25 open-source projects similar to s0md3v/zen, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
pwnedOrNot is a search and auditing utility for querying breach metadata and verifying the exposure of email addresses and passwords in public data dumps. It functions as a data breach search engine designed to identify leaked credentials and assess account security. The tool provides capabilities for corporate domain auditing and email compromise detection, allowing for the identification of leaked addresses belonging to specific domains. It includes a password leak detector and the ability to scan public data dumps for plaintext passwords associated with compromised accounts. The system co
Snoop is an open-source intelligence framework designed for username scanning, digital footprint analysis, and geospatial intelligence gathering. It functions as a modular scanner that identifies profiles associated with specific usernames and nicknames across thousands of public websites to map a target's online presence. The system features a plugin-based extension architecture that allows for the addition of new platform scrapers and data sources. It provides specialized capabilities for evidence archiving, such as capturing HTML snapshots of discovered profiles and resolving numeric coord
ShuiZe_0x727 is an open-source intelligence gathering framework and attack surface management tool. It functions as an asset discovery engine and cyber intelligence aggregator designed to identify internet-facing assets, map network infrastructure, and visualize total network exposure. The project integrates vulnerability scanning and sensitive data leak detection to identify security weaknesses and unauthorized access points. It employs a combination of network space API queries, certificate log analysis, and public repository scanning to extract leaked credentials, API keys, and internal ad
OSINT tool to extract email addresses and other useful info from various GitHub sources.
A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results
FOCA is a digital forensics metadata analyzer and open-source intelligence tool used to extract hidden information from various document types. It functions as a metadata extraction tool that isolates technical data and EXIF information from PDFs, office documents, and SVG files. The system integrates an open-source intelligence scanner that identifies and downloads target files from the web using multiple search engine APIs. This allows for the automated discovery and acquisition of remote web assets for batch analysis and digital evidence gathering. The software provides capabilities for d
shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API tokens, and private keys. It functions as a security auditor for version control systems, analyzing both local files and remote repositories across platforms including GitHub, GitLab, and Bitbucket. The tool utilizes a detection engine based on signature-matching, custom regular expressions, and entropy checks to locate sensitive data. It allows for the use of custom search signatures and queries to identify non-standard secrets that may not be covered by predefined patterns. T
OSINT tool to find informations about a github user (email2username, username2email, creation date ...)
A command-line tool to query the DeHashed API. Easily search for various parameters like usernames, emails, hashed passwords, IP addresses, and more.
DataHub is a metadata management system and data catalog platform designed to provide a centralized directory for discovering, managing, and documenting datasets across a diverse data stack. It serves as a comprehensive framework for metadata management, incorporating a data governance framework to classify sensitive information and assign ownership for organizational accountability. The platform distinguishes itself through AI-enabled data discovery, which connects large language models to a metadata graph to allow for natural language search and exploration of data assets. It also provides
LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping
Holehe is an email account discovery and presence verification tool used for open source intelligence. It scans various social media platforms and web services to identify if a specific email address is linked to an existing account. The tool verifies account existence by utilizing registration and password recovery endpoints without notifying the account owner. It maps digital footprints by checking for the presence of an email across numerous third-party services and extracting available account metadata.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Retrieve all mails of users related to a git repository, a git user or a git organization
Email recon made fast and easy, with a framework to build on
Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.
bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API.
Protintelligence is a Python script for the OSINT and Cyber Community. This tool helps you to find intelligence on Protonmail users.