theHarvester is a command-line utility designed for gathering open-source intelligence and mapping an organization's external attack surface. It functions as a security information gathering framework that automates the collection of publicly available data to assist in reconnaissance and threat analysis. The tool utilizes a plugin-based architecture to execute isolated queries against various search engines and public databases. It employs asynchronous task execution to run multiple discovery operations in parallel, while a centralized pipeline aggregates and deduplicates findings from these
Bruce is offensive security firmware for ESP32 hardware designed for network attacks, radio analysis, and hardware-based identity spoofing. It provides a specialized toolkit for conducting red team operations, including a WiFi penetration testing tool, a multi-protocol radio toolkit, and a system for emulating USB keyboards and mice to inject payloads. The firmware distinguishes itself through a broad range of signal manipulation capabilities, allowing for the cloning and writing of RFID tags and the transmission of disruptive pairing requests to Bluetooth devices. It also includes a multi-pr
OffensiveNim is a red teaming framework and post-exploitation toolkit developed in Nim. It provides a collection of low-level primitives and a Windows API wrapper designed for offensive security operations, including malware development and shellcode loading. The project focuses on evasion and obfuscation through techniques such as API unhooking, direct system calls, and anti-debugging mechanisms. It features diverse payload delivery methods, including reflective binary loading, the execution of .NET assemblies via CLR hosting, and various shellcode injection techniques using fibers, COM obje
Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
The main features of christruncer/eyewitness are: Open Source Intelligence, Red Team Tools, Subdomain Enumeration.
Open-source alternatives to christruncer/eyewitness include: laramies/theharvester — theHarvester is a command-line utility designed for gathering open-source intelligence and mapping an organization's… byt3bl33d3r/offensivenim — OffensiveNim is a red teaming framework and post-exploitation toolkit developed in Nim. It provides a collection of… pr3y/bruce — Bruce is offensive security firmware for ESP32 hardware designed for network attacks, radio analysis, and… projectdiscovery/naabu — Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to… v2-dev/awesome-social-engineering — This project is a curated collection of frameworks, libraries, and toolsets designed for social engineering and public… hktalent/scan4all — scan4all is an all-in-one vulnerability scanner that orchestrates parallel network reconnaissance, service cracking,…