All projects
Repositories in this selection 26 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Ssmicallef / spiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface.PythonMIT · PermissiveInsufficient rank history24,2743,994——2026-04-13
2—Llaramies / theHarvesterE-mails, subdomains and names Harvester - OSINTPythonGPL-2.0 · Share derivative sourceInsufficient rank history18,2172,716——2026-10-30
3—Oowasp-amass / amassIn-depth attack surface mapping and asset discoveryGoNOASSERTION · Restricted / unknownInsufficient rank history15,4542,201——2026-10-25
4—Bblacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative sourceInsufficient rank history10,916963——2026-11-02
5—Sshmilylty / OneForAllOneForAll is a powerful subdomain collection toolPythonGPL-3.0 · Share derivative sourceInsufficient rank history10,1321,438——2026-11-02
6—Rreconurge / flowsintA modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.TypeScriptApache-2.0 · PermissiveInsufficient rank history10,0411,245——2026-10-18
7—Yyogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative sourceInsufficient rank history8,9121,346——2026-10-31
8—Ssix2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · PermissiveInsufficient rank history8,3261,264——2026-11-02
9—Uurbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInsufficient rank history6,9761,019——2026-04-02
10—Ss0md3v / ArjunA suite for discovering HTTP parameters.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history6,436868——2025-02-20
11—GGhostTroops / scan4allOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...GoBSD-3-Clause · PermissiveInsufficient rank history6,190718——2024-07-12
12—OOWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · PermissiveInsufficient rank history5,7021,228——2026-10-30
13—Aawarexone / Agentic-Bug-HunterAI-powered bug bounty hunting toolkit that works with or without subscription.PythonMIT · PermissiveInsufficient rank history5,559979——2026-10-28
14—Kkhast3x / h8mailEmail OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related emailPythonNOASSERTION · Restricted / unknownInsufficient rank history5,369622——2023-08-15
15—Hhakluke / hakrawlerSimple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationGoGPL-3.0 · Share derivative sourceInsufficient rank history5,157539——2026-08-05
16—AAstrosp / Awesome-OSINT-List📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.ShellGPL-3.0 · Share derivative sourceInsufficient rank history4,627706——2026-11-03
17—Lleebaird / discoverCustom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.ShellMIT · PermissiveInsufficient rank history3,942866——2026-10-30
18—Eedoardottt / cariddiTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and moreGoGPL-3.0 · Share derivative sourceInsufficient rank history3,811344——2026-10-30
19—SS3cur3Th1sSh1t / WinPwnAutomation for internal Windows Penetrationtest / AD-SecurityPowerShellBSD-3-Clause · PermissiveInsufficient rank history3,708536——2025-08-28
20—Rrawfilejson / awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.ShellMIT · PermissiveInsufficient rank history3,576563——2026-08-29
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.