for 300M+ professionals",
"category": "people-identity",
"url": "https://contactout.com",
"install": {
"method": "web",
"kali": "",
"raw": "[contactout.com](https://contactout.com)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cortex",
"name": "Cortex (TheHive)",
"description": "Observable analysis and active response engine",
"category": "blue-team-defensive",
"url": "https://github.com/TheHive-Project/Cortex",
"install": {
"method": "docker",
"kali": "docker pull thehiveproject/cortex:latest",
"raw": "`docker pull thehiveproject/cortex:latest`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "court-listener",
"name": "Court Listener",
"description": "Free US court opinion search",
"category": "vehicle-aviation-maritime",
"url": "https://courtlistener.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[courtlistener.com](https://courtlistener.com/)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "crackmapexec",
"name": "CrackMapExec",
"description": "Post-exploitation tool for AD networks",
"category": "red-team-offensive",
"url": "https://github.com/byt3bl33d3r/CrackMapExec",
"install": {
"method": "pip",
"kali": "pip3 install crackmapexec",
"raw": "`pip3 install crackmapexec`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "credenshow",
"name": "CredenShow",
"description": "Identify your compromised credentials before others do",
"category": "data-breach",
"url": "https://credenshow.com",
"install": {
"method": "web",
"kali": "",
"raw": "[credenshow.com](https://credenshow.com)"
},
"tags": [
"data-breach",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "criminal-ip",
"name": "Criminal IP",
"description": "AI-powered cyber threat intelligence",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Criminal IP",
"raw": "Criminal IP"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Criminal IP"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "crlfuzz",
"name": "CRLFuzz",
"description": "Fast CRLF-injection scanner in Go",
"category": "red-team-offensive",
"url": "https://github.com/dwisiswant0/crlfuzz",
"install": {
"method": "go",
"kali": "go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest",
"raw": "`go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest`"
},
"tags": [
"red-team-offensive",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "crosslinked",
"name": "CrossLinked",
"description": "LinkedIn enumeration — generate username lists from LinkedIn profiles",
"category": "people-identity",
"url": "https://github.com/m8sec/CrossLinked",
"install": {
"method": "pip",
"kali": "pip3 install crosslinked",
"raw": "`pip3 install crosslinked`"
},
"tags": [
"people-identity",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "crowdstrike-falcon-x",
"name": "CrowdStrike Falcon Intelligence",
"description": "Premium adversary intel from CrowdStrike",
"category": "threat-intel-platforms",
"url": "https://www.crowdstrike.com/products/threat-intelligence/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "crt.sh",
"name": "crt.sh",
"description": "Certificate transparency search",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "crt.sh",
"raw": "crt.sh"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"crt.sh"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "crunch",
"name": "Crunch",
"description": "Pattern-based wordlist generator",
"category": "data-breach",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install crunch`",
"raw": "`apt install crunch`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [
"Crunch"
],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "crunchbase",
"name": "Crunchbase",
"description": "Company/startup database",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "Crunchbase",
"raw": "Crunchbase"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Crunchbase"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "ctftime",
"name": "CTFtime",
"description": "Calendar of upcoming and past CTF events",
"category": "training-ctf",
"url": "https://ctftime.org",
"install": {
"method": "web",
"kali": "",
"raw": "[ctftime.org](https://ctftime.org)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cupp",
"name": "Cupp",
"description": "Profile-based wordlist generator",
"category": "data-breach",
"url": "https://github.com/Mebus/cupp",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Mebus/cupp`",
"raw": "`git clone https://github.com/Mebus/cupp`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Wordlist Generation & Brute Force"
],
"archived": false
},
{
"id": "cutter",
"name": "Cutter",
"description": "GUI for radare2/rizin reverse-engineering",
"category": "digital-forensics",
"url": "https://cutter.re",
"install": {
"method": "git",
"kali": "git clone https://github.com/rizinorg/cutter.git",
"raw": "`git clone https://github.com/rizinorg/cutter.git`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "cyberchef",
"name": "CyberChef",
"description": "Data analysis swiss army knife",
"category": "document-metadata",
"url": "",
"install": {
"method": "manual",
"kali": "CyberChef",
"raw": "CyberChef"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"CyberChef"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "cybrary",
"name": "Cybrary",
"description": "Free + paid cybersecurity courses",
"category": "training-ctf",
"url": "https://www.cybrary.it",
"install": {
"method": "web",
"kali": "",
"raw": "[www.cybrary.it](https://www.cybrary.it)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dalfox",
"name": "Dalfox",
"description": "Fast, intelligent XSS scanner",
"category": "red-team-offensive",
"url": "https://github.com/hahwul/dalfox",
"install": {
"method": "go",
"kali": "go install github.com/hahwul/dalfox/v2@latest",
"raw": "`go install github.com/hahwul/dalfox/v2@latest`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "daprofiler",
"name": "DaProfiler",
"description": "OSINT profiling tool with reports",
"category": "people-identity",
"url": "https://github.com/daprofiler/DaProfiler",
"install": {
"method": "git",
"kali": "`git clone https://github.com/daprofiler/DaProfiler`",
"raw": "`git clone https://github.com/daprofiler/DaProfiler`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v2"
],
"aliases": [
"DaProfiler"
],
"sections_seen": [
"People & Identity OSINT"
],
"archived": false
},
{
"id": "dark.fail",
"name": "Dark.fail",
"description": "Verified dark web links directory",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "Dark.fail",
"raw": "Dark.fail"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Dark.fail"
],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "darkscrape",
"name": "DarkScrape",
"description": "Dark web scraping tool",
"category": "dark-web",
"url": "https://github.com/itsmehacker/DarkScrape",
"install": {
"method": "git",
"kali": "`git clone https://github.com/itsmehacker/DarkScrape`",
"raw": "`git clone https://github.com/itsmehacker/DarkScrape`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v2"
],
"aliases": [
"DarkScrape"
],
"sections_seen": [
"Dark Web & Tor Intelligence"
],
"archived": false
},
{
"id": "darksearch",
"name": "DarkSearch",
"description": "Dark web search API (clearnet)",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "DarkSearch",
"raw": "DarkSearch"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"DarkSearch"
],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "databreach.com",
"name": "DataBreach.com",
"description": "Data breach lookup",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟢 Free",
"raw": "🟢 Free"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "db-ip",
"name": "DB-IP",
"description": "IP geolocation database",
"category": "domain-ip-network",
"url": "https://db-ip.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[db-ip.com](https://db-ip.com/)"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "dbpedia",
"name": "DBpedia",
"description": "Structured Wikipedia data — SPARQL endpoint",
"category": "people-identity",
"url": "https://www.dbpedia.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.dbpedia.org](https://www.dbpedia.org)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "deepface",
"name": "DeepFace",
"description": "AI face analysis (age, gender, emotion)",
"category": "image-facial",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install deepface`",
"raw": "`pip install deepface`"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"DeepFace"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "deepseek",
"name": "DeepSeek",
"description": "Open-source, strong reasoning",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "dehashed",
"name": "DeHashed",
"description": "Breach search engine",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "💰 Paid",
"raw": "💰 Paid"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"DeHashed"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "depix",
"name": "Depix",
"description": "Recover pixelated text from screenshots",
"category": "image-facial",
"url": "https://github.com/beurtschipper/Depix",
"install": {
"method": "git",
"kali": "`git clone https://github.com/beurtschipper/Depix`",
"raw": "`git clone https://github.com/beurtschipper/Depix`"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Depix"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "digital-footprint-check",
"name": "Digital Footprint Check",
"description": "Free username check on hundreds of sites",
"category": "username-social",
"url": "https://www.digitalfootprintcheck.com/free-checker.html",
"install": {
"method": "web",
"kali": "",
"raw": "[www.digitalfootprintcheck.com](https://www.digitalfootprintcheck.com/free-checker.html)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "digital-shadows",
"name": "Digital Shadows SearchLight",
"description": "Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP)",
"category": "threat-intel-platforms",
"url": "https://www.reliaquest.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.reliaquest.com](https://www.reliaquest.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dirb",
"name": "Dirb",
"description": "Web directory brute-forcer",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install dirb`",
"raw": "`apt install dirb`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"Dirb"
],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "dirsearch",
"name": "dirsearch",
"description": "Web path scanner — advanced wordlist-based directory bruteforce",
"category": "domain-ip-network",
"url": "https://github.com/maurosoria/dirsearch",
"install": {
"method": "pip",
"kali": "pip3 install dirsearch",
"raw": "`pip3 install dirsearch`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "disboard",
"name": "Disboard",
"description": "Discord server discovery platform",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "Disboard",
"raw": "Disboard"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"Disboard"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "disclose-io",
"name": "Disclose.io",
"description": "Standardized vulnerability-disclosure language and tools",
"category": "bug-bounty",
"url": "https://disclose.io",
"install": {
"method": "web",
"kali": "",
"raw": "[disclose.io](https://disclose.io)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "discord-history",
"name": "DiscordHistory",
"description": "Search public Discord servers and messages",
"category": "username-social",
"url": "https://disboard.org",
"install": {
"method": "web",
"kali": "",
"raw": "[disboard.org](https://disboard.org)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "discord-history-tracker",
"name": "Discord History Tracker",
"description": "Save Discord chat history",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "Discord History Tracker",
"raw": "Discord History Tracker"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"Discord History Tracker"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "discord-lookup",
"name": "Discord Lookup",
"description": "Look up Discord user info via ID",
"category": "username-social",
"url": "https://discordlookup.com",
"install": {
"method": "web",
"kali": "",
"raw": "[discordlookup.com](https://discordlookup.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "discordbee",
"name": "DiscordBee",
"description": "Discord user and server search engine",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "DiscordBee",
"raw": "DiscordBee"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"DiscordBee"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "discordhub",
"name": "DiscordHub",
"description": "Discord user search platform",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "DiscordHub",
"raw": "DiscordHub"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"DiscordHub"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "dissect",
"name": "Dissect",
"description": "Fox-IT framework for fast forensic image analysis",
"category": "digital-forensics",
"url": "https://docs.dissect.tools",
"install": {
"method": "pip",
"kali": "pip3 install dissect",
"raw": "`pip3 install dissect`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dnsdumpster",
"name": "DNSDumpster",
"description": "DNS reconnaissance & mapping",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "DNSDumpster",
"raw": "DNSDumpster"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"DNSDumpster"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "dnshistory",
"name": "DNS History",
"description": "Historical DNS records lookup",
"category": "domain-ip-network",
"url": "https://dnshistory.org",
"install": {
"method": "web",
"kali": "",
"raw": "[dnshistory.org](https://dnshistory.org)"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dnsrecon",
"name": "dnsrecon",
"description": "DNS enumeration and reconnaissance",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install dnsrecon`",
"raw": "`pip install dnsrecon`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"dnsrecon"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "dnstwist",
"name": "dnstwist",
"description": "Domain name permutation engine for phishing detection",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install dnstwist`",
"raw": "`pip3 install dnstwist`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"dnstwist"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "documentcloud",
"name": "DocumentCloud",
"description": "Platform for analyzing, annotating, publishing documents",
"category": "document-metadata",
"url": "https://www.documentcloud.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.documentcloud.org](https://www.documentcloud.org)"
},
"tags": [
"document-metadata",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dork-cli",
"name": "dork-cli",
"description": "Run Google dorks from the command line",
"category": "search-dorking",
"url": "https://github.com/jgor/dork-cli",
"install": {
"method": "git",
"kali": "git clone https://github.com/jgor/dork-cli.git",
"raw": "`git clone https://github.com/jgor/dork-cli.git`"
},
"tags": [
"search-dorking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dorkgenius",
"name": "DorkGenius",
"description": "AI-powered search query generator for Google, Bing, DuckDuckGo",
"category": "search-dorking",
"url": "https://dorkgenius.com",
"install": {
"method": "web",
"kali": "",
"raw": "[dorkgenius.com](https://dorkgenius.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dorkgpt",
"name": "DorkGPT",
"description": "Generate Google Dorks with AI",
"category": "search-dorking",
"url": "",
"install": {
"method": "manual",
"kali": "DorkGPT",
"raw": "DorkGPT"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"DorkGPT"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "dorksearch",
"name": "DorkSearch",
"description": "Google dork search engine",
"category": "search-dorking",
"url": "",
"install": {
"method": "manual",
"kali": "DorkSearch",
"raw": "DorkSearch"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"DorkSearch"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "dorky-com",
"name": "Dorky",
"description": "Online dork builder for Google/Bing/DuckDuckGo",
"category": "search-dorking",
"url": "https://dorky.io",
"install": {
"method": "web",
"kali": "",
"raw": "[dorky.io](https://dorky.io)"
},
"tags": [
"search-dorking",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "duckduckgo-onion",
"name": "DuckDuckGo Onion",
"description": "Private search on Tor",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`",
"raw": "`duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "dune",
"name": "Dune Analytics",
"description": "SQL queries over indexed blockchain data",
"category": "crypto-blockchain",
"url": "https://dune.com",
"install": {
"method": "web",
"kali": "",
"raw": "[dune.com](https://dune.com)"
},
"tags": [
"crypto-blockchain",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "dvwa",
"name": "DVWA",
"description": "Damn Vulnerable Web Application — classic appsec lab",
"category": "training-ctf",
"url": "https://github.com/digininja/DVWA",
"install": {
"method": "git",
"kali": "git clone https://github.com/digininja/DVWA.git",
"raw": "`git clone https://github.com/digininja/DVWA.git`"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "eclecticiq",
"name": "EclecticIQ Intelligence Center",
"description": "STIX/TAXII-native threat intel platform",
"category": "threat-intel-platforms",
"url": "https://www.eclecticiq.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.eclecticiq.com](https://www.eclecticiq.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "elk-elastic",
"name": "Elastic Stack (ELK)",
"description": "Elasticsearch + Logstash + Kibana — log analytics",
"category": "blue-team-defensive",
"url": "https://www.elastic.co/elastic-stack",
"install": {
"method": "docker",
"kali": "docker pull docker.elastic.co/elasticsearch/elasticsearch:latest",
"raw": "`docker pull docker.elastic.co/elasticsearch/elasticsearch:latest`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "elliptic",
"name": "Elliptic",
"description": "Crypto financial-crime detection and investigation",
"category": "crypto-blockchain",
"url": "https://www.elliptic.co",
"install": {
"method": "web",
"kali": "",
"raw": "[www.elliptic.co](https://www.elliptic.co)"
},
"tags": [
"crypto-blockchain",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "email-checker",
"name": "Email-Checker",
"description": "Email validation tool",
"category": "email-phone",
"url": "https://email-checker.net/",
"install": {
"method": "web",
"kali": "",
"raw": "[email-checker.net](https://email-checker.net/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "emailanalyzer",
"name": "EmailAnalyzer",
"description": "Analyze suspicious .eml files",
"category": "email-phone",
"url": "https://github.com/keraattin/EmailAnalyzer",
"install": {
"method": "git",
"kali": "`git clone https://github.com/keraattin/EmailAnalyzer`",
"raw": "`git clone https://github.com/keraattin/EmailAnalyzer`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "emailheader-analyzer",
"name": "EmailHeader-Analyzer",
"description": "CLI email header parser + OSINT",
"category": "email-phone",
"url": "https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`",
"raw": "`git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "emailrep",
"name": "EmailRep",
"description": "Email address reputation and risk scoring",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "EmailRep",
"raw": "EmailRep"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"EmailRep"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "emailrep-io",
"name": "EmailRep.io",
"description": "Free email reputation API by Sublime Security",
"category": "email-phone",
"url": "https://emailrep.io",
"install": {
"method": "web",
"kali": "",
"raw": "[emailrep.io](https://emailrep.io)"
},
"tags": [
"email-phone",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "empire",
"name": "PowerShell Empire",
"description": "Post-exploitation framework with PS-based agents",
"category": "red-team-offensive",
"url": "https://github.com/BC-SECURITY/Empire",
"install": {
"method": "git",
"kali": "git clone https://github.com/BC-SECURITY/Empire.git",
"raw": "`git clone https://github.com/BC-SECURITY/Empire.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "epieos",
"name": "Epieos",
"description": "Get info linked to any email address",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "Epieos",
"raw": "Epieos"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Epieos"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "epieos-tools",
"name": "Epieos Tools",
"description": "Reverse-lookup email/phone for Google profile data",
"category": "people-identity",
"url": "https://tools.epieos.com",
"install": {
"method": "web",
"kali": "",
"raw": "[tools.epieos.com](https://tools.epieos.com)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "epstein-exposed",
"name": "Epstein Exposed",
"description": "Searchable database of 2M+ DOJ Epstein case docs and network graphs",
"category": "document-metadata",
"url": "https://epsteinexposed.com",
"install": {
"method": "web",
"kali": "",
"raw": "[epsteinexposed.com](https://epsteinexposed.com)"
},
"tags": [
"document-metadata",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "eric-zimmerman-tools",
"name": "Eric Zimmerman's Tools",
"description": "Suite of free Windows DFIR utilities",
"category": "digital-forensics",
"url": "https://ericzimmerman.github.io",
"install": {
"method": "web",
"kali": "",
"raw": "[ericzimmerman.github.io](https://ericzimmerman.github.io)"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "etda-apt",
"name": "ETDA APT Groups",
"description": "Search threat-actor groups and their tools",
"category": "malware-threat-intel",
"url": "https://apt.etda.or.th/cgi-bin/listgroups.cgi",
"install": {
"method": "web",
"kali": "",
"raw": "[apt.etda.or.th](https://apt.etda.or.th/cgi-bin/listgroups.cgi)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "etherscan",
"name": "Etherscan",
"description": "Ethereum blockchain explorer",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "Etherscan",
"raw": "Etherscan"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Etherscan"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "etherscan-cli",
"name": "etherscan-py",
"description": "Python wrapper for Etherscan API",
"category": "crypto-blockchain",
"url": "https://github.com/pcko1/etherscan-python",
"install": {
"method": "pip",
"kali": "pip3 install etherscan-python",
"raw": "`pip3 install etherscan-python`"
},
"tags": [
"crypto-blockchain",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ettercap",
"name": "Ettercap",
"description": "MITM attack suite",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install ettercap-common`",
"raw": "`apt install ettercap-common`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "evil-winrm",
"name": "Evil-WinRM",
"description": "Ultimate WinRM shell for hacking/pentesting",
"category": "red-team-offensive",
"url": "https://github.com/Hackplayers/evil-winrm",
"install": {
"method": "apt",
"kali": "apt install evil-winrm",
"raw": "`apt install evil-winrm`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "evilginx2",
"name": "Evilginx2",
"description": "Man-in-the-middle reverse proxy",
"category": "people-identity",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/kgretzky/evilginx2@latest`",
"raw": "`go install github.com/kgretzky/evilginx2@latest`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "exiftool",
"name": "ExifTool",
"description": "Complete metadata extraction from images/docs",
"category": "image-facial",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install libimage-exiftool-perl`",
"raw": "`apt install libimage-exiftool-perl`"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"ExifTool"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "exploitdb",
"name": "ExploitDB",
"description": "Exploit database (searchsploit)",
"category": "domain-ip-network",
"url": "https://www.exploit-db.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[exploit-db.com](https://www.exploit-db.com/)"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "exportdata",
"name": "ExportData",
"description": "Historical tweet, follower, and trend export tool",
"category": "username-social",
"url": "https://www.exportdata.io",
"install": {
"method": "web",
"kali": "",
"raw": "[www.exportdata.io](https://www.exportdata.io)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "eyewitness",
"name": "EyeWitness",
"description": "Take screenshots of web pages",
"category": "misc",
"url": "https://github.com/RedSiege/EyeWitness",
"install": {
"method": "git",
"kali": "`git clone https://github.com/RedSiege/EyeWitness`",
"raw": "`git clone https://github.com/RedSiege/EyeWitness`"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"EyeWitness"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "f4map",
"name": "F4map",
"description": "3D interactive world map",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "F4map",
"raw": "F4map"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"F4map"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "facecheck.id",
"name": "FaceCheck.ID",
"description": "Face recognition search engine",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "FaceCheck.ID",
"raw": "FaceCheck.ID"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FaceCheck.ID"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "facerecognition",
"name": "facerecognition",
"description": "Python face recognition library",
"category": "image-facial",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install face_recognition`",
"raw": "`pip install face_recognition`"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"face_recognition",
"facerecognition"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "faceseek",
"name": "FaceSeek",
"description": "AI-powered reverse face search",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "FaceSeek",
"raw": "FaceSeek"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FaceSeek"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "fake-image-detector",
"name": "Fake Image Detector",
"description": "AI-based fake image detection",
"category": "image-facial",
"url": "https://www.fakeimagedetector.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[fakeimagedetector.com](https://www.fakeimagedetector.com/)"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "falco",
"name": "Falco",
"description": "Cloud-native runtime security",
"category": "blue-team-defensive",
"url": "https://falco.org",
"install": {
"method": "git",
"kali": "git clone https://github.com/falcosecurity/falco.git",
"raw": "`git clone https://github.com/falcosecurity/falco.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "familytreenow",
"name": "FamilyTreeNow",
"description": "Free genealogy search — addresses, phones, emails",
"category": "people-identity",
"url": "https://familytreenow.com",
"install": {
"method": "web",
"kali": "",
"raw": "[familytreenow.com](https://familytreenow.com)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "fastpeoplesearch",
"name": "FastPeopleSearch",
"description": "Free people finder",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "FastPeopleSearch",
"raw": "FastPeopleSearch"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FastPeopleSearch"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "faxvin",
"name": "FAXVIN",
"description": "Free VIN decoder and vehicle history",
"category": "vehicle-aviation-maritime",
"url": "",
"install": {
"method": "manual",
"kali": "FAXVIN",
"raw": "FAXVIN"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FAXVIN"
],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "fern-wifi-cracker",
"name": "Fern Wifi Cracker",
"description": "GUI-based Wi-Fi audit tool",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install fern-wifi-cracker`",
"raw": "`apt install fern-wifi-cracker`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "feroxbuster",
"name": "Feroxbuster",
"description": "Fast recursive content discovery",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install feroxbuster`",
"raw": "`apt install feroxbuster`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "ffuf",
"name": "ffuf",
"description": "Fast Go-based web fuzzer — directory, parameter, vhost discovery",
"category": "domain-ip-network",
"url": "https://github.com/ffuf/ffuf",
"install": {
"method": "go",
"kali": "go install github.com/ffuf/ffuf/v2@latest",
"raw": "`go install github.com/ffuf/ffuf/v2@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "filesec",
"name": "Filesec.io",
"description": "Catalog of malicious file extensions, risks, OS-level mitigations",
"category": "malware-threat-intel",
"url": "https://filesec.io",
"install": {
"method": "web",
"kali": "",
"raw": "[filesec.io](https://filesec.io)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "finalrecon",
"name": "FinalRecon",
"description": "The last web recon tool you'll need",
"category": "frameworks",
"url": "https://github.com/thewhiteh4t/FinalRecon",
"install": {
"method": "git",
"kali": "`git clone https://github.com/thewhiteh4t/FinalRecon`",
"raw": "`git clone https://github.com/thewhiteh4t/FinalRecon`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"FinalRecon"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "findomain",
"name": "Findomain",
"description": "Cross-platform subdomain enumerator with monitoring features",
"category": "domain-ip-network",
"url": "https://github.com/Findomain/Findomain",
"install": {
"method": "git",
"kali": "git clone https://github.com/Findomain/Findomain.git",
"raw": "`git clone https://github.com/Findomain/Findomain.git`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "firmadyne",
"name": "Firmadyne",
"description": "Automated and scalable system for firmware emulation",
"category": "hardware-hacking",
"url": "https://github.com/firmadyne/firmadyne",
"install": {
"method": "git",
"kali": "git clone https://github.com/firmadyne/firmadyne.git",
"raw": "`git clone https://github.com/firmadyne/firmadyne.git`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "firms",
"name": "FIRMS",
"description": "NASA fire/thermal hotspots",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "FIRMS",
"raw": "FIRMS"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FIRMS"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "firmwalker",
"name": "firmwalker",
"description": "Script for searching extracted firmware filesystems",
"category": "hardware-hacking",
"url": "https://github.com/craigz28/firmwalker",
"install": {
"method": "git",
"kali": "git clone https://github.com/craigz28/firmwalker.git",
"raw": "`git clone https://github.com/craigz28/firmwalker.git`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "flashpoint",
"name": "Flashpoint",
"description": "Business risk intel from criminal forums and dark web",
"category": "threat-intel-platforms",
"url": "https://flashpoint.io",
"install": {
"method": "web",
"kali": "",
"raw": "[flashpoint.io](https://flashpoint.io)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "flashrom",
"name": "flashrom",
"description": "Tool for identifying/reading/writing flash chips",
"category": "hardware-hacking",
"url": "https://www.flashrom.org",
"install": {
"method": "apt",
"kali": "apt install flashrom",
"raw": "`apt install flashrom`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "flickr-search",
"name": "Flickr",
"description": "Photo-sharing — geosearch + license + camera EXIF intact",
"category": "image-facial",
"url": "https://www.flickr.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.flickr.com](https://www.flickr.com)"
},
"tags": [
"image-facial",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "flightaware",
"name": "FlightAware",
"description": "Flight tracking and data platform",
"category": "vehicle-aviation-maritime",
"url": "",
"install": {
"method": "manual",
"kali": "FlightAware",
"raw": "FlightAware"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v2"
],
"aliases": [
"FlightAware"
],
"sections_seen": [
"Vehicle, Aviation & Maritime"
],
"archived": false
},
{
"id": "flightradar24",
"name": "FlightRadar24",
"description": "Real-time flight tracking",
"category": "vehicle-aviation-maritime",
"url": "",
"install": {
"method": "manual",
"kali": "FlightRadar24",
"raw": "FlightRadar24"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v2"
],
"aliases": [
"FlightRadar24"
],
"sections_seen": [
"Vehicle, Aviation & Maritime"
],
"archived": false
},
{
"id": "flipper-zero",
"name": "Flipper Zero",
"description": "Multi-tool for pentesters and geeks — RF/RFID/NFC/IR/GPIO",
"category": "hardware-hacking",
"url": "https://flipperzero.one",
"install": {
"method": "web",
"kali": "",
"raw": "[flipperzero.one](https://flipperzero.one)"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "fluxion",
"name": "Fluxion",
"description": "Wi-Fi social engineering (evil twin)",
"category": "domain-ip-network",
"url": "https://github.com/FluxionNetwork/fluxion",
"install": {
"method": "git",
"kali": "`git clone https://github.com/FluxionNetwork/fluxion`",
"raw": "`git clone https://github.com/FluxionNetwork/fluxion`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "foca",
"name": "FOCA",
"description": "Metadata extraction from documents",
"category": "image-facial",
"url": "https://github.com/ElevenPaths/FOCA",
"install": {
"method": "git",
"kali": "`git clone https://github.com/ElevenPaths/FOCA`",
"raw": "`git clone https://github.com/ElevenPaths/FOCA`"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FOCA"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "fofa",
"name": "FOFA",
"description": "Asset search and analysis tool",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "FOFA",
"raw": "FOFA"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"FOFA"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "foia.gov",
"name": "FOIA.gov",
"description": "Freedom of Information Act portal",
"category": "vehicle-aviation-maritime",
"url": "https://foia.gov/",
"install": {
"method": "web",
"kali": "",
"raw": "[foia.gov](https://foia.gov/)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "foller-me",
"name": "Foller.me",
"description": "Twitter analytics — bio, languages, hashtags, mentions",
"category": "username-social",
"url": "https://foller.me",
"install": {
"method": "web",
"kali": "",
"raw": "[foller.me](https://foller.me)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "foremost",
"name": "Foremost",
"description": "File carving (recover deleted files)",
"category": "document-metadata",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install foremost`",
"raw": "`apt install foremost`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Foremost"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "forensically",
"name": "Forensically",
"description": "Online image forensics suite",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Forensically",
"raw": "Forensically"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Forensically"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "forensicallybeta",
"name": "Forensically Beta",
"description": "Online image forensics — clone detection, level sweep",
"category": "image-facial",
"url": "https://29a.ch/photo-forensics",
"install": {
"method": "web",
"kali": "",
"raw": "[29a.ch](https://29a.ch/photo-forensics)"
},
"tags": [
"image-facial",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "fotoforensics",
"name": "FotoForensics",
"description": "Image forensic analysis (ELA)",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "FotoForensics",
"raw": "FotoForensics"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"FotoForensics"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "frida",
"name": "Frida",
"description": "Dynamic instrumentation toolkit",
"category": "iot-devices",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install frida-tools`",
"raw": "`pip install frida-tools`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "fsociety",
"name": "fsociety",
"description": "Mr. Robot-inspired hacking framework",
"category": "frameworks",
"url": "https://github.com/Manisso/fsociety",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Manisso/fsociety`",
"raw": "`git clone https://github.com/Manisso/fsociety`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"fsociety"
],
"sections_seen": [
"Termux Hacking Toolkit (Complete)"
],
"archived": false
},
{
"id": "ftk-imager",
"name": "FTK Imager",
"description": "Forensic disk imaging tool by AccessData",
"category": "digital-forensics",
"url": "https://www.exterro.com/ftk-imager",
"install": {
"method": "web",
"kali": "",
"raw": "[www.exterro.com](https://www.exterro.com/ftk-imager)"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "fullcontact",
"name": "FullContact",
"description": "Identity-resolution API and person enrichment",
"category": "people-identity",
"url": "https://www.fullcontact.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.fullcontact.com](https://www.fullcontact.com)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "fullhunt",
"name": "FullHunt",
"description": "External attack surface management",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "FullHunt",
"raw": "FullHunt"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"FullHunt"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "gau",
"name": "gau (getallurls)",
"description": "Fetch URLs from AlienVault OTX, Wayback, Common Crawl, URLScan",
"category": "domain-ip-network",
"url": "https://github.com/lc/gau",
"install": {
"method": "go",
"kali": "go install github.com/lc/gau/v2/cmd/gau@latest",
"raw": "`go install github.com/lc/gau/v2/cmd/gau@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "geocreepy",
"name": "Geocreepy",
"description": "Geolocation aggregator — pulls geotagged posts across networks",
"category": "geolocation",
"url": "http://www.geocreepy.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.geocreepy.com](http://www.geocreepy.com)"
},
"tags": [
"geolocation",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "geoguessr",
"name": "GeoGuessr",
"description": "Geolocation training game",
"category": "geolocation",
"url": "https://geoguessr.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[geoguessr.com](https://geoguessr.com/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "geohints",
"name": "GeoHints",
"description": "Browser-based satellite/streetview geolocation training & investigation",
"category": "geolocation",
"url": "https://geohints.com",
"install": {
"method": "web",
"kali": "",
"raw": "[geohints.com](https://geohints.com)"
},
"tags": [
"geolocation",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "geospy",
"name": "GeoSpy",
"description": "AI-powered image geolocation",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "GeoSpy",
"raw": "GeoSpy"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"GeoSpy"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "geospy-pro",
"name": "GeoSpy Pro",
"description": "Premium AI image geolocation by Graylark",
"category": "geolocation",
"url": "https://geospy.ai/pro",
"install": {
"method": "web",
"kali": "",
"raw": "[geospy.ai](https://geospy.ai/pro)"
},
"tags": [
"geolocation",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "get-metadata",
"name": "Get-Metadata.com",
"description": "Online EXIF extractor — handles .DOCX/.PDF too",
"category": "document-metadata",
"url": "https://www.get-metadata.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.get-metadata.com](https://www.get-metadata.com)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "getcontact",
"name": "GetContact",
"description": "See how number is saved by others",
"category": "email-phone",
"url": "https://getcontact.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[getcontact.com](https://getcontact.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "getnotify",
"name": "GetNotify",
"description": "Email open tracking + geolocation",
"category": "email-phone",
"url": "https://getnotify.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[getnotify.com](https://getnotify.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [
"GetNotify"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "gf-tomnomnom",
"name": "gf",
"description": "Wrapper around grep with patterns for bug-bounty workflow",
"category": "domain-ip-network",
"url": "https://github.com/tomnomnom/gf",
"install": {
"method": "go",
"kali": "go install github.com/tomnomnom/gf@latest",
"raw": "`go install github.com/tomnomnom/gf@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ghauri",
"name": "Ghauri",
"description": "Advanced cross-platform tool to detect/exploit SQLi",
"category": "red-team-offensive",
"url": "https://github.com/r0oth3x49/ghauri",
"install": {
"method": "git",
"kali": "git clone https://github.com/r0oth3x49/ghauri.git",
"raw": "`git clone https://github.com/r0oth3x49/ghauri.git`"
},
"tags": [
"red-team-offensive",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ghdb",
"name": "Google Hacking Database (GHDB)",
"description": "Index of dorks for finding publicly exposed info",
"category": "search-dorking",
"url": "https://www.exploit-db.com/google-hacking-database",
"install": {
"method": "web",
"kali": "",
"raw": "[www.exploit-db.com](https://www.exploit-db.com/google-hacking-database)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ghidra",
"name": "Ghidra",
"description": "NSA's open-source software reverse engineering suite",
"category": "digital-forensics",
"url": "https://ghidra-sre.org",
"install": {
"method": "git",
"kali": "git clone https://github.com/NationalSecurityAgency/ghidra.git",
"raw": "`git clone https://github.com/NationalSecurityAgency/ghidra.git`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ghiro",
"name": "Ghiro",
"description": "Automated digital image forensics",
"category": "image-facial",
"url": "https://www.getghiro.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.getghiro.org](https://www.getghiro.org)"
},
"tags": [
"image-facial",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ghunt",
"name": "GHunt",
"description": "Investigate Google emails and documents",
"category": "email-phone",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install ghunt`",
"raw": "`pip3 install ghunt`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v2"
],
"aliases": [
"GHunt"
],
"sections_seen": [
"Email & Phone Intelligence"
],
"archived": false
},
{
"id": "githound",
"name": "git-hound",
"description": "Find sensitive data exposed via GitHub code search",
"category": "document-metadata",
"url": "https://github.com/tillson/git-hound",
"install": {
"method": "go",
"kali": "go install github.com/tillson/git-hound@latest",
"raw": "`go install github.com/tillson/git-hound@latest`"
},
"tags": [
"document-metadata",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "github_monitor",
"name": "github_monitor",
"description": "Real-time tracking of GitHub user activity and repo changes",
"category": "username-social",
"url": "https://github.com/misiektoja/github_monitor",
"install": {
"method": "git",
"kali": "git clone https://github.com/misiektoja/github_monitor.git",
"raw": "`git clone https://github.com/misiektoja/github_monitor.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "gitleaks",
"name": "gitleaks",
"description": "Detect secrets, credentials, and API keys in git repos",
"category": "document-metadata",
"url": "https://github.com/gitleaks/gitleaks",
"install": {
"method": "go",
"kali": "go install github.com/gitleaks/gitleaks/v8@latest",
"raw": "`go install github.com/gitleaks/gitleaks/v8@latest`"
},
"tags": [
"document-metadata",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "gitrecon",
"name": "Gitrecon",
"description": "GitHub OSINT reconnaissance",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install gitrecon`",
"raw": "`pip install gitrecon`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Gitrecon"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "gnu-radio",
"name": "GNU Radio",
"description": "Toolkit for building software-defined radio systems",
"category": "hardware-hacking",
"url": "https://www.gnuradio.org",
"install": {
"method": "apt",
"kali": "apt install gnuradio",
"raw": "`apt install gnuradio`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "gobuster",
"name": "Gobuster",
"description": "URI/DNS brute-forcer (Go)",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/OJ/gobuster/v3@latest`",
"raw": "`go install github.com/OJ/gobuster/v3@latest`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "goldeneye",
"name": "GoldenEye",
"description": "HTTP DoS tool (authorized load testing)",
"category": "domain-ip-network",
"url": "https://github.com/jseidl/GoldenEye",
"install": {
"method": "git",
"kali": "`git clone https://github.com/jseidl/GoldenEye`",
"raw": "`git clone https://github.com/jseidl/GoldenEye`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "goofuzz",
"name": "GooFuzz",
"description": "Google dorking fuzzer",
"category": "search-dorking",
"url": "https://github.com/m3n0sd0n4ld/GooFuzz",
"install": {
"method": "git",
"kali": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`",
"raw": "`git clone https://github.com/m3n0sd0n4ld/GooFuzz`"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"GooFuzz"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "google-alerts",
"name": "Google Alerts",
"description": "Free web monitoring",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Searcher Platforms"
],
"archived": false
},
{
"id": "google-earth-pro",
"name": "Google Earth Pro",
"description": "Advanced satellite imagery",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "Google Earth Pro",
"raw": "Google Earth Pro"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Google Earth Pro"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "google-gemini",
"name": "Google Gemini",
"description": "Google AI with web search",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "google-hacking-db",
"name": "Google Hacking DB",
"description": "Exploit-DB Google dork database",
"category": "search-dorking",
"url": "",
"install": {
"method": "manual",
"kali": "Google Hacking DB",
"raw": "Google Hacking DB"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"Google Hacking DB"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "google-reverse-image",
"name": "Google Reverse Image",
"description": "Google image search",
"category": "image-facial",
"url": "https://images.google.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[images.google.com](https://images.google.com/)"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "googleguide",
"name": "Google Guide Advanced Operators",
"description": "Reference for Google search operators",
"category": "search-dorking",
"url": "http://www.googleguide.com/advanced_operators_reference.html",
"install": {
"method": "web",
"kali": "",
"raw": "[www.googleguide.com](http://www.googleguide.com/advanced_operators_reference.html)"
},
"tags": [
"search-dorking",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "gophish",
"name": "Gophish",
"description": "Enterprise phishing simulation platform",
"category": "people-identity",
"url": "https://getgophish.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[getgophish.com](https://getgophish.com/)"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "gosearch",
"name": "GoSearch",
"description": "Fast username search tool in Go",
"category": "username-social",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/ibnaleem/gosearch@latest`",
"raw": "`go install github.com/ibnaleem/gosearch@latest`"
},
"tags": [
"username-social"
],
"source_versions": [
"v2"
],
"aliases": [
"GoSearch"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "gospider",
"name": "GoSpider",
"description": "Fast Go web spider for crawling/audit",
"category": "domain-ip-network",
"url": "https://github.com/jaeles-project/gospider",
"install": {
"method": "go",
"kali": "go install github.com/jaeles-project/gospider@latest",
"raw": "`go install github.com/jaeles-project/gospider@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "gowitness",
"name": "gowitness",
"description": "Modern Go-based web screenshot utility (Aquatone successor)",
"category": "domain-ip-network",
"url": "https://github.com/sensepost/gowitness",
"install": {
"method": "go",
"kali": "go install github.com/sensepost/gowitness@latest",
"raw": "`go install github.com/sensepost/gowitness@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "gqrx",
"name": "Gqrx SDR",
"description": "Software-defined radio receiver GUI",
"category": "hardware-hacking",
"url": "https://gqrx.dk",
"install": {
"method": "apt",
"kali": "apt install gqrx-sdr",
"raw": "`apt install gqrx-sdr`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "grabify",
"name": "Grabify",
"description": "IP grabber & URL shortener",
"category": "geolocation",
"url": "https://grabify.link/",
"install": {
"method": "web",
"kali": "",
"raw": "[grabify.link](https://grabify.link/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"IP Tracking & Geolocation Links"
],
"archived": false
},
{
"id": "grayhatwarfare",
"name": "GrayhatWarfare",
"description": "Index of open Amazon S3 buckets — find exposed cloud data",
"category": "domain-ip-network",
"url": "https://grayhatwarfare.com",
"install": {
"method": "web",
"kali": "",
"raw": "[grayhatwarfare.com](https://grayhatwarfare.com)"
},
"tags": [
"domain-ip-network",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "graylog",
"name": "Graylog",
"description": "Open-source log management / SIEM",
"category": "blue-team-defensive",
"url": "https://www.graylog.org",
"install": {
"method": "docker",
"kali": "docker pull graylog/graylog:latest",
"raw": "`docker pull graylog/graylog:latest`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "grep.app",
"name": "Grep.app",
"description": "Search code across all public GitHub repos",
"category": "search-dorking",
"url": "",
"install": {
"method": "manual",
"kali": "Grep.app",
"raw": "Grep.app"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"Grep.app"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "greynoise",
"name": "GreyNoise",
"description": "Search exposed internet assets and malicious IPs",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "GreyNoise",
"raw": "GreyNoise"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"GreyNoise"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "greynoise-cli",
"name": "GreyNoise CLI",
"description": "Command-line tool for GreyNoise mass-scanner intel",
"category": "iot-devices",
"url": "https://github.com/GreyNoise-Intelligence/pygreynoise",
"install": {
"method": "pip",
"kali": "pip3 install greynoise",
"raw": "`pip3 install greynoise`"
},
"tags": [
"iot-devices",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "greynoise-viz",
"name": "GreyNoise Visualizer",
"description": "Tells you which IPs are noise vs targeted threats",
"category": "iot-devices",
"url": "https://viz.greynoise.io",
"install": {
"method": "web",
"kali": "",
"raw": "[viz.greynoise.io](https://viz.greynoise.io)"
},
"tags": [
"iot-devices",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "grok",
"name": "Grok",
"description": "Real-time X/Twitter data",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free on X",
"raw": "✅ Free on X"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "gxss-tomnomnom",
"name": "Gxss",
"description": "Test parameters for cross-site scripting reflection",
"category": "red-team-offensive",
"url": "https://github.com/KathanP19/Gxss",
"install": {
"method": "go",
"kali": "go install github.com/KathanP19/Gxss@latest",
"raw": "`go install github.com/KathanP19/Gxss@latest`"
},
"tags": [
"red-team-offensive",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "h8mail",
"name": "h8mail",
"description": "Email OSINT & breach hunting",
"category": "email-phone",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install h8mail`",
"raw": "`pip install h8mail`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"h8mail"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "hacker101",
"name": "Hacker101",
"description": "Free HackerOne course library and CTF",
"category": "training-ctf",
"url": "https://www.hacker101.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.hacker101.com](https://www.hacker101.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hackerone",
"name": "HackerOne",
"description": "Largest bug-bounty platform — public and private programs",
"category": "bug-bounty",
"url": "https://hackerone.com",
"install": {
"method": "web",
"kali": "",
"raw": "[hackerone.com](https://hackerone.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hacking-art-of-exploitation",
"name": "Hacking: The Art of Exploitation (book)",
"description": "Classic by Jon Erickson — low-level attack fundamentals",
"category": "learning-resources",
"url": "https://nostarch.com/hacking2.htm",
"install": {
"method": "web",
"kali": "",
"raw": "[nostarch.com](https://nostarch.com/hacking2.htm)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hackingtool",
"name": "Hackingtool",
"description": "All-in-one hacking tool (100+ categories)",
"category": "frameworks",
"url": "https://github.com/Z4nzu/hackingtool",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Z4nzu/hackingtool`",
"raw": "`git clone https://github.com/Z4nzu/hackingtool`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"Hackingtool"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "hackrf",
"name": "HackRF One",
"description": "SDR transceiver covering 1 MHz to 6 GHz",
"category": "hardware-hacking",
"url": "https://greatscottgadgets.com/hackrf/",
"install": {
"method": "apt",
"kali": "apt install hackrf",
"raw": "`apt install hackrf`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hackthebox",
"name": "Hack The Box",
"description": "Online pentesting labs and CTFs",
"category": "training-ctf",
"url": "https://www.hackthebox.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.hackthebox.com](https://www.hackthebox.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hacktricks",
"name": "HackTricks",
"description": "Pentesting / hacking knowledge base by carlospolop",
"category": "red-team-offensive",
"url": "https://book.hacktricks.xyz",
"install": {
"method": "web",
"kali": "",
"raw": "[book.hacktricks.xyz](https://book.hacktricks.xyz)"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hacktrophy",
"name": "HackTrophy",
"description": "European bug-bounty platform",
"category": "bug-bounty",
"url": "https://hacktrophy.com",
"install": {
"method": "web",
"kali": "",
"raw": "[hacktrophy.com](https://hacktrophy.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hak5-tools",
"name": "Hak5 Tools (Bash Bunny, Rubber Ducky, Wi-Fi Pineapple)",
"description": "Premium offensive hardware tools",
"category": "hardware-hacking",
"url": "https://shop.hak5.org",
"install": {
"method": "web",
"kali": "",
"raw": "[shop.hak5.org](https://shop.hak5.org)"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hakrawler",
"name": "hakrawler",
"description": "Fast Go web crawler for endpoint and asset discovery",
"category": "domain-ip-network",
"url": "https://github.com/hakluke/hakrawler",
"install": {
"method": "go",
"kali": "go install github.com/hakluke/hakrawler@latest",
"raw": "`go install github.com/hakluke/hakrawler@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "harpa-ai",
"name": "HARPA AI",
"description": "AI browser agent for OSINT",
"category": "misc",
"url": "https://harpa.ai/",
"install": {
"method": "web",
"kali": "",
"raw": "[harpa.ai](https://harpa.ai/)"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "harpoon",
"name": "Harpoon",
"description": "CLI tool for OSINT investigations",
"category": "frameworks",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install harpoon`",
"raw": "`pip3 install harpoon`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"Harpoon"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "hashcat",
"name": "Hashcat",
"description": "Advanced password recovery (GPU-accelerated)",
"category": "data-breach",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install hashcat`",
"raw": "`apt install hashcat`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [
"Hashcat"
],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "hashlookup-circl",
"name": "CIRCL Hashlookup",
"description": "Free public hashlookup for known software files",
"category": "malware-threat-intel",
"url": "https://www.circl.lu/services/hashlookup",
"install": {
"method": "web",
"kali": "",
"raw": "[www.circl.lu](https://www.circl.lu/services/hashlookup)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "have-i-been-pwned",
"name": "Have I Been Pwned",
"description": "Check email/phone in breaches",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟢 Free",
"raw": "🟢 Free"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Have I Been Pwned"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "haveibeenransom",
"name": "HIB Ransomed",
"description": "Check if your data has been leaked by ransomware groups",
"category": "data-breach",
"url": "https://haveibeenransom.com",
"install": {
"method": "web",
"kali": "",
"raw": "[haveibeenransom.com](https://haveibeenransom.com)"
},
"tags": [
"data-breach",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "haveibeenzuckered",
"name": "haveibeenzuckered",
"description": "Check if a phone number is in the 533M Facebook breach",
"category": "data-breach",
"url": "https://haveibeenzuckered.com",
"install": {
"method": "web",
"kali": "",
"raw": "[haveibeenzuckered.com](https://haveibeenzuckered.com)"
},
"tags": [
"data-breach",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "havoc",
"name": "Havoc",
"description": "Modern, malleable post-exploitation C2 framework",
"category": "red-team-offensive",
"url": "https://github.com/HavocFramework/Havoc",
"install": {
"method": "git",
"kali": "git clone https://github.com/HavocFramework/Havoc.git",
"raw": "`git clone https://github.com/HavocFramework/Havoc.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hayabusa",
"name": "Hayabusa",
"description": "Windows event log fast forensics timeline generator",
"category": "blue-team-defensive",
"url": "https://github.com/Yamato-Security/hayabusa",
"install": {
"method": "git",
"kali": "git clone https://github.com/Yamato-Security/hayabusa.git",
"raw": "`git clone https://github.com/Yamato-Security/hayabusa.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "haystak",
"name": "Haystak",
"description": "Dark web search with filtering",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`",
"raw": "`haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Haystak"
],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "hcxtools",
"name": "hcxtools",
"description": "Wi-Fi packet capture conversion",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install hcxtools`",
"raw": "`apt install hcxtools`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "hidden-wiki",
"name": "The Hidden Wiki",
"description": "Curated directory of dark-web sites (mirror-dependent)",
"category": "dark-web",
"url": "https://thehiddenwiki.org",
"install": {
"method": "web",
"kali": "",
"raw": "[thehiddenwiki.org](https://thehiddenwiki.org)"
},
"tags": [
"dark-web",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hive-moderation",
"name": "Hive Moderation",
"description": "AI content detection",
"category": "image-facial",
"url": "https://hivemoderation.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[hivemoderation.com](https://hivemoderation.com/)"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "hlr-lookups",
"name": "Hlr-Lookups",
"description": "HLR phone number lookup",
"category": "email-phone",
"url": "https://www.hlr-lookups.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[hlr-lookups.com](https://www.hlr-lookups.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "holehe",
"name": "Holehe",
"description": "Check if email is registered on 120+ sites",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install holehe`",
"raw": "`pip install holehe`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Holehe"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "hootsuite",
"name": "Hootsuite",
"description": "Social media management",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Searcher Platforms"
],
"archived": false
},
{
"id": "httprobe",
"name": "httprobe",
"description": "Take a list of domains and probe for working HTTP/HTTPS",
"category": "domain-ip-network",
"url": "https://github.com/tomnomnom/httprobe",
"install": {
"method": "go",
"kali": "go install github.com/tomnomnom/httprobe@latest",
"raw": "`go install github.com/tomnomnom/httprobe@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "httpx",
"name": "HTTPx",
"description": "Fast HTTP toolkit / probing",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`",
"raw": "`go install github.com/projectdiscovery/httpx/cmd/httpx@latest`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"HTTPx"
],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "hudson-rock",
"name": "Hudson Rock",
"description": "Free infostealer-compromise check tools (domain/email/IP)",
"category": "people-identity",
"url": "https://www.hudsonrock.com/free-tools",
"install": {
"method": "web",
"kali": "",
"raw": "[www.hudsonrock.com](https://www.hudsonrock.com/free-tools)"
},
"tags": [
"people-identity",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hudson-rock-cavalier",
"name": "Hudson Rock Cavalier",
"description": "Infostealer intelligence & breach data",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Hudson Rock Cavalier"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "huggingchat",
"name": "HuggingChat",
"description": "Open-source AI chat",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "hunter.how",
"name": "Hunter.how",
"description": "Internet asset search and discovery",
"category": "iot-devices",
"url": "",
"install": {
"method": "manual",
"kali": "Hunter.how",
"raw": "Hunter.how"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v2"
],
"aliases": [
"Hunter.how"
],
"sections_seen": [
"IoT & Device Intelligence"
],
"archived": false
},
{
"id": "hunter.io",
"name": "Hunter.io",
"description": "Find professional email addresses by domain",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "Hunter.io",
"raw": "Hunter.io"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Hunter.io"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "hybrid-analysis",
"name": "Hybrid Analysis",
"description": "Free advanced malware analysis service by CrowdStrike",
"category": "malware-threat-intel",
"url": "https://www.hybrid-analysis.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.hybrid-analysis.com](https://www.hybrid-analysis.com)"
},
"tags": [
"malware-threat-intel",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "hydra",
"name": "Hydra",
"description": "Network login brute-forcer",
"category": "data-breach",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install hydra`",
"raw": "`apt install hydra`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [
"Hydra"
],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "icij-offshore-leaks",
"name": "ICIJ Offshore Leaks",
"description": "Panama/Pandora/Paradise Papers",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "ICIJ Offshore Leaks",
"raw": "ICIJ Offshore Leaks"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"ICIJ Offshore Leaks"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "ida-free",
"name": "IDA Free",
"description": "Free version of IDA disassembler/decompiler",
"category": "digital-forensics",
"url": "https://hex-rays.com/ida-free/",
"install": {
"method": "web",
"kali": "",
"raw": "[hex-rays.com](https://hex-rays.com/ida-free/)"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "idcrawl",
"name": "IDCrawl",
"description": "Free people search engine",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "IDCrawl",
"raw": "IDCrawl"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"IDCrawl"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "ignorant",
"name": "Ignorant",
"description": "Check phone registrations on sites",
"category": "email-phone",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install ignorant`",
"raw": "`pip install ignorant`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Ignorant"
],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "ikyourdad",
"name": "IKnowYour.Dad",
"description": "Data breach search engine",
"category": "data-breach",
"url": "https://iknowyour.dad",
"install": {
"method": "web",
"kali": "",
"raw": "[iknowyour.dad](https://iknowyour.dad)"
},
"tags": [
"data-breach",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "illuminarty",
"name": "Illuminarty",
"description": "AI image detection",
"category": "image-facial",
"url": "https://illuminarty.ai/",
"install": {
"method": "web",
"kali": "",
"raw": "[illuminarty.ai](https://illuminarty.ai/)"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "imgur-search",
"name": "Imgur",
"description": "Image hosting — meme tracing and reverse search",
"category": "image-facial",
"url": "https://imgur.com",
"install": {
"method": "web",
"kali": "",
"raw": "[imgur.com](https://imgur.com)"
},
"tags": [
"image-facial",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "immersivelabs",
"name": "Immersive Labs",
"description": "Cyber skills platform with hands-on exercises",
"category": "training-ctf",
"url": "https://www.immersivelabs.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.immersivelabs.com](https://www.immersivelabs.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "immunefi",
"name": "Immunefi",
"description": "Web3 / crypto-focused bug bounty platform",
"category": "bug-bounty",
"url": "https://immunefi.com",
"install": {
"method": "web",
"kali": "",
"raw": "[immunefi.com](https://immunefi.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "impacket",
"name": "Impacket",
"description": "Python classes for working with network protocols (Windows attacks)",
"category": "red-team-offensive",
"url": "https://github.com/fortra/impacket",
"install": {
"method": "pip",
"kali": "pip3 install impacket",
"raw": "`pip3 install impacket`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "infoga",
"name": "Infoga",
"description": "Email OSINT gathering",
"category": "email-phone",
"url": "https://github.com/m4ll0k/Infoga",
"install": {
"method": "git",
"kali": "`git clone https://github.com/m4ll0k/Infoga`",
"raw": "`git clone https://github.com/m4ll0k/Infoga`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Infoga"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "insecam",
"name": "Insecam",
"description": "Live cameras directory",
"category": "iot-devices",
"url": "",
"install": {
"method": "manual",
"kali": "Insecam",
"raw": "Insecam"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v2"
],
"aliases": [
"Insecam"
],
"sections_seen": [
"IoT & Device Intelligence"
],
"archived": false
},
{
"id": "instagram_monitor",
"name": "instagram_monitor",
"description": "Real-time tracking of Instagram users with email alerts and CSV logs",
"category": "username-social",
"url": "https://github.com/misiektoja/instagram_monitor",
"install": {
"method": "git",
"kali": "git clone https://github.com/misiektoja/instagram_monitor.git",
"raw": "`git clone https://github.com/misiektoja/instagram_monitor.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "instaloader",
"name": "Instaloader",
"description": "Instagram data downloader",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install instaloader`",
"raw": "`pip install instaloader`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "instant-username-search",
"name": "Instant Username Search",
"description": "Real-time username availability checker",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "Instant Username Search",
"raw": "Instant Username Search"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Instant Username Search"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "intel-471",
"name": "Intel 471",
"description": "Cybercrime intelligence platform",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "manual",
"kali": "Intel 471",
"raw": "Intel 471"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"Intel 471"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "intel471",
"name": "Intel471",
"description": "Premium adversary intelligence and underground monitoring platform",
"category": "threat-intel-platforms",
"url": "https://intel471.com",
"install": {
"method": "web",
"kali": "",
"raw": "[intel471.com](https://intel471.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "intelligence-x",
"name": "Intelligence X",
"description": "Search breaches, darknet, leaks",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "💰 Paid",
"raw": "💰 Paid"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Intelligence X"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "intelx",
"name": "Intelligence X (intelx.io)",
"description": "Selective archive search — emails, leaks, paste sites, dark-web",
"category": "search-dorking",
"url": "https://intelx.io",
"install": {
"method": "web",
"kali": "",
"raw": "[intelx.io](https://intelx.io)"
},
"tags": [
"search-dorking",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "interlace",
"name": "Interlace",
"description": "Easily turn single-threaded CLI apps into multi-threaded jobs",
"category": "domain-ip-network",
"url": "https://github.com/codingo/Interlace",
"install": {
"method": "git",
"kali": "git clone https://github.com/codingo/Interlace.git",
"raw": "`git clone https://github.com/codingo/Interlace.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "intigriti",
"name": "Intigriti",
"description": "European bug-bounty platform with fast triage",
"category": "bug-bounty",
"url": "https://www.intigriti.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.intigriti.com](https://www.intigriti.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "intsights",
"name": "IntSights",
"description": "External threat protection and intel (now part of Rapid7)",
"category": "threat-intel-platforms",
"url": "https://intsights.com",
"install": {
"method": "web",
"kali": "",
"raw": "[intsights.com](https://intsights.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "investigo",
"name": "Investigo",
"description": "Username checker (Go-based)",
"category": "username-social",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/tdh8316/investigo@latest`",
"raw": "`go install github.com/tdh8316/investigo@latest`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Investigo"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "invid",
"name": "InVID",
"description": "Video verification toolkit (browser extension)",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "InVID",
"raw": "InVID"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"InVID"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "ip-api",
"name": "IP-API",
"description": "IP geolocation API",
"category": "geolocation",
"url": "http://ip-api.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[ip-api.com](http://ip-api.com/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"IP Tracking & Geolocation Links"
],
"archived": false
},
{
"id": "ipgeolocation",
"name": "IPGeoLocation",
"description": "IP address geolocation",
"category": "domain-ip-network",
"url": "https://github.com/maldevel/IPGeoLocation",
"install": {
"method": "git",
"kali": "`git clone https://github.com/maldevel/IPGeoLocation`",
"raw": "`git clone https://github.com/maldevel/IPGeoLocation`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"IPGeoLocation"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "ipinfo",
"name": "IPinfo",
"description": "IP address data & geolocation",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "IPinfo",
"raw": "IPinfo"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"IPinfo"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "iplogger",
"name": "IPLogger",
"description": "IP logging URL shortener",
"category": "geolocation",
"url": "https://iplogger.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[iplogger.org](https://iplogger.org/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"IP Tracking & Geolocation Links"
],
"archived": false
},
{
"id": "ippsec-rocks",
"name": "IppSec.rocks",
"description": "Indexed walkthroughs of HackTheBox machines (video)",
"category": "learning-resources",
"url": "https://ippsec.rocks",
"install": {
"method": "web",
"kali": "",
"raw": "[ippsec.rocks](https://ippsec.rocks)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ivpn",
"name": "IVPN",
"description": "Privacy-first VPN — open-source, audited, no email signup",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Website",
"raw": "Website"
},
"tags": [
"vpn-privacy",
"free-tier:Paid only — included for privacy excellence",
"open-source:✅",
"no-log:✅",
"protocols:WireGuard, OpenVPN"
],
"source_versions": [
"v2"
],
"aliases": [
"IVPN"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "jadx",
"name": "jadx",
"description": "Android APK decompiler (GUI)",
"category": "iot-devices",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install jadx`",
"raw": "`apt install jadx`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "joe-sandbox",
"name": "Joe Sandbox",
"description": "Deep automated malware analysis (free tier)",
"category": "malware-threat-intel",
"url": "https://www.joesandbox.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.joesandbox.com](https://www.joesandbox.com)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "john-hammond",
"name": "John Hammond",
"description": "Cybersecurity YouTube — CTFs, malware, walkthroughs",
"category": "learning-resources",
"url": "https://www.youtube.com/@_JohnHammond",
"install": {
"method": "web",
"kali": "",
"raw": "[www.youtube.com](https://www.youtube.com/@_JohnHammond)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "john-the-ripper",
"name": "John the Ripper",
"description": "Classic password cracker",
"category": "data-breach",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install john`",
"raw": "`apt install john`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [
"John the Ripper"
],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "jsfinder",
"name": "JSFinder",
"description": "Find JS files referenced from a URL — endpoints / API paths",
"category": "domain-ip-network",
"url": "https://github.com/Threezh1/JSFinder",
"install": {
"method": "git",
"kali": "git clone https://github.com/Threezh1/JSFinder.git",
"raw": "`git clone https://github.com/Threezh1/JSFinder.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "juice-shop",
"name": "OWASP Juice Shop",
"description": "Modern, intentionally insecure web app — covers OWASP Top 10",
"category": "training-ctf",
"url": "https://github.com/juice-shop/juice-shop",
"install": {
"method": "docker",
"kali": "docker pull bkimminich/juice-shop",
"raw": "`docker pull bkimminich/juice-shop`"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "kagi",
"name": "Kagi Search",
"description": "Premium privacy-respecting search engine, no ads, no tracking",
"category": "search-dorking",
"url": "https://kagi.com",
"install": {
"method": "web",
"kali": "",
"raw": "[kagi.com](https://kagi.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "kape",
"name": "KAPE",
"description": "Kroll Artifact Parser and Extractor — fast triage collection",
"category": "digital-forensics",
"url": "https://www.kroll.com/kape",
"install": {
"method": "web",
"kali": "",
"raw": "[www.kroll.com](https://www.kroll.com/kape)"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "kartaview",
"name": "KartaView",
"description": "Street-level imagery (OpenStreetCam)",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "KartaView",
"raw": "KartaView"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"KartaView"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "katana",
"name": "Katana",
"description": "Web crawler",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`",
"raw": "`go install github.com/projectdiscovery/katana/cmd/katana@latest`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "keepassxc",
"name": "KeePassXC",
"description": "Offline password manager",
"category": "vpn-privacy",
"url": "https://keepassxc.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[keepassxc.org](https://keepassxc.org/)"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "kela",
"name": "KELA",
"description": "Cybercrime intelligence and dark-web monitoring",
"category": "threat-intel-platforms",
"url": "https://kelacyber.com",
"install": {
"method": "web",
"kali": "",
"raw": "[kelacyber.com](https://kelacyber.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "kerbrute",
"name": "Kerbrute",
"description": "Tool for performing Kerberos pre-auth bruteforcing",
"category": "red-team-offensive",
"url": "https://github.com/ropnop/kerbrute",
"install": {
"method": "go",
"kali": "go install github.com/ropnop/kerbrute@latest",
"raw": "`go install github.com/ropnop/kerbrute@latest`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "king-phisher",
"name": "King Phisher",
"description": "Phishing campaign toolkit",
"category": "people-identity",
"url": "https://github.com/rsmusllp/king-phisher",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher)"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "kismet",
"name": "Kismet",
"description": "Wireless network detector & sniffer",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install kismet`",
"raw": "`apt install kismet`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "kiterunner",
"name": "kiterunner",
"description": "Contextual content-discovery for modern API endpoints",
"category": "red-team-offensive",
"url": "https://github.com/assetnote/kiterunner",
"install": {
"method": "go",
"kali": "go install github.com/assetnote/kiterunner/cmd/kr@latest",
"raw": "`go install github.com/assetnote/kiterunner/cmd/kr@latest`"
},
"tags": [
"red-team-offensive",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "knock",
"name": "knock",
"description": "Domain knock — security testing via DNS",
"category": "domain-ip-network",
"url": "https://github.com/guelfoweb/knock",
"install": {
"method": "git",
"kali": "git clone https://github.com/guelfoweb/knock.git",
"raw": "`git clone https://github.com/guelfoweb/knock.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "knockpy",
"name": "Knockpy",
"description": "Subdomain enumeration scan with virtual host discovery",
"category": "domain-ip-network",
"url": "https://github.com/guelfoweb/knock",
"install": {
"method": "pip",
"kali": "pip3 install knock-subdomains",
"raw": "`pip3 install knock-subdomains`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "knowem",
"name": "KnowEm",
"description": "Username search on 500+ sites",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "KnowEm",
"raw": "KnowEm"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"KnowEm"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "lantern",
"name": "Lantern",
"description": "Free censorship circumvention tool — peer-to-peer",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Website",
"raw": "Website"
},
"tags": [
"vpn-privacy",
"free-tier:500MB/month free",
"open-source:✅",
"no-log:⚠️",
"protocols:Proprietary"
],
"source_versions": [
"v2"
],
"aliases": [
"Lantern"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "lazagne",
"name": "LaZagne",
"description": "Credentials recovery tool (post-exploit)",
"category": "data-breach",
"url": "https://github.com/AlessandroZ/LaZagne",
"install": {
"method": "git",
"kali": "`git clone https://github.com/AlessandroZ/LaZagne`",
"raw": "`git clone https://github.com/AlessandroZ/LaZagne`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "leakcheck",
"name": "LeakCheck",
"description": "Email/username/phone breach search",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"LeakCheck"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "leakpeek",
"name": "LeakPeek",
"description": "Search leaked databases",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"LeakPeek"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "lei-search",
"name": "LEI Search",
"description": "Legal Entity Identifier lookup",
"category": "company-business",
"url": "https://search.gleif.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[search.gleif.org](https://search.gleif.org/)"
},
"tags": [
"company-business"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "lenso.ai",
"name": "Lenso.ai",
"description": "Reverse image search with facial recognition",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Lenso.ai",
"raw": "Lenso.ai"
},
"tags": [
"image-facial"
],
"source_versions": [
"v2"
],
"aliases": [
"Lenso.ai"
],
"sections_seen": [
"Image & Facial Recognition"
],
"archived": false
},
{
"id": "linkedin2username",
"name": "linkedin2username",
"description": "Generate usernames from a target's LinkedIn employees",
"category": "people-identity",
"url": "https://github.com/initstring/linkedin2username",
"install": {
"method": "git",
"kali": "git clone https://github.com/initstring/linkedin2username.git",
"raw": "`git clone https://github.com/initstring/linkedin2username.git`"
},
"tags": [
"people-identity",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "linkedindumper",
"name": "LinkedInDumper",
"description": "Dump/scrape company employees from LinkedIn API",
"category": "username-social",
"url": "https://github.com/l4rm4nd/LinkedInDumper",
"install": {
"method": "git",
"kali": "git clone https://github.com/l4rm4nd/LinkedInDumper.git",
"raw": "`git clone https://github.com/l4rm4nd/LinkedInDumper.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "linkfinder",
"name": "LinkFinder",
"description": "Discover endpoints in JavaScript",
"category": "domain-ip-network",
"url": "https://github.com/GerbenJavado/LinkFinder",
"install": {
"method": "git",
"kali": "`git clone https://github.com/GerbenJavado/LinkFinder`",
"raw": "`git clone https://github.com/GerbenJavado/LinkFinder`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "linux-for-osint-cipher387",
"name": "Linux for OSINT (cipher387)",
"description": "21-day Linux-for-OSINT course (free)",
"category": "learning-resources",
"url": "https://github.com/cipher387/linux-for-OSINT-21-days",
"install": {
"method": "git",
"kali": "git clone https://github.com/cipher387/linux-for-OSINT-21-days.git",
"raw": "`git clone https://github.com/cipher387/linux-for-OSINT-21-days.git`"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "liveoverflow",
"name": "LiveOverflow",
"description": "Hacking and security YouTube — deep technical content",
"category": "learning-resources",
"url": "https://www.youtube.com/@LiveOverflow",
"install": {
"method": "web",
"kali": "",
"raw": "[www.youtube.com](https://www.youtube.com/@LiveOverflow)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "loki-yara",
"name": "Loki",
"description": "Simple IOC and YARA scanner by Florian Roth",
"category": "blue-team-defensive",
"url": "https://github.com/Neo23x0/Loki",
"install": {
"method": "git",
"kali": "git clone https://github.com/Neo23x0/Loki.git",
"raw": "`git clone https://github.com/Neo23x0/Loki.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mac-changer",
"name": "MAC Changer",
"description": "Change/spoof MAC address",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install macchanger`",
"raw": "`apt install macchanger`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"MAC Changer"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "maigret",
"name": "Maigret",
"description": "Advanced username search across 3000+ sites with reports",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install maigret`",
"raw": "`pip install maigret`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Maigret"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "mailheaderdetective",
"name": "MailHeaderDetective",
"description": "Email header forensics",
"category": "email-phone",
"url": "https://github.com/akajhon/MailHeaderDetective",
"install": {
"method": "git",
"kali": "`git clone https://github.com/akajhon/MailHeaderDetective`",
"raw": "`git clone https://github.com/akajhon/MailHeaderDetective`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "mailtoanalyzer",
"name": "mailtoanalyzer",
"description": "Email exposure analysis",
"category": "email-phone",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install mailto-analyzer`",
"raw": "`pip install mailto-analyzer`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "malpedia",
"name": "Malpedia",
"description": "Threat-actor groups, malware families, and analysis by Fraunhofer",
"category": "malware-threat-intel",
"url": "https://malpedia.caad.fkie.fraunhofer.de",
"install": {
"method": "web",
"kali": "",
"raw": "[malpedia.caad.fkie.fraunhofer.de](https://malpedia.caad.fkie.fraunhofer.de)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "malshare",
"name": "MalShare",
"description": "Free malware sample repository for researchers",
"category": "malware-threat-intel",
"url": "https://malshare.com",
"install": {
"method": "web",
"kali": "",
"raw": "[malshare.com](https://malshare.com)"
},
"tags": [
"malware-threat-intel",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "maltego",
"name": "Maltego",
"description": "Visual OSINT link analysis platform",
"category": "frameworks",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install maltego`",
"raw": "`apt install maltego`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Maltego"
],
"sections_seen": [
"Kali Linux OSINT Toolkit"
],
"archived": false
},
{
"id": "malwarebazaar",
"name": "MalwareBazaar",
"description": "Search & download confirmed malware samples",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "manual",
"kali": "MalwareBazaar",
"raw": "MalwareBazaar"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"MalwareBazaar"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "mandiant-advantage",
"name": "Mandiant Advantage",
"description": "Threat intel from Google's Mandiant team",
"category": "threat-intel-platforms",
"url": "https://www.mandiant.com/advantage",
"install": {
"method": "web",
"kali": "",
"raw": "[www.mandiant.com](https://www.mandiant.com/advantage)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mapillary",
"name": "Mapillary",
"description": "Street-level imagery",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "Mapillary",
"raw": "Mapillary"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Mapillary"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "marinetraffic",
"name": "MarineTraffic",
"description": "Real-time ship tracking",
"category": "vehicle-aviation-maritime",
"url": "",
"install": {
"method": "manual",
"kali": "MarineTraffic",
"raw": "MarineTraffic"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v2"
],
"aliases": [
"MarineTraffic"
],
"sections_seen": [
"Vehicle, Aviation & Maritime"
],
"archived": false
},
{
"id": "masscan",
"name": "Masscan",
"description": "Fastest internet port scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install masscan`",
"raw": "`apt install masscan`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Masscan"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "massdns",
"name": "massdns",
"description": "High-performance DNS stub resolver for bulk lookups",
"category": "domain-ip-network",
"url": "https://github.com/blechschmidt/massdns",
"install": {
"method": "git",
"kali": "git clone https://github.com/blechschmidt/massdns.git",
"raw": "`git clone https://github.com/blechschmidt/massdns.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "maxar",
"name": "Maxar",
"description": "Commercial satellite imagery",
"category": "geolocation",
"url": "https://maxar.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[maxar.com](https://maxar.com/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "maxmind-geoip",
"name": "MaxMind GeoIP",
"description": "IP geolocation database",
"category": "geolocation",
"url": "https://maxmind.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[maxmind.com](https://maxmind.com/)"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"IP Tracking & Geolocation Links"
],
"archived": false
},
{
"id": "medusa",
"name": "Medusa",
"description": "Parallel brute-force tool",
"category": "data-breach",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install medusa`",
"raw": "`apt install medusa`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "meg-tomnomnom",
"name": "meg",
"description": "Fetch many paths for many hosts without flooding",
"category": "domain-ip-network",
"url": "https://github.com/tomnomnom/meg",
"install": {
"method": "go",
"kali": "go install github.com/tomnomnom/meg@latest",
"raw": "`go install github.com/tomnomnom/meg@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "memento-time-travel",
"name": "Memento Time Travel",
"description": "Federated search across multiple web archives",
"category": "document-metadata",
"url": "https://timetravel.mementoweb.org",
"install": {
"method": "web",
"kali": "",
"raw": "[timetravel.mementoweb.org](https://timetravel.mementoweb.org)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mention",
"name": "Mention",
"description": "Social media monitoring",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [
"Mention"
],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "merlin",
"name": "Merlin",
"description": "Cross-platform HTTP/2 post-exploitation server and agent in Go",
"category": "red-team-offensive",
"url": "https://github.com/Ne0nd0g/merlin",
"install": {
"method": "go",
"kali": "go install github.com/Ne0nd0g/merlin@latest",
"raw": "`go install github.com/Ne0nd0g/merlin@latest`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "metadata2go",
"name": "Metadata2Go",
"description": "Free online metadata extractor for any file",
"category": "document-metadata",
"url": "https://www.metadata2go.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.metadata2go.com](https://www.metadata2go.com)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "metadefender-cloud",
"name": "MetaDefender Cloud",
"description": "Multi-engine file/URL/IP scanning by OPSWAT",
"category": "malware-threat-intel",
"url": "https://metadefender.com",
"install": {
"method": "web",
"kali": "",
"raw": "[metadefender.com](https://metadefender.com)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "metagoofil",
"name": "Metagoofil",
"description": "Document metadata harvester from public docs",
"category": "document-metadata",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install metagoofil`",
"raw": "`pip install metagoofil`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Metagoofil"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "metasleuth",
"name": "MetaSleuth",
"description": "Free + paid crypto transaction tracing tool",
"category": "crypto-blockchain",
"url": "https://metasleuth.io",
"install": {
"method": "web",
"kali": "",
"raw": "[metasleuth.io](https://metasleuth.io)"
},
"tags": [
"crypto-blockchain",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "metasploit",
"name": "Metasploit",
"description": "Industry-standard pen testing framework",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install metasploit-framework`",
"raw": "`apt install metasploit-framework`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Metasploit"
],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "metasploit-framework",
"name": "Metasploit Framework",
"description": "Industry-standard exploitation framework with 2000+ modules",
"category": "red-team-offensive",
"url": "https://github.com/rapid7/metasploit-framework",
"install": {
"method": "apt",
"kali": "apt install metasploit-framework",
"raw": "`apt install metasploit-framework`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "metasploitable",
"name": "Metasploitable",
"description": "Intentionally vulnerable Linux VM for Metasploit practice",
"category": "training-ctf",
"url": "https://docs.rapid7.com/metasploit/metasploitable-2/",
"install": {
"method": "web",
"kali": "",
"raw": "[docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "microsoft-copilot",
"name": "Microsoft Copilot",
"description": "AI with Bing search integration",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "mimikatz",
"name": "Mimikatz",
"description": "Windows credential dumper",
"category": "data-breach",
"url": "https://github.com/gentilkiwi/mimikatz",
"install": {
"method": "git",
"kali": "`git clone https://github.com/gentilkiwi/mimikatz`",
"raw": "`git clone https://github.com/gentilkiwi/mimikatz`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "misp",
"name": "MISP",
"description": "Malware Information Sharing Platform",
"category": "malware-threat-intel",
"url": "https://github.com/MISP/MISP",
"install": {
"method": "git",
"kali": "`git clone https://github.com/MISP/MISP`",
"raw": "`git clone https://github.com/MISP/MISP`"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"MISP"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "misp-galaxy",
"name": "MISP Galaxy",
"description": "Adversary group identification used by SOCs/ISACs",
"category": "malware-threat-intel",
"url": "https://www.misp-galaxy.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.misp-galaxy.org](https://www.misp-galaxy.org)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mitaka",
"name": "Mitaka",
"description": "Browser extension for OSINT — extract IoCs from highlighted text",
"category": "frameworks",
"url": "https://github.com/ninoseki/mitaka",
"install": {
"method": "git",
"kali": "git clone https://github.com/ninoseki/mitaka.git",
"raw": "`git clone https://github.com/ninoseki/mitaka.git`"
},
"tags": [
"frameworks",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mitre-attack",
"name": "MITRE ATT&CK",
"description": "Adversary tactics, techniques, and procedures knowledge base",
"category": "blue-team-defensive",
"url": "https://attack.mitre.org",
"install": {
"method": "web",
"kali": "",
"raw": "[attack.mitre.org](https://attack.mitre.org)"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mitre-d3fend",
"name": "MITRE D3FEND",
"description": "Defensive countermeasure knowledge graph",
"category": "blue-team-defensive",
"url": "https://d3fend.mitre.org",
"install": {
"method": "web",
"kali": "",
"raw": "[d3fend.mitre.org](https://d3fend.mitre.org)"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mobsf",
"name": "MobSF",
"description": "Mobile Security Framework (static+dynamic)",
"category": "iot-devices",
"url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF)"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "modlishka",
"name": "Modlishka",
"description": "Reverse proxy phishing framework",
"category": "people-identity",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/drk1wi/Modlishka@latest`",
"raw": "`go install github.com/drk1wi/Modlishka@latest`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "mojeek",
"name": "Mojeek",
"description": "Independent search engine that doesn't track users",
"category": "search-dorking",
"url": "https://www.mojeek.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.mojeek.com](https://www.mojeek.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mr.holmes",
"name": "Mr.Holmes",
"description": "OSINT investigation tool",
"category": "people-identity",
"url": "https://github.com/Lucksi/Mr.Holmes",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Lucksi/Mr.Holmes`",
"raw": "`git clone https://github.com/Lucksi/Mr.Holmes`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v2"
],
"aliases": [
"Mr.Holmes"
],
"sections_seen": [
"People & Identity OSINT"
],
"archived": false
},
{
"id": "msfpc",
"name": "MSFPC",
"description": "MSF payload creator",
"category": "iot-devices",
"url": "https://github.com/g0tmi1k/msfpc",
"install": {
"method": "git",
"kali": "`git clone https://github.com/g0tmi1k/msfpc`",
"raw": "`git clone https://github.com/g0tmi1k/msfpc`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "mullvad-vpn",
"name": "Mullvad VPN",
"description": "Privacy-first VPN — no email needed, cash accepted",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install mullvad-vpn`",
"raw": "`apt install mullvad-vpn`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Mullvad VPN"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "mxtoolbox",
"name": "MXToolbox",
"description": "Email header analysis & DNS checks",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "MXToolbox",
"raw": "MXToolbox"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"MXToolbox"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "mylnikov-geolocation",
"name": "Mylnikov Geolocation",
"description": "BSSID/Wi-Fi MAC to coordinates lookup",
"category": "geolocation",
"url": "https://www.mylnikov.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.mylnikov.org](https://www.mylnikov.org)"
},
"tags": [
"geolocation",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "mythic",
"name": "Mythic",
"description": "Cross-platform, post-exploit, multi-user red team framework",
"category": "red-team-offensive",
"url": "https://github.com/its-a-feature/Mythic",
"install": {
"method": "git",
"kali": "git clone https://github.com/its-a-feature/Mythic.git",
"raw": "`git clone https://github.com/its-a-feature/Mythic.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "naabu",
"name": "Naabu",
"description": "Fast Go-based port scanner from ProjectDiscovery",
"category": "domain-ip-network",
"url": "https://github.com/projectdiscovery/naabu",
"install": {
"method": "go",
"kali": "go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest",
"raw": "`go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "nahamsec",
"name": "NahamSec",
"description": "Bug bounty and offensive security YouTube content",
"category": "learning-resources",
"url": "https://www.youtube.com/@nahamsec",
"install": {
"method": "web",
"kali": "",
"raw": "[www.youtube.com](https://www.youtube.com/@nahamsec)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "namecheckr",
"name": "Name Checkr",
"description": "Check domain and username across many platforms",
"category": "username-social",
"url": "https://www.namecheckr.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.namecheckr.com](https://www.namecheckr.com)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "namecheckup",
"name": "Name Checkup",
"description": "Check username availability across social media",
"category": "username-social",
"url": "https://namecheckup.com",
"install": {
"method": "web",
"kali": "",
"raw": "[namecheckup.com](https://namecheckup.com)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "namechk",
"name": "Namechk",
"description": "Username & domain availability checker",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "Namechk",
"raw": "Namechk"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Namechk"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "nameketchup",
"name": "NameKetchup",
"description": "Check domain + username on popular social media",
"category": "username-social",
"url": "https://nameketchup.com",
"install": {
"method": "web",
"kali": "",
"raw": "[nameketchup.com](https://nameketchup.com)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "national-cellular-directory",
"name": "National Cellular Directory",
"description": "Phone owner lookup",
"category": "email-phone",
"url": "https://www.nationalcellulardirectory.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "naver",
"name": "Naver",
"description": "South Korean search engine — local content not on Google",
"category": "search-dorking",
"url": "https://www.naver.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.naver.com](https://www.naver.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "nerdydata",
"name": "NerdyData",
"description": "Search engine for source code across the public web",
"category": "search-dorking",
"url": "https://nerdydata.com",
"install": {
"method": "web",
"kali": "",
"raw": "[nerdydata.com](https://nerdydata.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "netcat",
"name": "Netcat",
"description": "The TCP/IP swiss army knife",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install netcat-openbsd`",
"raw": "`apt install netcat-openbsd`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "netcraft",
"name": "Netcraft Site Report",
"description": "Web technology, hosting history, takedown service",
"category": "domain-ip-network",
"url": "https://sitereport.netcraft.com",
"install": {
"method": "web",
"kali": "",
"raw": "[sitereport.netcraft.com](https://sitereport.netcraft.com)"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "netexec",
"name": "NetExec (nxc)",
"description": "CrackMapExec maintained successor — AD network exploitation",
"category": "red-team-offensive",
"url": "https://github.com/Pennyw0rth/NetExec",
"install": {
"method": "pip",
"kali": "pip3 install git+https://github.com/Pennyw0rth/NetExec",
"raw": "`pip3 install git+https://github.com/Pennyw0rth/NetExec`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "netlas-cookbook",
"name": "Netlas Cookbook",
"description": "Free OSINT automation cookbook",
"category": "learning-resources",
"url": "https://academy.netlas.io",
"install": {
"method": "web",
"kali": "",
"raw": "[academy.netlas.io](https://academy.netlas.io)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "netlas.io",
"name": "Netlas.io",
"description": "Internet scanning and intelligence",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Netlas.io",
"raw": "Netlas.io"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"Netlas.io"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "nexfil",
"name": "NExfil",
"description": "Find profiles by username on various platforms",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install nexfil`",
"raw": "`pip install nexfil`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"NExfil"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "nexphisher",
"name": "NexPhisher",
"description": "Multi-platform phishing tool",
"category": "people-identity",
"url": "https://github.com/htr-tech/nexphisher",
"install": {
"method": "git",
"kali": "`git clone https://github.com/htr-tech/nexphisher`",
"raw": "`git clone https://github.com/htr-tech/nexphisher`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [
"NexPhisher"
],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "nicb-vincheck",
"name": "NICB VINCheck",
"description": "Stolen vehicle check",
"category": "vehicle-aviation-maritime",
"url": "https://www.nicb.org/vincheck",
"install": {
"method": "web",
"kali": "",
"raw": "[nicb.org/vincheck](https://www.nicb.org/vincheck)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "nighthawk",
"name": "Nighthawk",
"description": "Premium evasive C2 by MDSec (Cobalt Strike alt)",
"category": "red-team-offensive",
"url": "https://www.mdsec.co.uk/nighthawk/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/)"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "nikto",
"name": "Nikto",
"description": "Web server vulnerability scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install nikto`",
"raw": "`apt install nikto`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"Nikto"
],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "nmap",
"name": "Nmap",
"description": "Network scanner & mapper",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install nmap`",
"raw": "`apt install nmap`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Nmap"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "nosqlmap",
"name": "NoSQLMap",
"description": "Automated NoSQL database enumeration and exploitation",
"category": "red-team-offensive",
"url": "https://github.com/codingo/NoSQLMap",
"install": {
"method": "git",
"kali": "git clone https://github.com/codingo/NoSQLMap.git",
"raw": "`git clone https://github.com/codingo/NoSQLMap.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "notebooklm",
"name": "NotebookLM",
"description": "Google's document analysis AI",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "nuclei",
"name": "Nuclei",
"description": "Template-based fast vulnerability scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`",
"raw": "`go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Nuclei"
],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "nuclei-templates",
"name": "Nuclei Templates",
"description": "Community-curated templates for Nuclei",
"category": "red-team-offensive",
"url": "https://github.com/projectdiscovery/nuclei-templates",
"install": {
"method": "git",
"kali": "git clone https://github.com/projectdiscovery/nuclei-templates.git",
"raw": "`git clone https://github.com/projectdiscovery/nuclei-templates.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "numlookup",
"name": "NumLookup",
"description": "Free reverse phone lookup",
"category": "email-phone",
"url": "https://www.numlookup.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[numlookup.com](https://www.numlookup.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "numverify",
"name": "NumVerify",
"description": "Phone number validation API",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "NumVerify",
"raw": "NumVerify"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"NumVerify"
],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "objection",
"name": "Objection",
"description": "Runtime mobile exploration",
"category": "iot-devices",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install objection`",
"raw": "`pip install objection`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Mobile Hacking & Phone Exploitation"
],
"archived": false
},
{
"id": "oblivion-loseys",
"name": "Oblivion",
"description": "OSINT framework",
"category": "frameworks",
"url": "https://github.com/loseys/Oblivion",
"install": {
"method": "git",
"kali": "git clone https://github.com/loseys/Oblivion.git",
"raw": "`git clone https://github.com/loseys/Oblivion.git`"
},
"tags": [
"frameworks",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "odin-search",
"name": "ODIN",
"description": "Search hosts, CVEs, exposed buckets — 10 free searches/day",
"category": "domain-ip-network",
"url": "https://search.odin.io",
"install": {
"method": "web",
"kali": "",
"raw": "[search.odin.io](https://search.odin.io)"
},
"tags": [
"domain-ip-network",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "offensivesecurity-proving",
"name": "OffSec Proving Grounds",
"description": "OSCP-style training labs by Offensive Security",
"category": "training-ctf",
"url": "https://www.offsec.com/labs/individual/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.offsec.com](https://www.offsec.com/labs/individual/)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "offshoreleaks",
"name": "Offshore Leaks Database",
"description": "Panama/Pandora/Paradise Papers searchable database",
"category": "document-metadata",
"url": "https://offshoreleaks.icij.org",
"install": {
"method": "web",
"kali": "",
"raw": "[offshoreleaks.icij.org](https://offshoreleaks.icij.org)"
},
"tags": [
"document-metadata",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "onionland",
"name": "OnionLand Search",
"description": "Search engine for dark-web content",
"category": "dark-web",
"url": "https://onionlandsearchengine.com",
"install": {
"method": "web",
"kali": "",
"raw": "[onionlandsearchengine.com](https://onionlandsearchengine.com)"
},
"tags": [
"dark-web",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "onionscan",
"name": "OnionScan",
"description": "Scan & analyze .onion sites",
"category": "dark-web",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/s-rah/onionscan@latest`",
"raw": "`go install github.com/s-rah/onionscan@latest`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"OnionScan"
],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "onionsearch",
"name": "OnionSearch",
"description": "Search .onion URLs from multiple engines",
"category": "dark-web",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install onionsearch`",
"raw": "`pip3 install onionsearch`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v2"
],
"aliases": [
"OnionSearch"
],
"sections_seen": [
"Dark Web & Tor Intelligence"
],
"archived": false
},
{
"id": "onionshare",
"name": "OnionShare",
"description": "Anonymous file sharing via Tor",
"category": "vpn-privacy",
"url": "https://onionshare.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[onionshare.org](https://onionshare.org/)"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "onyphe",
"name": "ONYPHE",
"description": "OSINT engine indexing exposed assets",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "ONYPHE",
"raw": "ONYPHE"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"ONYPHE"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "oosint",
"name": "Open-Source Intelligence (Reverse Image)",
"description": "Yandex/Bing/TinEye combined reverse-image search",
"category": "image-facial",
"url": "https://oosint.com",
"install": {
"method": "web",
"kali": "",
"raw": "[oosint.com](https://oosint.com)"
},
"tags": [
"image-facial",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "openbugbounty",
"name": "Open Bug Bounty",
"description": "Free coordinated-disclosure platform",
"category": "bug-bounty",
"url": "https://www.openbugbounty.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.openbugbounty.org](https://www.openbugbounty.org)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "opencellid",
"name": "OpenCellID",
"description": "Largest public database of cell-tower IDs",
"category": "geolocation",
"url": "https://opencellid.org",
"install": {
"method": "web",
"kali": "",
"raw": "[opencellid.org](https://opencellid.org)"
},
"tags": [
"geolocation",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "opencorporates",
"name": "OpenCorporates",
"description": "Global corporate database",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "OpenCorporates",
"raw": "OpenCorporates"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"OpenCorporates"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "opencorporates-cli",
"name": "opencorporates-cli",
"description": "Command-line client for OpenCorporates API",
"category": "company-business",
"url": "https://github.com/octohedron/opencorporates",
"install": {
"method": "pip",
"kali": "pip3 install opencorporates",
"raw": "`pip3 install opencorporates`"
},
"tags": [
"company-business",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "opencti",
"name": "OpenCTI",
"description": "Open-source CTI platform structured around STIX2",
"category": "threat-intel-platforms",
"url": "https://www.opencti.io",
"install": {
"method": "docker",
"kali": "docker pull opencti/platform",
"raw": "`docker pull opencti/platform`"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "opencv",
"name": "OpenCV",
"description": "Computer vision library",
"category": "misc",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install opencv-python`",
"raw": "`pip install opencv-python`"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "openocd",
"name": "OpenOCD",
"description": "Open On-Chip Debugger — JTAG/SWD interface for embedded",
"category": "hardware-hacking",
"url": "https://openocd.org",
"install": {
"method": "apt",
"kali": "apt install openocd",
"raw": "`apt install openocd`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "openphish",
"name": "OpenPhish",
"description": "Live phishing URL feed",
"category": "malware-threat-intel",
"url": "https://openphish.com",
"install": {
"method": "web",
"kali": "",
"raw": "[openphish.com](https://openphish.com)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "openrailwaymap",
"name": "OpenRailwayMap",
"description": "Worldwide rail network map — rolling stock, infrastructure, signals",
"category": "vehicle-aviation-maritime",
"url": "https://www.openrailwaymap.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.openrailwaymap.org](https://www.openrailwaymap.org)"
},
"tags": [
"vehicle-aviation-maritime",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "opensanctions",
"name": "OpenSanctions",
"description": "Consolidated database of sanctioned entities across 200+ sources",
"category": "company-business",
"url": "https://opensanctions.org",
"install": {
"method": "web",
"kali": "",
"raw": "[opensanctions.org](https://opensanctions.org)"
},
"tags": [
"company-business",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "openstreetmap",
"name": "OpenStreetMap",
"description": "Free collaborative world map",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "OpenStreetMap",
"raw": "OpenStreetMap"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"OpenStreetMap"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "openvas",
"name": "OpenVAS",
"description": "Open-source vulnerability scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install openvas`",
"raw": "`apt install openvas`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "openvpn",
"name": "OpenVPN",
"description": "Industry-standard open-source VPN protocol",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install openvpn`",
"raw": "`apt install openvpn`"
},
"tags": [
"vpn-privacy",
"free-tier:Free open-source (self-hosted)",
"open-source:✅",
"no-log:✅",
"protocols:OpenVPN"
],
"source_versions": [
"v2"
],
"aliases": [
"OpenVPN"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "ophcrack",
"name": "Ophcrack",
"description": "Windows password cracker (rainbow tables)",
"category": "data-breach",
"url": "https://ophcrack.sourceforge.io/",
"install": {
"method": "web",
"kali": "",
"raw": "[ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/)"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "orbit",
"name": "Orbit",
"description": "Bitcoin address investigator",
"category": "company-business",
"url": "https://github.com/s0md3v/Orbit",
"install": {
"method": "git",
"kali": "`git clone https://github.com/s0md3v/Orbit`",
"raw": "`git clone https://github.com/s0md3v/Orbit`"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Orbit"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "osint-curious",
"name": "OSINT Curious",
"description": "Community blog, podcast, and learning resources",
"category": "learning-resources",
"url": "https://osintcurio.us",
"install": {
"method": "web",
"kali": "",
"raw": "[osintcurio.us](https://osintcurio.us)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "osint-framework",
"name": "OSINT Framework",
"description": "Visual map of all OSINT tools",
"category": "username-social",
"url": "https://osintframework.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[osintframework.com](https://osintframework.com/)"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "osint-framework-web",
"name": "OSINT Framework (Web)",
"description": "Visual map of all OSINT tools",
"category": "frameworks",
"url": "",
"install": {
"method": "manual",
"kali": "OSINT Framework (Web)",
"raw": "OSINT Framework (Web)"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"OSINT Framework (Web)"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "osint-industries",
"name": "OSINT Industries",
"description": "People search + social media lookup",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "OSINT Industries",
"raw": "OSINT Industries"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"OSINT Industries"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "osint-san",
"name": "OSINT-SAN",
"description": "OSINT Swiss Army Knife framework",
"category": "frameworks",
"url": "https://github.com/Bafomet666/OSINT-SAN",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Bafomet666/OSINT-SAN`",
"raw": "`git clone https://github.com/Bafomet666/OSINT-SAN`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"OSINT-SAN"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "osint-spy",
"name": "OSINT-SPY",
"description": "OSINT tool with Tor support",
"category": "dark-web",
"url": "https://github.com/SharadKumar97/OSINT-SPY",
"install": {
"method": "git",
"kali": "`git clone https://github.com/SharadKumar97/OSINT-SPY`",
"raw": "`git clone https://github.com/SharadKumar97/OSINT-SPY`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "osint-techniques",
"name": "OSINT Techniques",
"description": "Michael Bazzell's resources, books, and search tools",
"category": "learning-resources",
"url": "https://inteltechniques.com",
"install": {
"method": "web",
"kali": "",
"raw": "[inteltechniques.com](https://inteltechniques.com)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "osint-training",
"name": "Bellingcat's Online Investigations Toolkit",
"description": "Bellingcat-curated tools and methodology guide",
"category": "learning-resources",
"url": "https://www.bellingcat.com/resources/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.bellingcat.com](https://www.bellingcat.com/resources/)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "osintgram",
"name": "Osintgram",
"description": "Instagram OSINT tool",
"category": "username-social",
"url": "https://github.com/Datalux/Osintgram",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Datalux/Osintgram`",
"raw": "`git clone https://github.com/Datalux/Osintgram`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "osmedeus",
"name": "osmedeus",
"description": "Full automated reconnaissance workflow",
"category": "frameworks",
"url": "https://github.com/j3ssie/osmedeus",
"install": {
"method": "git",
"kali": "`git clone https://github.com/j3ssie/osmedeus`",
"raw": "`git clone https://github.com/j3ssie/osmedeus`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"osmedeus"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "osquery",
"name": "osquery",
"description": "SQL-powered OS instrumentation/monitoring/analytics",
"category": "blue-team-defensive",
"url": "https://osquery.io",
"install": {
"method": "apt",
"kali": "apt install osquery",
"raw": "`apt install osquery`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "osrframework",
"name": "OSRFramework",
"description": "Username research framework with multiple tools",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install osrframework`",
"raw": "`pip install osrframework`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"OSRFramework"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "outline-vpn",
"name": "Outline VPN",
"description": "Google Jigsaw's self-hosted VPN — censorship circumvention",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Website",
"raw": "Website"
},
"tags": [
"vpn-privacy",
"free-tier:Free (self-hosted)",
"open-source:✅",
"no-log:✅",
"protocols:Shadowsocks"
],
"source_versions": [
"v2"
],
"aliases": [
"Outline VPN"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "overpass-turbo",
"name": "Overpass Turbo",
"description": "OpenStreetMap data query",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "Overpass Turbo",
"raw": "Overpass Turbo"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Overpass Turbo"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "overthewire",
"name": "OverTheWire Wargames",
"description": "Free wargames for learning offensive security from scratch",
"category": "training-ctf",
"url": "https://overthewire.org",
"install": {
"method": "web",
"kali": "",
"raw": "[overthewire.org](https://overthewire.org)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "owasp-zap",
"name": "OWASP ZAP",
"description": "Open-source web app scanner",
"category": "domain-ip-network",
"url": "https://zaproxy.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[zaproxy.org](https://zaproxy.org/)"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "oxt",
"name": "OXT (OpenXt)",
"description": "Bitcoin transaction graph explorer with clustering",
"category": "crypto-blockchain",
"url": "https://oxt.me",
"install": {
"method": "web",
"kali": "",
"raw": "[oxt.me](https://oxt.me)"
},
"tags": [
"crypto-blockchain",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "oxt.me",
"name": "OXT.me",
"description": "Bitcoin transaction graph analysis",
"category": "crypto-blockchain",
"url": "",
"install": {
"method": "manual",
"kali": "OXT.me",
"raw": "OXT.me"
},
"tags": [
"crypto-blockchain"
],
"source_versions": [
"v2"
],
"aliases": [
"OXT.me"
],
"sections_seen": [
"Cryptocurrency & Blockchain"
],
"archived": false
},
{
"id": "pacer",
"name": "PACER",
"description": "US federal court records",
"category": "vehicle-aviation-maritime",
"url": "https://pacer.uscourts.gov/",
"install": {
"method": "web",
"kali": "",
"raw": "[pacer.uscourts.gov](https://pacer.uscourts.gov/)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "pagodo",
"name": "Pagodo",
"description": "Automated Google dorking tool",
"category": "search-dorking",
"url": "https://github.com/opsdisk/pagodo",
"install": {
"method": "git",
"kali": "`git clone https://github.com/opsdisk/pagodo`",
"raw": "`git clone https://github.com/opsdisk/pagodo`"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"Pagodo"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "paramminer",
"name": "ParamMiner (Burp ext)",
"description": "Discover hidden, unlinked HTTP parameters in Burp",
"category": "red-team-offensive",
"url": "https://github.com/PortSwigger/param-miner",
"install": {
"method": "git",
"kali": "git clone https://github.com/PortSwigger/param-miner.git",
"raw": "`git clone https://github.com/PortSwigger/param-miner.git`"
},
"tags": [
"red-team-offensive",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "paramspider",
"name": "ParamSpider",
"description": "Parameter discovery from web archives",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install paramspider`",
"raw": "`pip install paramspider`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "passivedns-mnemonic",
"name": "Mnemonic Passive DNS",
"description": "Free passive-DNS query tool",
"category": "domain-ip-network",
"url": "https://passivedns.mnemonic.no",
"install": {
"method": "web",
"kali": "",
"raw": "[passivedns.mnemonic.no](https://passivedns.mnemonic.no)"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "passivetotal",
"name": "PassiveTotal (RiskIQ)",
"description": "Passive DNS, WHOIS, SSL cert pivots — now Microsoft Defender TI",
"category": "domain-ip-network",
"url": "https://community.riskiq.com",
"install": {
"method": "web",
"kali": "",
"raw": "[community.riskiq.com](https://community.riskiq.com)"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "payloadsallthethings",
"name": "PayloadsAllTheThings",
"description": "Web app pentest payloads, bypasses, and methodology",
"category": "red-team-offensive",
"url": "https://github.com/swisskyrepo/PayloadsAllTheThings",
"install": {
"method": "git",
"kali": "git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git",
"raw": "`git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "peekalink",
"name": "Peekalink",
"description": "Preview any URL — title, description, screenshot via API",
"category": "document-metadata",
"url": "https://www.peekalink.io",
"install": {
"method": "web",
"kali": "",
"raw": "[www.peekalink.io](https://www.peekalink.io)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pentest-tools-scanner",
"name": "Pentest-Tools Scanner",
"description": "Website vulnerability scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Pentest-Tools Scanner",
"raw": "Pentest-Tools Scanner"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"Pentest-Tools Scanner"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "pentesterlab",
"name": "PentesterLab",
"description": "Hands-on web-app pentesting training",
"category": "training-ctf",
"url": "https://pentesterlab.com",
"install": {
"method": "web",
"kali": "",
"raw": "[pentesterlab.com](https://pentesterlab.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "perplexity-ai",
"name": "Perplexity AI",
"description": "AI search with cited sources",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ 5 Pro/day",
"raw": "✅ 5 Pro/day"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "petitpotam",
"name": "PetitPotam",
"description": "PoC tool to coerce Windows hosts to authenticate to attacker",
"category": "red-team-offensive",
"url": "https://github.com/topotam/PetitPotam",
"install": {
"method": "git",
"kali": "git clone https://github.com/topotam/PetitPotam.git",
"raw": "`git clone https://github.com/topotam/PetitPotam.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "phind",
"name": "Phind",
"description": "AI search for developers",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "phishstats",
"name": "PhishStats",
"description": "Live phishing intelligence feed and search",
"category": "malware-threat-intel",
"url": "https://phishstats.info",
"install": {
"method": "web",
"kali": "",
"raw": "[phishstats.info](https://phishstats.info)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "phishtank",
"name": "PhishTank",
"description": "Anti-phishing community — verified phishing URLs",
"category": "malware-threat-intel",
"url": "https://phishtank.org",
"install": {
"method": "web",
"kali": "",
"raw": "[phishtank.org](https://phishtank.org)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "phobos",
"name": "Phobos",
"description": "Dark web search engine",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`",
"raw": "`phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "phonebook.cz",
"name": "Phonebook.cz",
"description": "Email, domain & URL search",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "Phonebook.cz",
"raw": "Phonebook.cz"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Phonebook.cz"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "phoneinfoga",
"name": "PhoneInfoga",
"description": "Advanced phone number scanner",
"category": "email-phone",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install phoneinfoga`",
"raw": "`pip install phoneinfoga`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"PhoneInfoga"
],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "phonesploit",
"name": "PhoneSploit",
"description": "ADB-based phone exploitation",
"category": "email-phone",
"url": "https://github.com/aerosol-can/PhoneSploit",
"install": {
"method": "git",
"kali": "`git clone https://github.com/aerosol-can/PhoneSploit`",
"raw": "`git clone https://github.com/aerosol-can/PhoneSploit`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [
"PhoneSploit"
],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "photon",
"name": "Photon",
"description": "Web crawler for OSINT data",
"category": "domain-ip-network",
"url": "https://github.com/s0md3v/Photon",
"install": {
"method": "git",
"kali": "`git clone https://github.com/s0md3v/Photon`",
"raw": "`git clone https://github.com/s0md3v/Photon`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "photorec",
"name": "PhotoRec",
"description": "File data recovery — focuses on multimedia",
"category": "digital-forensics",
"url": "https://www.cgsecurity.org/wiki/PhotoRec",
"install": {
"method": "apt",
"kali": "apt install testdisk",
"raw": "`apt install testdisk`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "picarta",
"name": "Picarta.ai",
"description": "AI-powered photo geolocation predictor",
"category": "geolocation",
"url": "https://picarta.ai",
"install": {
"method": "web",
"kali": "",
"raw": "[picarta.ai](https://picarta.ai)"
},
"tags": [
"geolocation",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "picoctf",
"name": "picoCTF",
"description": "Free CTF and learning platform built by CMU",
"category": "training-ctf",
"url": "https://picoctf.org",
"install": {
"method": "web",
"kali": "",
"raw": "[picoctf.org](https://picoctf.org)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pimeyes",
"name": "PimEyes",
"description": "Face search engine from photos",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "PimEyes",
"raw": "PimEyes"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"PimEyes"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "pinterest-search",
"name": "Pinterest",
"description": "Visual search engine — alternate reverse-image source",
"category": "image-facial",
"url": "https://www.pinterest.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.pinterest.com](https://www.pinterest.com)"
},
"tags": [
"image-facial",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pipl",
"name": "Pipl",
"description": "Deep people search engine",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Pipl",
"raw": "Pipl"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Pipl"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "plaso",
"name": "Plaso (log2timeline)",
"description": "Super-timeline creation from forensic artifacts",
"category": "digital-forensics",
"url": "https://github.com/log2timeline/plaso",
"install": {
"method": "pip",
"kali": "pip3 install plaso",
"raw": "`pip3 install plaso`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "polygonscan",
"name": "PolygonScan",
"description": "Polygon (Matic) blockchain explorer",
"category": "crypto-blockchain",
"url": "https://polygonscan.com",
"install": {
"method": "web",
"kali": "",
"raw": "[polygonscan.com](https://polygonscan.com)"
},
"tags": [
"crypto-blockchain",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "portswigger-academy",
"name": "PortSwigger Web Security Academy",
"description": "Free, world-class web security training (by Burp Suite team)",
"category": "training-ctf",
"url": "https://portswigger.net/web-security",
"install": {
"method": "web",
"kali": "",
"raw": "[portswigger.net](https://portswigger.net/web-security)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "predictasearch",
"name": "Predicta Search",
"description": "Search social accounts by email or phone",
"category": "people-identity",
"url": "https://predictasearch.com",
"install": {
"method": "web",
"kali": "",
"raw": "[predictasearch.com](https://predictasearch.com)"
},
"tags": [
"people-identity",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "privadovpn-free",
"name": "PrivadoVPN Free",
"description": "Free VPN with 10GB/month and zero-log policy",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Website",
"raw": "Website"
},
"tags": [
"vpn-privacy",
"free-tier:10GB/month, 12 servers",
"open-source:❌",
"no-log:✅",
"protocols:WireGuard, OpenVPN, IKEv2"
],
"source_versions": [
"v2"
],
"aliases": [
"PrivadoVPN Free"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "proton-vpn-free",
"name": "Proton VPN Free",
"description": "Best free VPN — unlimited data, no-log, open-source, Swiss privacy",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install protonvpn-cli`",
"raw": "`pip3 install protonvpn-cli`"
},
"tags": [
"vpn-privacy",
"free-tier:Unlimited data, 5 countries, 1 device",
"open-source:✅",
"no-log:✅",
"protocols:WireGuard, OpenVPN, Stealth"
],
"source_versions": [
"v2"
],
"aliases": [
"Proton VPN Free"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "protonmail",
"name": "ProtonMail",
"description": "Encrypted email",
"category": "vpn-privacy",
"url": "https://proton.me/",
"install": {
"method": "web",
"kali": "",
"raw": "[proton.me](https://proton.me/)"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "protonvpn",
"name": "ProtonVPN",
"description": "Free encrypted VPN",
"category": "vpn-privacy",
"url": "https://protonvpn.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[protonvpn.com](https://protonvpn.com/)"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "prowl",
"name": "Prowl",
"description": "Email & domain reconnaissance",
"category": "email-phone",
"url": "https://github.com/nettitude/Prowl",
"install": {
"method": "git",
"kali": "`git clone https://github.com/nettitude/Prowl`",
"raw": "`git clone https://github.com/nettitude/Prowl`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "proxmark3",
"name": "Proxmark3",
"description": "RFID/NFC research and exploitation hardware + software",
"category": "hardware-hacking",
"url": "https://github.com/RfidResearchGroup/proxmark3",
"install": {
"method": "git",
"kali": "git clone https://github.com/RfidResearchGroup/proxmark3.git",
"raw": "`git clone https://github.com/RfidResearchGroup/proxmark3.git`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "public-transport-maps",
"name": "Public Transport Maps",
"description": "20+ online public transport maps by country",
"category": "vehicle-aviation-maritime",
"url": "https://cipher387.github.io/public_transport_maps/",
"install": {
"method": "web",
"kali": "",
"raw": "[cipher387.github.io](https://cipher387.github.io/public_transport_maps/)"
},
"tags": [
"vehicle-aviation-maritime",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "publicwww",
"name": "PublicWWW",
"description": "Search the web's source code (HTML/JS/CSS) for snippets, trackers, scripts",
"category": "search-dorking",
"url": "https://publicwww.com",
"install": {
"method": "web",
"kali": "",
"raw": "[publicwww.com](https://publicwww.com)"
},
"tags": [
"search-dorking",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pullpush",
"name": "PullPush",
"description": "Index/retrieval service for Reddit (incl. deleted content)",
"category": "username-social",
"url": "https://pullpush.io",
"install": {
"method": "web",
"kali": "",
"raw": "[pullpush.io](https://pullpush.io)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pulsedive",
"name": "Pulsedive",
"description": "Threat intelligence enrichment",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "manual",
"kali": "Pulsedive",
"raw": "Pulsedive"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"Pulsedive"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "pushshift",
"name": "Pushshift API",
"description": "Historical Reddit data — posts, comments, metadata",
"category": "username-social",
"url": "https://pushshift.io",
"install": {
"method": "web",
"kali": "",
"raw": "[pushshift.io](https://pushshift.io)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pwn-college",
"name": "pwn.college",
"description": "Free college-level cybersecurity education from ASU",
"category": "training-ctf",
"url": "https://pwn.college",
"install": {
"method": "web",
"kali": "",
"raw": "[pwn.college](https://pwn.college)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "pwndb",
"name": "Pwndb",
"description": "Dark web breach database (Tor)",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟢 Free",
"raw": "🟢 Free"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "pwnedhub",
"name": "PwnedHub",
"description": "Intentionally-vulnerable web app for hands-on appsec training",
"category": "training-ctf",
"url": "https://github.com/practisec/pwnedhub",
"install": {
"method": "git",
"kali": "git clone https://github.com/practisec/pwnedhub.git",
"raw": "`git clone https://github.com/practisec/pwnedhub.git`"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "python-for-osint-cipher387",
"name": "Python for OSINT (cipher387)",
"description": "21-day Python-for-OSINT course (free)",
"category": "learning-resources",
"url": "https://github.com/cipher387/python-for-OSINT-21-days",
"install": {
"method": "git",
"kali": "git clone https://github.com/cipher387/python-for-OSINT-21-days.git",
"raw": "`git clone https://github.com/cipher387/python-for-OSINT-21-days.git`"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "quake-360",
"name": "Quake (360.cn)",
"description": "Chinese internet asset search engine",
"category": "iot-devices",
"url": "https://quake.360.net",
"install": {
"method": "web",
"kali": "",
"raw": "[quake.360.net](https://quake.360.net)"
},
"tags": [
"iot-devices",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "quttera",
"name": "Quttera",
"description": "Online website malware scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Quttera",
"raw": "Quttera"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"Quttera"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "radare2",
"name": "radare2",
"description": "Reverse engineering framework",
"category": "digital-forensics",
"url": "https://www.radare.org",
"install": {
"method": "apt",
"kali": "apt install radare2",
"raw": "`apt install radare2`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rainbowcrack",
"name": "RainbowCrack",
"description": "Rainbow table cracker",
"category": "data-breach",
"url": "https://project-rainbowcrack.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[project-rainbowcrack.com](https://project-rainbowcrack.com/)"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "real-world-bug-hunting",
"name": "Real-World Bug Hunting (book)",
"description": "Peter Yaworski — bug bounty methodology and real reports",
"category": "learning-resources",
"url": "https://nostarch.com/bughunting",
"install": {
"method": "web",
"kali": "",
"raw": "[nostarch.com](https://nostarch.com/bughunting)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "reaver",
"name": "Reaver",
"description": "WPS brute force tool",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install reaver`",
"raw": "`apt install reaver`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "recap-archive",
"name": "RECAP Archive",
"description": "Public archive of PACER court documents",
"category": "document-metadata",
"url": "https://www.courtlistener.com/recap/",
"install": {
"method": "web",
"kali": "",
"raw": "[www.courtlistener.com](https://www.courtlistener.com/recap/)"
},
"tags": [
"document-metadata",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "recon-ng",
"name": "Recon-ng",
"description": "Module-based web reconnaissance framework",
"category": "frameworks",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install recon-ng`",
"raw": "`pip3 install recon-ng`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Recon-ng"
],
"sections_seen": [
"Kali Linux OSINT Toolkit"
],
"archived": false
},
{
"id": "reconaizer",
"name": "ReconAIzer",
"description": "AI-enhanced Burp Suite extension",
"category": "misc",
"url": "https://github.com/hisxo/ReconAIzer",
"install": {
"method": "web",
"kali": "",
"raw": "[github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer)"
},
"tags": [
"misc"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"AI-Powered OSINT & Free AI Tools"
],
"archived": false
},
{
"id": "reconftw",
"name": "reconFTW",
"description": "Full-suite domain recon — subdomain enum, port scan, vuln scan in one pipeline",
"category": "domain-ip-network",
"url": "https://github.com/six2dez/reconftw",
"install": {
"method": "git",
"kali": "git clone https://github.com/six2dez/reconftw.git",
"raw": "`git clone https://github.com/six2dez/reconftw.git`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "recorded-future",
"name": "Recorded Future",
"description": "Threat intelligence platform",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "manual",
"kali": "Recorded Future",
"raw": "Recorded Future"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"Recorded Future"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "reddit-investigator",
"name": "Reddit Investigator",
"description": "Reddit user analysis",
"category": "username-social",
"url": "https://reddit-user-analyser.netlify.app/",
"install": {
"method": "web",
"kali": "",
"raw": "[reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/)"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "redditmetis",
"name": "RedditMetis",
"description": "Reddit user analysis — summary, top posts, activity stats",
"category": "username-social",
"url": "https://redditmetis.com",
"install": {
"method": "web",
"kali": "",
"raw": "[redditmetis.com](https://redditmetis.com)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "redditsearch-io",
"name": "RedditSearch.io",
"description": "Search archived Reddit content via Pushshift mirror",
"category": "username-social",
"url": "https://redditsearch.io",
"install": {
"method": "web",
"kali": "",
"raw": "[redditsearch.io](https://redditsearch.io)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "regripper",
"name": "RegRipper",
"description": "Open-source Windows registry parsing tool",
"category": "digital-forensics",
"url": "https://github.com/keydet89/RegRipper3.0",
"install": {
"method": "git",
"kali": "git clone https://github.com/keydet89/RegRipper3.0.git",
"raw": "`git clone https://github.com/keydet89/RegRipper3.0.git`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rekall",
"name": "Rekall",
"description": "Memory forensics tooling (legacy fork of Volatility)",
"category": "digital-forensics",
"url": "https://github.com/google/rekall",
"install": {
"method": "pip",
"kali": "pip3 install rekall",
"raw": "`pip3 install rekall`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "responder",
"name": "Responder",
"description": "LLMNR/NBT-NS/MDNS poisoner",
"category": "data-breach",
"url": "https://github.com/lgandx/Responder",
"install": {
"method": "git",
"kali": "`git clone https://github.com/lgandx/Responder`",
"raw": "`git clone https://github.com/lgandx/Responder`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Password Cracking & Credential Tools"
],
"archived": false
},
{
"id": "revealer-cc",
"name": "Revealer.cc",
"description": "Discord-based account-checker & breach lookup",
"category": "data-breach",
"url": "https://revealer.cc",
"install": {
"method": "web",
"kali": "",
"raw": "[revealer.cc](https://revealer.cc)"
},
"tags": [
"data-breach",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "reverse-whois-domaineye",
"name": "DomainEye Reverse WHOIS",
"description": "Search domains by registrant data",
"category": "people-identity",
"url": "https://domaineye.com/reverse-whois",
"install": {
"method": "web",
"kali": "",
"raw": "[domaineye.com](https://domaineye.com/reverse-whois)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "riseupvpn",
"name": "RiseupVPN",
"description": "Free VPN by Riseup collective — no accounts, no tracking",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install riseup-vpn`",
"raw": "`apt install riseup-vpn`"
},
"tags": [
"vpn-privacy",
"free-tier:Unlimited, no account needed",
"open-source:✅",
"no-log:✅",
"protocols:OpenVPN (Bitmask)"
],
"source_versions": [
"v2"
],
"aliases": [
"RiseupVPN"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "rita",
"name": "RITA",
"description": "Real Intelligence Threat Analytics — beaconing/long-conn detection",
"category": "blue-team-defensive",
"url": "https://github.com/activecm/rita",
"install": {
"method": "git",
"kali": "git clone https://github.com/activecm/rita.git",
"raw": "`git clone https://github.com/activecm/rita.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rizin",
"name": "rizin",
"description": "Modern fork of radare2 with cleaner API",
"category": "digital-forensics",
"url": "https://rizin.re",
"install": {
"method": "git",
"kali": "git clone https://github.com/rizinorg/rizin.git",
"raw": "`git clone https://github.com/rizinorg/rizin.git`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "robtex",
"name": "Robtex",
"description": "DNS lookup visualization",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Robtex",
"raw": "Robtex"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Robtex"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "rocketreach",
"name": "RocketReach",
"description": "Find professional emails/phones for 700M+ profiles",
"category": "people-identity",
"url": "https://rocketreach.co",
"install": {
"method": "web",
"kali": "",
"raw": "[rocketreach.co](https://rocketreach.co)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rockyou",
"name": "RockYou",
"description": "Classic leaked password list",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "Pre-installed in Kali (`/usr/share/wordlists/`)",
"raw": "Pre-installed in Kali (`/usr/share/wordlists/`)"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Wordlist Generation & Brute Force"
],
"archived": false
},
{
"id": "root-me",
"name": "Root-Me",
"description": "500+ challenges and 100+ virtual labs",
"category": "training-ctf",
"url": "https://www.root-me.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.root-me.org](https://www.root-me.org)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rtfm-redteam",
"name": "RTFM: Red Team Field Manual",
"description": "Concise red-team command reference",
"category": "learning-resources",
"url": "https://www.amazon.com/dp/B07RJG62SJ",
"install": {
"method": "web",
"kali": "",
"raw": "[www.amazon.com](https://www.amazon.com/dp/B07RJG62SJ)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rtl-sdr",
"name": "RTL-SDR",
"description": "Cheap ($30) SDR receiver — entry into RF",
"category": "hardware-hacking",
"url": "https://www.rtl-sdr.com",
"install": {
"method": "apt",
"kali": "apt install rtl-sdr",
"raw": "`apt install rtl-sdr`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rubeus",
"name": "Rubeus",
"description": "C# toolset for raw Kerberos interaction and abuse",
"category": "red-team-offensive",
"url": "https://github.com/GhostPack/Rubeus",
"install": {
"method": "git",
"kali": "git clone https://github.com/GhostPack/Rubeus.git",
"raw": "`git clone https://github.com/GhostPack/Rubeus.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "rustscan",
"name": "RustScan",
"description": "Modern port scanner — finds open ports, then pipes to Nmap",
"category": "domain-ip-network",
"url": "https://github.com/RustScan/RustScan",
"install": {
"method": "git",
"kali": "git clone https://github.com/RustScan/RustScan.git",
"raw": "`git clone https://github.com/RustScan/RustScan.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "scalpel",
"name": "Scalpel",
"description": "File carving tool",
"category": "document-metadata",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install scalpel`",
"raw": "`apt install scalpel`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "scamadviser",
"name": "ScamAdviser",
"description": "Check website trustworthiness scores",
"category": "malware-threat-intel",
"url": "https://www.scamadviser.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.scamadviser.com](https://www.scamadviser.com)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "scatteredsecrets",
"name": "ScatteredSecrets",
"description": "Breach notification service",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟡 Freemium",
"raw": "🟡 Freemium"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "scribd-search",
"name": "Scribd",
"description": "Search for documents, presentations, sheet music, ebooks",
"category": "document-metadata",
"url": "https://www.scribd.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.scribd.com](https://www.scribd.com)"
},
"tags": [
"document-metadata",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "search-by-image",
"name": "Search by Image",
"description": "Multi-engine reverse image (browser ext)",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Chrome / Firefox extension",
"raw": "Chrome / Firefox extension"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "search4faces",
"name": "Search4faces",
"description": "Face search in VK/OK social networks",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Search4faces",
"raw": "Search4faces"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Search4faces"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "searchcode",
"name": "searchcode",
"description": "Search 75+ billion lines of public source code across GitHub/GitLab/Bitbucket",
"category": "search-dorking",
"url": "https://searchcode.com",
"install": {
"method": "web",
"kali": "",
"raw": "[searchcode.com](https://searchcode.com)"
},
"tags": [
"search-dorking",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "searxng",
"name": "SearXNG",
"description": "Privacy-respecting metasearch engine",
"category": "search-dorking",
"url": "",
"install": {
"method": "manual",
"kali": "SearXNG",
"raw": "SearXNG"
},
"tags": [
"search-dorking"
],
"source_versions": [
"v2"
],
"aliases": [
"SearXNG"
],
"sections_seen": [
"Search & Dorking Tools"
],
"archived": false
},
{
"id": "sec-edgar",
"name": "SEC EDGAR",
"description": "US company filings",
"category": "company-business",
"url": "",
"install": {
"method": "manual",
"kali": "SEC EDGAR",
"raw": "SEC EDGAR"
},
"tags": [
"company-business"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"SEC EDGAR"
],
"sections_seen": [
"Financial & Corporate Intelligence"
],
"archived": false
},
{
"id": "seclists",
"name": "SecLists",
"description": "The ultimate security wordlist collection",
"category": "data-breach",
"url": "https://github.com/danielmiessler/SecLists",
"install": {
"method": "git",
"kali": "`git clone https://github.com/danielmiessler/SecLists`",
"raw": "`git clone https://github.com/danielmiessler/SecLists`"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"SecLists"
],
"sections_seen": [
"Wordlist Generation & Brute Force"
],
"archived": false
},
{
"id": "security-onion",
"name": "Security Onion",
"description": "Linux distro for threat hunting, monitoring, and log management",
"category": "blue-team-defensive",
"url": "https://securityonionsolutions.com",
"install": {
"method": "web",
"kali": "",
"raw": "[securityonionsolutions.com](https://securityonionsolutions.com)"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "securitytrails",
"name": "SecurityTrails",
"description": "DNS & domain intelligence",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "SecurityTrails",
"raw": "SecurityTrails"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"SecurityTrails"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "seeker",
"name": "Seeker",
"description": "Geolocation by phishing — collects precise GPS via WebRTC + browser geolocation",
"category": "people-identity",
"url": "https://github.com/thewhiteh4t/seeker",
"install": {
"method": "git",
"kali": "git clone https://github.com/thewhiteh4t/seeker.git",
"raw": "`git clone https://github.com/thewhiteh4t/seeker.git`"
},
"tags": [
"people-identity",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "seekr",
"name": "Seekr",
"description": "Multi-purpose OSINT toolkit with web interface",
"category": "username-social",
"url": "https://github.com/seekr-osint/seekr",
"install": {
"method": "git",
"kali": "`git clone https://github.com/seekr-osint/seekr`",
"raw": "`git clone https://github.com/seekr-osint/seekr`"
},
"tags": [
"username-social"
],
"source_versions": [
"v2"
],
"aliases": [
"Seekr"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "sentinel-hub",
"name": "Sentinel Hub",
"description": "Multi-source satellite imagery access",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "Sentinel Hub",
"raw": "Sentinel Hub"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Sentinel Hub"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "set",
"name": "SET",
"description": "Social engineering toolkit",
"category": "frameworks",
"url": "",
"install": {
"method": "manual",
"kali": "`setoolkit`",
"raw": "`setoolkit`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Kali Linux OSINT Toolkit"
],
"archived": false
},
{
"id": "set-social-engineering-toolkit",
"name": "SET (Social Engineering Toolkit)",
"description": "Complete SE framework",
"category": "people-identity",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install set`",
"raw": "`apt install set`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "shadowmap",
"name": "ShadowMap",
"description": "Shadow analysis for time estimation",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "ShadowMap",
"raw": "ShadowMap"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"ShadowMap"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "shadowserver-dashboard",
"name": "Shadowserver Dashboard",
"description": "Global statistics on cyber threats by Shadowserver Foundation",
"category": "malware-threat-intel",
"url": "https://dashboard.shadowserver.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[dashboard.shadowserver.org](https://dashboard.shadowserver.org/)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sharphound",
"name": "SharpHound",
"description": "C# data collector for BloodHound",
"category": "red-team-offensive",
"url": "https://github.com/BloodHoundAD/SharpHound",
"install": {
"method": "git",
"kali": "git clone https://github.com/BloodHoundAD/SharpHound.git",
"raw": "`git clone https://github.com/BloodHoundAD/SharpHound.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sherlock",
"name": "Sherlock",
"description": "Hunt down social media accounts by username across 400+ sites",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install sherlock-project`",
"raw": "`pip install sherlock-project`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Sherlock"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "sherlockeye",
"name": "SherlockEye",
"description": "Search publicly available info connected to a username",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "SherlockEye",
"raw": "SherlockEye"
},
"tags": [
"username-social"
],
"source_versions": [
"v2"
],
"aliases": [
"SherlockEye"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "sherloq",
"name": "Sherloq",
"description": "Open-source image forensics toolset",
"category": "image-facial",
"url": "https://github.com/GuidoBartoli/sherloq",
"install": {
"method": "git",
"kali": "git clone https://github.com/GuidoBartoli/sherloq.git",
"raw": "`git clone https://github.com/GuidoBartoli/sherloq.git`"
},
"tags": [
"image-facial",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "shodan",
"name": "Shodan",
"description": "Internet-connected device search",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install shodan`",
"raw": "`pip3 install shodan`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Shodan"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "shodan-cli-tool",
"name": "Shodan CLI",
"description": "Official Shodan command-line client",
"category": "search-dorking",
"url": "https://github.com/achillean/shodan-python",
"install": {
"method": "pip",
"kali": "pip3 install shodan",
"raw": "`pip3 install shodan`"
},
"tags": [
"search-dorking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "shodan-iot",
"name": "Shodan (IoT)",
"description": "IoT and device search engine",
"category": "iot-devices",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install shodan`",
"raw": "`pip3 install shodan`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v2"
],
"aliases": [
"Shodan (IoT)"
],
"sections_seen": [
"IoT & Device Intelligence"
],
"archived": false
},
{
"id": "shodanspider",
"name": "ShodanSpider",
"description": "Shodan scanning automation tool",
"category": "iot-devices",
"url": "https://github.com/shubhamrooter/ShodanSpider",
"install": {
"method": "git",
"kali": "`git clone https://github.com/shubhamrooter/ShodanSpider`",
"raw": "`git clone https://github.com/shubhamrooter/ShodanSpider`"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v2"
],
"aliases": [
"ShodanSpider"
],
"sections_seen": [
"IoT & Device Intelligence"
],
"archived": false
},
{
"id": "sigma",
"name": "Sigma",
"description": "Generic signature format for SIEM detections",
"category": "blue-team-defensive",
"url": "https://github.com/SigmaHQ/sigma",
"install": {
"method": "git",
"kali": "git clone https://github.com/SigmaHQ/sigma.git",
"raw": "`git clone https://github.com/SigmaHQ/sigma.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sigma-cli",
"name": "sigma-cli",
"description": "Convert Sigma rules to native SIEM queries",
"category": "blue-team-defensive",
"url": "https://github.com/SigmaHQ/sigma-cli",
"install": {
"method": "pip",
"kali": "pip3 install sigma-cli",
"raw": "`pip3 install sigma-cli`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "signal",
"name": "Signal",
"description": "Encrypted messaging",
"category": "vpn-privacy",
"url": "https://signal.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[signal.org](https://signal.org/)"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "simplelogin",
"name": "SimpleLogin",
"description": "Email alias service for OSINT",
"category": "email-phone",
"url": "https://simplelogin.io/",
"install": {
"method": "web",
"kali": "",
"raw": "[simplelogin.io](https://simplelogin.io/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "sleuthkit",
"name": "The Sleuth Kit",
"description": "Library and CLI tools for forensic disk analysis",
"category": "digital-forensics",
"url": "https://www.sleuthkit.org",
"install": {
"method": "apt",
"kali": "apt install sleuthkit",
"raw": "`apt install sleuthkit`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "slideshare-search",
"name": "SlideShare",
"description": "Search public PowerPoint/PDF presentations",
"category": "document-metadata",
"url": "https://www.slideshare.net",
"install": {
"method": "web",
"kali": "",
"raw": "[www.slideshare.net](https://www.slideshare.net)"
},
"tags": [
"document-metadata",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sliver",
"name": "Sliver",
"description": "Open-source adversary emulation/red-team framework (Cobalt Strike alt)",
"category": "red-team-offensive",
"url": "https://github.com/BishopFox/sliver",
"install": {
"method": "go",
"kali": "go install github.com/bishopfox/sliver/server@latest",
"raw": "`go install github.com/bishopfox/sliver/server@latest`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "smap",
"name": "smap",
"description": "Drop-in replacement for nmap powered by shodan.io",
"category": "domain-ip-network",
"url": "https://github.com/s0md3v/Smap",
"install": {
"method": "go",
"kali": "go install github.com/s0md3v/smap/cmd/smap@latest",
"raw": "`go install github.com/s0md3v/smap/cmd/smap@latest`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sn0int",
"name": "sn0int",
"description": "Semi-automatic OSINT framework in Rust",
"category": "frameworks",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install sn0int`",
"raw": "`apt install sn0int`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"sn0int"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "sn1per",
"name": "Sn1per",
"description": "Automated pentest reconnaissance scanner",
"category": "domain-ip-network",
"url": "https://github.com/1N3/Sn1per.git",
"install": {
"method": "git",
"kali": "`git clone https://github.com/1N3/Sn1per.git`",
"raw": "`git clone https://github.com/1N3/Sn1per.git`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"Sn1per"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "snoop",
"name": "Snoop",
"description": "Username search with Russian-focused platforms",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install snoop`",
"raw": "`pip install snoop`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Snoop"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "snort",
"name": "Snort",
"description": "Open-source intrusion-prevention/detection system",
"category": "blue-team-defensive",
"url": "https://www.snort.org",
"install": {
"method": "apt",
"kali": "apt install snort",
"raw": "`apt install snort`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "snov.io",
"name": "Snov.io",
"description": "Email finder & verifier",
"category": "email-phone",
"url": "https://snov.io/",
"install": {
"method": "web",
"kali": "",
"raw": "[snov.io](https://snov.io/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "snscrape",
"name": "snscrape",
"description": "Social media scraper (Twitter, Reddit, etc.)",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install snscrape`",
"raw": "`pip install snscrape`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "snusbase",
"name": "Snusbase",
"description": "Breach data search engine",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "💰 Paid",
"raw": "💰 Paid"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Snusbase"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "snusbase-cli",
"name": "Snusbase API",
"description": "API access to breach data (premium)",
"category": "data-breach",
"url": "https://snusbase.com/api",
"install": {
"method": "web",
"kali": "",
"raw": "[snusbase.com](https://snusbase.com/api)"
},
"tags": [
"data-breach",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "social-analyzer",
"name": "Social Analyzer",
"description": "API-based social media profiler for 1000+ sites",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install social-analyzer`",
"raw": "`pip install social-analyzer`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Social Analyzer"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "social-mention",
"name": "Social Mention",
"description": "Social media aggregator",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Yes",
"raw": "✅ Yes"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Searcher Platforms"
],
"archived": false
},
{
"id": "social-searcher",
"name": "Social Searcher",
"description": "Real-time social media search",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Yes",
"raw": "✅ Yes"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Searcher Platforms"
],
"archived": false
},
{
"id": "social-searcher",
"name": "Social-Searcher",
"description": "Free social media search engine",
"category": "username-social",
"url": "https://www.social-searcher.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[social-searcher.com](https://www.social-searcher.com/)"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "socialblade",
"name": "SocialBlade",
"description": "Social media analytics",
"category": "username-social",
"url": "https://socialblade.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[socialblade.com](https://socialblade.com/)"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "socialfish",
"name": "SocialFish",
"description": "Social media phishing",
"category": "people-identity",
"url": "https://github.com/UndeadSec/SocialFish",
"install": {
"method": "git",
"kali": "`git clone https://github.com/UndeadSec/SocialFish`",
"raw": "`git clone https://github.com/UndeadSec/SocialFish`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "socialscan",
"name": "socialscan",
"description": "Check email/username availability",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install socialscan`",
"raw": "`pip install socialscan`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [
"socialscan"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "socid-extractor",
"name": "Socid-extractor",
"description": "Extract user info from web page source code",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install socid-extractor`",
"raw": "`pip install socid-extractor`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Socid-extractor"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "socradar",
"name": "SOCRadar",
"description": "Extended threat intel — attack surface + dark web + brand",
"category": "threat-intel-platforms",
"url": "https://socradar.io",
"install": {
"method": "web",
"kali": "",
"raw": "[socradar.io](https://socradar.io)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sourcegraph",
"name": "SourceGraph",
"description": "Search code from millions of open-source repos",
"category": "search-dorking",
"url": "https://sourcegraph.com/search",
"install": {
"method": "web",
"kali": "",
"raw": "[sourcegraph.com](https://sourcegraph.com/search)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "spiderfoot",
"name": "SpiderFoot",
"description": "OSINT automation platform (200+ modules)",
"category": "frameworks",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install spiderfoot`",
"raw": "`pip3 install spiderfoot`"
},
"tags": [
"frameworks"
],
"source_versions": [
"v2"
],
"aliases": [
"SpiderFoot"
],
"sections_seen": [
"Frameworks & All-in-One Platforms"
],
"archived": false
},
{
"id": "spokeo",
"name": "Spokeo",
"description": "People search aggregator",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Spokeo",
"raw": "Spokeo"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Spokeo"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "spycloud",
"name": "SpyCloud",
"description": "Account-takeover prevention + identity exposure data",
"category": "people-identity",
"url": "https://spycloud.com",
"install": {
"method": "web",
"kali": "",
"raw": "[spycloud.com](https://spycloud.com)"
},
"tags": [
"people-identity",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "spydialer",
"name": "SpyDialer",
"description": "Free reverse phone lookup",
"category": "email-phone",
"url": "https://spydialer.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[spydialer.com](https://spydialer.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "sqlmap",
"name": "SQLMap",
"description": "Automated SQL injection tool",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install sqlmap`",
"raw": "`apt install sqlmap`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"SQLMap"
],
"sections_seen": [
"Vulnerability Scanning & Exploitation"
],
"archived": false
},
{
"id": "ssl-labs",
"name": "SSL Labs",
"description": "SSL/TLS server testing",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "SSL Labs",
"raw": "SSL Labs"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"SSL Labs"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "ssrfmap",
"name": "SSRFmap",
"description": "Automated SSRF detection and exploitation framework",
"category": "red-team-offensive",
"url": "https://github.com/swisskyrepo/SSRFmap",
"install": {
"method": "git",
"kali": "git clone https://github.com/swisskyrepo/SSRFmap.git",
"raw": "`git clone https://github.com/swisskyrepo/SSRFmap.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "startpage",
"name": "Startpage",
"description": "Privacy-focused search — Google results with no tracking",
"category": "search-dorking",
"url": "https://www.startpage.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.startpage.com](https://www.startpage.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "stealseek",
"name": "StealSeek",
"description": "Search engine for finding and analyzing data breaches",
"category": "data-breach",
"url": "https://stealseek.io",
"install": {
"method": "web",
"kali": "",
"raw": "[stealseek.io](https://stealseek.io)"
},
"tags": [
"data-breach",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "storm-breaker",
"name": "Storm-Breaker",
"description": "Access webcam/mic/location (SE)",
"category": "people-identity",
"url": "https://github.com/ultrasecurity/Storm-Breaker",
"install": {
"method": "git",
"kali": "`git clone https://github.com/ultrasecurity/Storm-Breaker`",
"raw": "`git clone https://github.com/ultrasecurity/Storm-Breaker`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [
"Storm-Breaker"
],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "subfinder",
"name": "Subfinder",
"description": "Fast passive subdomain discovery",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "go",
"kali": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`",
"raw": "`go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Subfinder"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "sublist3r",
"name": "Sublist3r",
"description": "Subdomain enumeration",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install sublist3r`",
"raw": "`pip install sublist3r`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Sublist3r"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "subredditstats",
"name": "SubredditStats",
"description": "Subreddit user-overlap, growth, top posts",
"category": "username-social",
"url": "https://subredditstats.com",
"install": {
"method": "web",
"kali": "",
"raw": "[subredditstats.com](https://subredditstats.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sucuri-sitecheck",
"name": "Sucuri SiteCheck",
"description": "Free website malware scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Sucuri SiteCheck",
"raw": "Sucuri SiteCheck"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"Sucuri SiteCheck"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "suncalc",
"name": "SunCalc",
"description": "Sun position/time calculator from photos",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "SunCalc",
"raw": "SunCalc"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"SunCalc"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "suricata",
"name": "Suricata",
"description": "High-perf network IDS / IPS / NSM",
"category": "blue-team-defensive",
"url": "https://suricata.io",
"install": {
"method": "apt",
"kali": "apt install suricata",
"raw": "`apt install suricata`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "synack",
"name": "Synack",
"description": "Crowdsourced + vetted-researcher pentesting platform",
"category": "bug-bounty",
"url": "https://www.synack.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.synack.com](https://www.synack.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "sync.me",
"name": "Sync.me",
"description": "Phone number lookup",
"category": "email-phone",
"url": "https://sync.me/",
"install": {
"method": "web",
"kali": "",
"raw": "[sync.me](https://sync.me/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "tails-os",
"name": "Tails OS",
"description": "Amnesic live OS (no trace)",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Tails OS",
"raw": "Tails OS"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Tails OS"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "talkwalker",
"name": "Talkwalker",
"description": "Social listening & analytics",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "💰 Paid",
"raw": "💰 Paid"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Searcher Platforms"
],
"archived": false
},
{
"id": "tcpdump",
"name": "tcpdump",
"description": "Command-line packet analyzer",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install tcpdump`",
"raw": "`apt install tcpdump`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "telegago",
"name": "Telegago",
"description": "Google CSE for finding public/private Telegram channels",
"category": "username-social",
"url": "https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg",
"install": {
"method": "web",
"kali": "",
"raw": "[cse.google.com](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "telegram-nearby-map",
"name": "Telegram Nearby Map",
"description": "Find positions of nearby Telegram users via OSM",
"category": "username-social",
"url": "https://github.com/tejado/telegram-nearby-map",
"install": {
"method": "git",
"kali": "git clone https://github.com/tejado/telegram-nearby-map.git",
"raw": "`git clone https://github.com/tejado/telegram-nearby-map.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "telegram-osinter",
"name": "TeleGram-OSINTer",
"description": "Telegram profile investigation",
"category": "username-social",
"url": "https://github.com/Alb-310/TeleGram-OSINTer",
"install": {
"method": "git",
"kali": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`",
"raw": "`git clone https://github.com/Alb-310/TeleGram-OSINTer`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Telegram OSINT Bots & Channels"
],
"archived": false
},
{
"id": "telegramdb",
"name": "TelegramDB",
"description": "Telegram user & group lookup database",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "TelegramDB",
"raw": "TelegramDB"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"TelegramDB"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "telepathy",
"name": "Telepathy",
"description": "Telegram OSINT analysis",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install telepathy`",
"raw": "`pip install telepathy`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [
"Telepathy"
],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "telerecon",
"name": "Telerecon",
"description": "Reconnaissance framework for investigating Telegram",
"category": "username-social",
"url": "https://github.com/sockysec/Telerecon",
"install": {
"method": "git",
"kali": "git clone https://github.com/sockysec/Telerecon.git",
"raw": "`git clone https://github.com/sockysec/Telerecon.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "teleteg",
"name": "Teleteg",
"description": "Telegram search engine — 10 free results",
"category": "username-social",
"url": "https://teleteg.com",
"install": {
"method": "web",
"kali": "",
"raw": "[teleteg.com](https://teleteg.com)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "telethon",
"name": "Telethon",
"description": "Python Telegram API library",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install telethon`",
"raw": "`pip install telethon`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Telegram OSINT Bots & Channels"
],
"archived": false
},
{
"id": "telpoisk",
"name": "TelPoisk",
"description": "Russian phone directory",
"category": "email-phone",
"url": "https://telpoisk.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[telpoisk.com](https://telpoisk.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "tg-search-com",
"name": "Telegram Search (lyzem.com)",
"description": "Search public Telegram messages and channels",
"category": "username-social",
"url": "https://lyzem.com",
"install": {
"method": "web",
"kali": "",
"raw": "[lyzem.com](https://lyzem.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "tgstat",
"name": "TGStat",
"description": "Telegram channel analytics — post stats, audience overlap",
"category": "username-social",
"url": "https://tgstat.com",
"install": {
"method": "web",
"kali": "",
"raw": "[tgstat.com](https://tgstat.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "thatsthem",
"name": "ThatsThem",
"description": "Free people search by name/email/phone",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "ThatsThem",
"raw": "ThatsThem"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"ThatsThem"
],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "the-endorser",
"name": "the-endorser",
"description": "Map LinkedIn endorsements/skills to draw out person relationships",
"category": "username-social",
"url": "https://github.com/eth0izzle/the-endorser",
"install": {
"method": "git",
"kali": "git clone https://github.com/eth0izzle/the-endorser.git",
"raw": "`git clone https://github.com/eth0izzle/the-endorser.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "the-osint-rack",
"name": "The OSINT Rack",
"description": "Ransomware & data leak monitoring",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟢 Free",
"raw": "🟢 Free"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "the-web-application-hackers-handbook",
"name": "The Web Application Hacker's Handbook (book)",
"description": "Stuttard & Pinto — appsec bible",
"category": "learning-resources",
"url": "https://www.amazon.com/dp/1118026470",
"install": {
"method": "web",
"kali": "",
"raw": "[www.amazon.com](https://www.amazon.com/dp/1118026470)"
},
"tags": [
"learning-resources",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "theharvester",
"name": "theHarvester",
"description": "Email, subdomain & IP harvesting tool",
"category": "email-phone",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install theHarvester`",
"raw": "`pip install theHarvester`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"theHarvester"
],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "thehive",
"name": "TheHive",
"description": "Scalable, free, open-source case management for SOCs",
"category": "blue-team-defensive",
"url": "https://thehive-project.org",
"install": {
"method": "docker",
"kali": "docker pull strangebee/thehive:latest",
"raw": "`docker pull strangebee/thehive:latest`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "threatconnect",
"name": "ThreatConnect",
"description": "Threat intel platform combining intel and SOAR",
"category": "threat-intel-platforms",
"url": "https://threatconnect.com",
"install": {
"method": "web",
"kali": "",
"raw": "[threatconnect.com](https://threatconnect.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "threatquotient",
"name": "ThreatQ",
"description": "Threat intel platform for SOCs",
"category": "threat-intel-platforms",
"url": "https://www.threatq.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.threatq.com](https://www.threatq.com)"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "tiktok-finder",
"name": "TikTok Finder Country",
"description": "Free OSINT lookup for TikTok account country/language",
"category": "username-social",
"url": "https://tiktokfindercountry.xyz",
"install": {
"method": "web",
"kali": "",
"raw": "[tiktokfindercountry.xyz](https://tiktokfindercountry.xyz)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "tiktok-scraper",
"name": "TikTok Scraper",
"description": "TikTok data extraction",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "`npm install -g tiktok-scraper`",
"raw": "`npm install -g tiktok-scraper`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "tineye",
"name": "TinEye",
"description": "Reverse image search",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "TinEye",
"raw": "TinEye"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"TinEye"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "tor-browser",
"name": "Tor Browser",
"description": "Anonymous web browsing via Tor network",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install torbrowser-launcher`",
"raw": "`apt install torbrowser-launcher`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Tor Browser"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "torch",
"name": "Torch",
"description": "Oldest & largest dark web search engine",
"category": "dark-web",
"url": "",
"install": {
"method": "manual",
"kali": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`",
"raw": "`xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion`"
},
"tags": [
"dark-web"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Torch"
],
"sections_seen": [
"Dark Web Search Engines & Tools"
],
"archived": false
},
{
"id": "torghostng",
"name": "TorghostNG",
"description": "Anonymize all OS traffic via Tor (Linux)",
"category": "dark-web",
"url": "https://github.com/githacktools/TorghostNG",
"install": {
"method": "git",
"kali": "git clone https://github.com/githacktools/TorghostNG.git",
"raw": "`git clone https://github.com/githacktools/TorghostNG.git`"
},
"tags": [
"dark-web",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "tosint",
"name": "TOsint",
"description": "Extract info from Telegram bots and channels",
"category": "username-social",
"url": "https://github.com/drego85/tosint",
"install": {
"method": "git",
"kali": "git clone https://github.com/drego85/tosint.git",
"raw": "`git clone https://github.com/drego85/tosint.git`"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "toutatis",
"name": "Toutatis",
"description": "Instagram OSINT by phone/email",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install toutatis`",
"raw": "`pip install toutatis`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Toutatis"
],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "trace-manus",
"name": "Trace",
"description": "Search usernames, emails, phones across 600+ platforms with risk scoring",
"category": "username-social",
"url": "https://trace.manus.space",
"install": {
"method": "web",
"kali": "",
"raw": "[trace.manus.space](https://trace.manus.space)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "tracee",
"name": "Tracee",
"description": "Runtime security and forensics using eBPF (Aqua)",
"category": "blue-team-defensive",
"url": "https://github.com/aquasecurity/tracee",
"install": {
"method": "git",
"kali": "git clone https://github.com/aquasecurity/tracee.git",
"raw": "`git clone https://github.com/aquasecurity/tracee.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "transit-visualisation",
"name": "Transit Visualisation Client",
"description": "Real-time public transport across 700+ cities",
"category": "vehicle-aviation-maritime",
"url": "https://tracker.geops.ch",
"install": {
"method": "web",
"kali": "",
"raw": "[tracker.geops.ch](https://tracker.geops.ch)"
},
"tags": [
"vehicle-aviation-maritime",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "trends24-tt",
"name": "Trends24",
"description": "Twitter trends history per country",
"category": "username-social",
"url": "https://trends24.in",
"install": {
"method": "web",
"kali": "",
"raw": "[trends24.in](https://trends24.in)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "triage",
"name": "Hatching Triage",
"description": "Modern malware sandbox with kernel-level monitoring",
"category": "malware-threat-intel",
"url": "https://tria.ge",
"install": {
"method": "web",
"kali": "",
"raw": "[tria.ge](https://tria.ge)"
},
"tags": [
"malware-threat-intel",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "trm-labs",
"name": "TRM Labs",
"description": "Crypto compliance and investigation platform",
"category": "crypto-blockchain",
"url": "https://www.trmlabs.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.trmlabs.com](https://www.trmlabs.com)"
},
"tags": [
"crypto-blockchain",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "truecaller",
"name": "Truecaller",
"description": "Global reverse phone number lookup",
"category": "email-phone",
"url": "",
"install": {
"method": "manual",
"kali": "Truecaller",
"raw": "Truecaller"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Truecaller"
],
"sections_seen": [
"Phone Number OSINT"
],
"archived": false
},
{
"id": "trufflehog",
"name": "trufflehog",
"description": "Find secrets in git repos",
"category": "misc",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install trufflehog`",
"raw": "`pip3 install trufflehog`"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"trufflehog"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "tryhackme",
"name": "TryHackMe",
"description": "Beginner-friendly cybersecurity training platform",
"category": "training-ctf",
"url": "https://tryhackme.com",
"install": {
"method": "web",
"kali": "",
"raw": "[tryhackme.com](https://tryhackme.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "twayback",
"name": "Twayback",
"description": "Find deleted tweets",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install twayback`",
"raw": "`pip install twayback`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "tweetbinder",
"name": "TweetBinder",
"description": "Twitter/X analytics dashboards",
"category": "username-social",
"url": "https://www.tweetbinder.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.tweetbinder.com](https://www.tweetbinder.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "twint",
"name": "Twint",
"description": "Twitter OSINT (no API needed)",
"category": "username-social",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install twint`",
"raw": "`pip install twint`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Monitoring"
],
"archived": false
},
{
"id": "twitch-search",
"name": "Twitch Search",
"description": "Search live streams by category, language, viewer count",
"category": "username-social",
"url": "https://www.twitch.tv/directory",
"install": {
"method": "web",
"kali": "",
"raw": "[www.twitch.tv](https://www.twitch.tv/directory)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "twiteur-osint",
"name": "Twiteur",
"description": "Twitter/X advanced search wrapper — geo, date, sentiment",
"category": "username-social",
"url": "https://twiteur.com",
"install": {
"method": "web",
"kali": "",
"raw": "[twiteur.com](https://twiteur.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "u-find-com",
"name": "U-Find",
"description": "Reddit user comment / submission scraper",
"category": "username-social",
"url": "https://u-find.com",
"install": {
"method": "web",
"kali": "",
"raw": "[u-find.com](https://u-find.com)"
},
"tags": [
"username-social",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "ubertooth",
"name": "Ubertooth One",
"description": "Open-source 2.4 GHz wireless dev platform — Bluetooth research",
"category": "hardware-hacking",
"url": "https://greatscottgadgets.com/ubertoothone/",
"install": {
"method": "apt",
"kali": "apt install ubertooth",
"raw": "`apt install ubertooth`"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "uncover",
"name": "uncover",
"description": "ProjectDiscovery — quickly find exposed hosts via Shodan/Censys/Fofa",
"category": "search-dorking",
"url": "https://github.com/projectdiscovery/uncover",
"install": {
"method": "go",
"kali": "go install github.com/projectdiscovery/uncover/cmd/uncover@latest",
"raw": "`go install github.com/projectdiscovery/uncover/cmd/uncover@latest`"
},
"tags": [
"search-dorking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "unfurl",
"name": "Unfurl",
"description": "URL & data artifact analysis tool",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "Unfurl",
"raw": "Unfurl"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"Unfurl"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "urlcadiz",
"name": "URLCADIZ",
"description": "URL masking tool",
"category": "people-identity",
"url": "https://github.com/PerezMascato/URLCADIZ",
"install": {
"method": "git",
"kali": "`git clone https://github.com/PerezMascato/URLCADIZ`",
"raw": "`git clone https://github.com/PerezMascato/URLCADIZ`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
},
{
"id": "urlcrazy",
"name": "URLCrazy",
"description": "Generate domain typos and check availability/registration",
"category": "domain-ip-network",
"url": "https://github.com/urbanadventurer/urlcrazy",
"install": {
"method": "git",
"kali": "git clone https://github.com/urbanadventurer/urlcrazy.git",
"raw": "`git clone https://github.com/urbanadventurer/urlcrazy.git`"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "urlhaus",
"name": "URLhaus (abuse.ch)",
"description": "Database of malicious URLs used for malware distribution",
"category": "malware-threat-intel",
"url": "https://urlhaus.abuse.ch",
"install": {
"method": "web",
"kali": "",
"raw": "[urlhaus.abuse.ch](https://urlhaus.abuse.ch)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "urlscan.io",
"name": "urlscan.io",
"description": "URL/domain analysis & screenshots",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "urlscan.io",
"raw": "urlscan.io"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"urlscan.io"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "user-scanner",
"name": "user-scanner",
"description": "Check username presence across dev/social/gaming sites",
"category": "username-social",
"url": "https://github.com/kaifcodec/user-scanner.git",
"install": {
"method": "git",
"kali": "`git clone https://github.com/kaifcodec/user-scanner.git`",
"raw": "`git clone https://github.com/kaifcodec/user-scanner.git`"
},
"tags": [
"username-social"
],
"source_versions": [
"v2"
],
"aliases": [
"user-scanner"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "user-searcher",
"name": "User-Searcher",
"description": "Search a username across 2000+ websites",
"category": "username-social",
"url": "https://www.user-searcher.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.user-searcher.com](https://www.user-searcher.com)"
},
"tags": [
"username-social",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "userrecon",
"name": "UserRecon",
"description": "Bash-based username finder across platforms",
"category": "username-social",
"url": "https://github.com/wishihab/userrecon.git",
"install": {
"method": "git",
"kali": "`git clone https://github.com/wishihab/userrecon.git`",
"raw": "`git clone https://github.com/wishihab/userrecon.git`"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"UserRecon"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "usersearch.org",
"name": "Usersearch.org",
"description": "Free social network search",
"category": "username-social",
"url": "https://usersearch.org/",
"install": {
"method": "web",
"kali": "",
"raw": "[usersearch.org](https://usersearch.org/)"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "vehicle-number-toolbox",
"name": "Vehicle Number Search Toolbox",
"description": "Search 14 country license plates from one page",
"category": "vehicle-aviation-maritime",
"url": "https://cipher387.github.io/venicle_number_search_toolbox/",
"install": {
"method": "web",
"kali": "",
"raw": "[cipher387.github.io](https://cipher387.github.io/venicle_number_search_toolbox/)"
},
"tags": [
"vehicle-aviation-maritime",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "velociraptor",
"name": "Velociraptor",
"description": "Endpoint visibility and digital forensics — query-driven",
"category": "blue-team-defensive",
"url": "https://github.com/Velocidex/velociraptor",
"install": {
"method": "git",
"kali": "git clone https://github.com/Velocidex/velociraptor.git",
"raw": "`git clone https://github.com/Velocidex/velociraptor.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "velocirector",
"name": "Velociraptor Server",
"description": "Centralized server for Velociraptor agents",
"category": "blue-team-defensive",
"url": "https://docs.velociraptor.app",
"install": {
"method": "web",
"kali": "",
"raw": "[docs.velociraptor.app](https://docs.velociraptor.app)"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "venacus",
"name": "Venacus",
"description": "Search for your data breaches and get notified when compromised",
"category": "data-breach",
"url": "https://venacus.com",
"install": {
"method": "web",
"kali": "",
"raw": "[venacus.com](https://venacus.com)"
},
"tags": [
"data-breach",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "veracrypt",
"name": "VeraCrypt",
"description": "Disk encryption",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install veracrypt`",
"raw": "`apt install veracrypt`"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"VeraCrypt"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "vesselfinder",
"name": "VesselFinder",
"description": "Free AIS vessel tracking",
"category": "vehicle-aviation-maritime",
"url": "",
"install": {
"method": "manual",
"kali": "VesselFinder",
"raw": "VesselFinder"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v2"
],
"aliases": [
"VesselFinder"
],
"sections_seen": [
"Vehicle, Aviation & Maritime"
],
"archived": false
},
{
"id": "viewdns",
"name": "ViewDNS",
"description": "Multiple DNS investigation tools",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "ViewDNS",
"raw": "ViewDNS"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"ViewDNS"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "vigilante-pw",
"name": "Vigilante.pw",
"description": "Index of dumped databases (educational)",
"category": "data-breach",
"url": "https://vigilante.pw",
"install": {
"method": "web",
"kali": "",
"raw": "[vigilante.pw](https://vigilante.pw)"
},
"tags": [
"data-breach",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "villain",
"name": "Villain",
"description": "High-level stage 0/1 C2 framework for handling sibling agents",
"category": "red-team-offensive",
"url": "https://github.com/t3l3machus/Villain",
"install": {
"method": "git",
"kali": "git clone https://github.com/t3l3machus/Villain.git",
"raw": "`git clone https://github.com/t3l3machus/Villain.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "virustotal",
"name": "VirusTotal",
"description": "Domain/IP/file analysis",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "VirusTotal",
"raw": "VirusTotal"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"VirusTotal"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "virustotal-threat",
"name": "VirusTotal (Threat)",
"description": "File/URL/domain malware analysis",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "manual",
"kali": "VirusTotal (Threat)",
"raw": "VirusTotal (Threat)"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"VirusTotal (Threat)"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "vmray",
"name": "VMRay Analyzer",
"description": "Malware sandbox analysis platform",
"category": "malware-threat-intel",
"url": "https://www.vmray.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.vmray.com](https://www.vmray.com)"
},
"tags": [
"malware-threat-intel",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "voila-norbert",
"name": "Voila Norbert",
"description": "Find anyone's email",
"category": "email-phone",
"url": "https://voilanorbert.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[voilanorbert.com](https://voilanorbert.com/)"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "volatility",
"name": "Volatility",
"description": "Memory forensics framework",
"category": "document-metadata",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install volatility3`",
"raw": "`pip install volatility3`"
},
"tags": [
"document-metadata"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Volatility"
],
"sections_seen": [
"Metadata & Digital Forensics"
],
"archived": false
},
{
"id": "volatility3",
"name": "Volatility 3",
"description": "Memory forensics framework",
"category": "digital-forensics",
"url": "https://github.com/volatilityfoundation/volatility3",
"install": {
"method": "pip",
"kali": "pip3 install volatility3",
"raw": "`pip3 install volatility3`"
},
"tags": [
"digital-forensics",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "vulnhub",
"name": "VulnHub",
"description": "Free downloadable vulnerable VMs for offline practice",
"category": "training-ctf",
"url": "https://www.vulnhub.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.vulnhub.com](https://www.vulnhub.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "vulnyx",
"name": "VulnYX",
"description": "Online platform with vulnerable boxes (free + premium)",
"category": "training-ctf",
"url": "https://vulnyx.com",
"install": {
"method": "web",
"kali": "",
"raw": "[vulnyx.com](https://vulnyx.com)"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "walletexplorer",
"name": "WalletExplorer",
"description": "Smart bitcoin block explorer — clusters addresses by entity",
"category": "crypto-blockchain",
"url": "https://walletexplorer.com",
"install": {
"method": "web",
"kali": "",
"raw": "[walletexplorer.com](https://walletexplorer.com)"
},
"tags": [
"crypto-blockchain",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "wappalyzer",
"name": "Wappalyzer",
"description": "Technology profiler (browser ext)",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Browser Extension",
"raw": "Browser Extension"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Wappalyzer"
],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "wayback-machine",
"name": "Wayback Machine",
"description": "Web archive - explore website history",
"category": "misc",
"url": "",
"install": {
"method": "manual",
"kali": "Wayback Machine",
"raw": "Wayback Machine"
},
"tags": [
"misc"
],
"source_versions": [
"v2"
],
"aliases": [
"Wayback Machine"
],
"sections_seen": [
"Miscellaneous / Niche Tools"
],
"archived": false
},
{
"id": "waybackurls",
"name": "waybackurls",
"description": "Fetch all URLs the Wayback Machine knows about a domain",
"category": "domain-ip-network",
"url": "https://github.com/tomnomnom/waybackurls",
"install": {
"method": "go",
"kali": "go install github.com/tomnomnom/waybackurls@latest",
"raw": "`go install github.com/tomnomnom/waybackurls@latest`"
},
"tags": [
"domain-ip-network",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "wazuh",
"name": "Wazuh",
"description": "Open-source XDR / SIEM platform",
"category": "blue-team-defensive",
"url": "https://wazuh.com",
"install": {
"method": "git",
"kali": "git clone https://github.com/wazuh/wazuh.git",
"raw": "`git clone https://github.com/wazuh/wazuh.git`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "weakpass",
"name": "Weakpass",
"description": "Massive wordlist collection",
"category": "data-breach",
"url": "https://weakpass.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[weakpass.com](https://weakpass.com/)"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Wordlist Generation & Brute Force"
],
"archived": false
},
{
"id": "web-check",
"name": "Web-Check",
"description": "All-in-one website analysis",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "Web-Check",
"raw": "Web-Check"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Web-Check"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "webgoat",
"name": "OWASP WebGoat",
"description": "Deliberately insecure Java-based web app for training",
"category": "training-ctf",
"url": "https://github.com/WebGoat/WebGoat",
"install": {
"method": "docker",
"kali": "docker pull webgoat/webgoat",
"raw": "`docker pull webgoat/webgoat`"
},
"tags": [
"training-ctf",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "webhack",
"name": "WebHack",
"description": "Web hacking toolkit",
"category": "domain-ip-network",
"url": "https://github.com/yan4ikyt/webhack",
"install": {
"method": "git",
"kali": "`git clone https://github.com/yan4ikyt/webhack`",
"raw": "`git clone https://github.com/yan4ikyt/webhack`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "webmii",
"name": "WebMii",
"description": "People search engine",
"category": "image-facial",
"url": "https://webmii.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[webmii.com](https://webmii.com/)"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Facial Recognition & People Search"
],
"archived": false
},
{
"id": "wfuzz",
"name": "Wfuzz",
"description": "Web fuzzer",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "pip",
"kali": "`pip install wfuzz`",
"raw": "`pip install wfuzz`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "whatmail",
"name": "WhatMail",
"description": "Email header analysis CLI",
"category": "email-phone",
"url": "https://github.com/z0m31en7/WhatMail",
"install": {
"method": "git",
"kali": "`git clone https://github.com/z0m31en7/WhatMail`",
"raw": "`git clone https://github.com/z0m31en7/WhatMail`"
},
"tags": [
"email-phone"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Email OSINT Tools"
],
"archived": false
},
{
"id": "whatsmyname",
"name": "WhatsMyName",
"description": "Web-based username enumeration",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "WhatsMyName",
"raw": "WhatsMyName"
},
"tags": [
"username-social"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"WhatsMyName"
],
"sections_seen": [
"Username & Social Media OSINT"
],
"archived": false
},
{
"id": "whatweb",
"name": "Whatweb",
"description": "Web technology identifier",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install whatweb`",
"raw": "`apt install whatweb`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Whatweb"
],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "who-owns-what",
"name": "Who Owns What",
"description": "NYC landlord portfolio lookup",
"category": "vehicle-aviation-maritime",
"url": "https://whoownswhat.justfix.org/en/",
"install": {
"method": "web",
"kali": "",
"raw": "[whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "who-posted-what",
"name": "Who Posted What",
"description": "Facebook keyword search",
"category": "username-social",
"url": "",
"install": {
"method": "manual",
"kali": "✅ Free",
"raw": "✅ Free"
},
"tags": [
"username-social"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Social Media Searcher Platforms"
],
"archived": false
},
{
"id": "whois.com",
"name": "WHOIS.com",
"description": "WHOIS domain registration lookup",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "WHOIS.com",
"raw": "WHOIS.com"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"WHOIS.com"
],
"sections_seen": [
"Domain & IP OSINT"
],
"archived": false
},
{
"id": "whoisology",
"name": "Whoisology",
"description": "Reverse WHOIS — find domains by registrant",
"category": "domain-ip-network",
"url": "https://whoisology.com",
"install": {
"method": "web",
"kali": "",
"raw": "[whoisology.com](https://whoisology.com)"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "whonix",
"name": "Whonix",
"description": "Anonymous OS via Tor (VM-based)",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Whonix",
"raw": "Whonix"
},
"tags": [
"vpn-privacy"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Whonix"
],
"sections_seen": [
"Anonymous & Privacy Tools"
],
"archived": false
},
{
"id": "whoxy",
"name": "Whoxy",
"description": "WHOIS lookup with reverse-WHOIS, history, and bulk API",
"category": "domain-ip-network",
"url": "https://www.whoxy.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.whoxy.com](https://www.whoxy.com)"
},
"tags": [
"domain-ip-network",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "wifi-pineapple",
"name": "Wi-Fi Pineapple",
"description": "Hak5's wireless auditing platform",
"category": "hardware-hacking",
"url": "https://shop.hak5.org/products/wifi-pineapple",
"install": {
"method": "web",
"kali": "",
"raw": "[shop.hak5.org](https://shop.hak5.org/products/wifi-pineapple)"
},
"tags": [
"hardware-hacking",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "wifite",
"name": "Wifite",
"description": "Automated Wi-Fi auditing tool",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install wifite`",
"raw": "`apt install wifite`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "wigle",
"name": "WiGLE",
"description": "Wireless network mapping database",
"category": "iot-devices",
"url": "",
"install": {
"method": "manual",
"kali": "WiGLE",
"raw": "WiGLE"
},
"tags": [
"iot-devices"
],
"source_versions": [
"v2"
],
"aliases": [
"WiGLE"
],
"sections_seen": [
"IoT & Device Intelligence"
],
"archived": false
},
{
"id": "wikidata",
"name": "Wikidata",
"description": "Wikipedia's structured-data backbone — query via SPARQL",
"category": "people-identity",
"url": "https://www.wikidata.org",
"install": {
"method": "web",
"kali": "",
"raw": "[www.wikidata.org](https://www.wikidata.org)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "wikimapia",
"name": "Wikimapia",
"description": "Collaborative world map with annotations",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "Wikimapia",
"raw": "Wikimapia"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Wikimapia"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "wikipedia-search",
"name": "Wikipedia",
"description": "Free encyclopedia — start of every people/place investigation",
"category": "people-identity",
"url": "https://en.wikipedia.org",
"install": {
"method": "web",
"kali": "",
"raw": "[en.wikipedia.org](https://en.wikipedia.org)"
},
"tags": [
"people-identity",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "windscribe-free",
"name": "Windscribe Free",
"description": "Generous free VPN with 10GB/month and ad blocking",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "manual",
"kali": "Website",
"raw": "Website"
},
"tags": [
"vpn-privacy",
"free-tier:10GB/month, 10 countries",
"open-source:❌",
"no-log:✅",
"protocols:WireGuard, OpenVPN, IKEv2"
],
"source_versions": [
"v2"
],
"aliases": [
"Windscribe Free"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "wireguard",
"name": "WireGuard",
"description": "Modern VPN protocol — ultra-fast, minimal attack surface",
"category": "vpn-privacy",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install wireguard`",
"raw": "`apt install wireguard`"
},
"tags": [
"vpn-privacy",
"free-tier:Free open-source protocol (self-hosted)",
"open-source:✅",
"no-log:✅",
"protocols:WireGuard (native)"
],
"source_versions": [
"v2"
],
"aliases": [
"WireGuard"
],
"sections_seen": [
"Free VPN & Privacy Tools"
],
"archived": false
},
{
"id": "wireshark",
"name": "Wireshark",
"description": "Network protocol analyzer",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install wireshark`",
"raw": "`apt install wireshark`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"Wireshark"
],
"sections_seen": [
"Network & Wireless Tools"
],
"archived": false
},
{
"id": "worldlicenseplates",
"name": "WorldLicensePlates",
"description": "Graphic index of license plates by country",
"category": "vehicle-aviation-maritime",
"url": "http://www.worldlicenseplates.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.worldlicenseplates.com](http://www.worldlicenseplates.com)"
},
"tags": [
"vehicle-aviation-maritime",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "wpscan",
"name": "WPScan",
"description": "WordPress vulnerability scanner",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "`gem install wpscan`",
"raw": "`gem install wpscan`"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v1"
],
"aliases": [
"WPScan"
],
"sections_seen": [
"Web Application OSINT & Scanning"
],
"archived": false
},
{
"id": "xeuledoc",
"name": "XeuleDoc",
"description": "Fetch info on Google Docs/Sheets/Slides/Drawings without auth",
"category": "document-metadata",
"url": "https://github.com/Malfrats/xeuledoc",
"install": {
"method": "pip",
"kali": "pip3 install xeuledoc",
"raw": "`pip3 install xeuledoc`"
},
"tags": [
"document-metadata",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "xposedornot",
"name": "XposedOrNot",
"description": "Breach exposure check",
"category": "data-breach",
"url": "",
"install": {
"method": "manual",
"kali": "🟢 Free",
"raw": "🟢 Free"
},
"tags": [
"data-breach"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"XposedOrNot"
],
"sections_seen": [
"Data Breach & Leak Search Engines"
],
"archived": false
},
{
"id": "xsstrike",
"name": "XSStrike",
"description": "Advanced XSS scanner with crawler and payload generator",
"category": "red-team-offensive",
"url": "https://github.com/s0md3v/XSStrike",
"install": {
"method": "git",
"kali": "git clone https://github.com/s0md3v/XSStrike.git",
"raw": "`git clone https://github.com/s0md3v/XSStrike.git`"
},
"tags": [
"red-team-offensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "yandex-images",
"name": "Yandex Images",
"description": "Best reverse image search for faces/places",
"category": "image-facial",
"url": "",
"install": {
"method": "manual",
"kali": "Yandex Images",
"raw": "Yandex Images"
},
"tags": [
"image-facial"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Yandex Images"
],
"sections_seen": [
"Image & Video OSINT"
],
"archived": false
},
{
"id": "yandex-search",
"name": "Yandex",
"description": "Russian search engine — strong reverse-image and Cyrillic support",
"category": "search-dorking",
"url": "https://www.yandex.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.yandex.com](https://www.yandex.com)"
},
"tags": [
"search-dorking",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "yara",
"name": "YARA",
"description": "Pattern matching for malware research",
"category": "malware-threat-intel",
"url": "",
"install": {
"method": "apt",
"kali": "`apt install yara`",
"raw": "`apt install yara`"
},
"tags": [
"malware-threat-intel"
],
"source_versions": [
"v2"
],
"aliases": [
"YARA"
],
"sections_seen": [
"Malware & Threat Intelligence"
],
"archived": false
},
{
"id": "yaraify",
"name": "YARAify",
"description": "Collaborative YARA engine for open threat intel via file pattern matching",
"category": "malware-threat-intel",
"url": "https://yaraify.abuse.ch/scan/",
"install": {
"method": "web",
"kali": "",
"raw": "[yaraify.abuse.ch](https://yaraify.abuse.ch/scan/)"
},
"tags": [
"malware-threat-intel",
"curated-addition",
"from-jivoi"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "yeswehack",
"name": "YesWeHack",
"description": "European-based bug-bounty and VDP platform",
"category": "bug-bounty",
"url": "https://www.yeswehack.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.yeswehack.com](https://www.yeswehack.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "yeti",
"name": "Yeti",
"description": "Open distributed threat intelligence platform",
"category": "threat-intel-platforms",
"url": "https://yeti-platform.io",
"install": {
"method": "git",
"kali": "git clone https://github.com/yeti-platform/yeti.git",
"raw": "`git clone https://github.com/yeti-platform/yeti.git`"
},
"tags": [
"threat-intel-platforms",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "yumpu",
"name": "Yumpu",
"description": "Document publishing — sometimes leaks via search",
"category": "document-metadata",
"url": "https://www.yumpu.com",
"install": {
"method": "web",
"kali": "",
"raw": "[www.yumpu.com](https://www.yumpu.com)"
},
"tags": [
"document-metadata",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "zeek",
"name": "Zeek (Bro)",
"description": "Powerful network analysis framework for security monitoring",
"category": "blue-team-defensive",
"url": "https://zeek.org",
"install": {
"method": "apt",
"kali": "apt install zeek",
"raw": "`apt install zeek`"
},
"tags": [
"blue-team-defensive",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "zehef",
"name": "Zehef",
"description": "OSINT tool for email/phone/name investigations",
"category": "people-identity",
"url": "",
"install": {
"method": "pip",
"kali": "`pip3 install zehef`",
"raw": "`pip3 install zehef`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v2"
],
"aliases": [
"Zehef"
],
"sections_seen": [
"People & Identity OSINT"
],
"archived": false
},
{
"id": "zerobounce",
"name": "ZeroBounce",
"description": "Email validation and deliverability service",
"category": "email-phone",
"url": "https://www.zerobounce.net",
"install": {
"method": "web",
"kali": "",
"raw": "[www.zerobounce.net](https://www.zerobounce.net)"
},
"tags": [
"email-phone",
"v2.1-deep-research"
],
"source_versions": [
"v2.1"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "zerodium",
"name": "Zerodium",
"description": "Premium 0day acquisition platform",
"category": "bug-bounty",
"url": "https://zerodium.com",
"install": {
"method": "web",
"kali": "",
"raw": "[zerodium.com](https://zerodium.com)"
},
"tags": [
"bug-bounty",
"v3.3-expansion"
],
"source_versions": [
"v3.3"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "zillow",
"name": "Zillow",
"description": "Property records & estimates",
"category": "vehicle-aviation-maritime",
"url": "https://zillow.com/",
"install": {
"method": "web",
"kali": "",
"raw": "[zillow.com](https://zillow.com/)"
},
"tags": [
"vehicle-aviation-maritime"
],
"source_versions": [
"v1"
],
"aliases": [],
"sections_seen": [
"Vehicle, Property & Public Records"
],
"archived": false
},
{
"id": "zoom-earth",
"name": "Zoom Earth",
"description": "Real-time satellite & weather",
"category": "geolocation",
"url": "",
"install": {
"method": "manual",
"kali": "Zoom Earth",
"raw": "Zoom Earth"
},
"tags": [
"geolocation"
],
"source_versions": [
"v1",
"v2"
],
"aliases": [
"Zoom Earth"
],
"sections_seen": [
"Geolocation & Maps OSINT"
],
"archived": false
},
{
"id": "zoomeye",
"name": "ZoomEye",
"description": "Cyberspace search engine for IoT",
"category": "domain-ip-network",
"url": "",
"install": {
"method": "manual",
"kali": "ZoomEye",
"raw": "ZoomEye"
},
"tags": [
"domain-ip-network"
],
"source_versions": [
"v2"
],
"aliases": [
"ZoomEye"
],
"sections_seen": [
"Domain & IP / Network Recon"
],
"archived": false
},
{
"id": "zoomeye-cli",
"name": "ZoomEye CLI",
"description": "Command-line interface for ZoomEye internet asset search",
"category": "iot-devices",
"url": "https://github.com/knownsec/ZoomEye",
"install": {
"method": "pip",
"kali": "pip3 install zoomeye",
"raw": "`pip3 install zoomeye`"
},
"tags": [
"iot-devices",
"curated-addition"
],
"source_versions": [
"v3.1-curated"
],
"aliases": [],
"sections_seen": [],
"archived": false
},
{
"id": "zphisher",
"name": "Zphisher",
"description": "30+ phishing templates",
"category": "people-identity",
"url": "https://github.com/htr-tech/zphisher",
"install": {
"method": "git",
"kali": "`git clone https://github.com/htr-tech/zphisher`",
"raw": "`git clone https://github.com/htr-tech/zphisher`"
},
"tags": [
"people-identity"
],
"source_versions": [
"v1"
],
"aliases": [
"Zphisher"
],
"sections_seen": [
"Social Engineering & Phishing"
],
"archived": false
}
]
Reference in New Issue View Git Blame Copy Permalink