Open-source alternatives to SimplyEmail

Protintelligence is a Python script for the OSINT and Cyber Community. This tool helps you to find intelligence on Protonmail users.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Does some google dorks against a domain

Tool to scrape LinkedIn

OSINT tool to find breached emails, databases, pastes, and relevant information

Detect and bypass web application firewalls and protection systems

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Yar is a tool for plunderin' organizations, users and/or repositories.

GyoiThon is a growing penetration test tool using Machine Learning.

BinGoo! A Linux bash based Bing and Google Dorking Tool

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.

Command-line Google dork tool. This is an early predecessor to dorkbot, which may be more useful: https://github.com/utiso/dorkbot

Command line go0gle dorking tool

local changes to surfraw - local edits prior to sending updates to surfraw-devel

Semi-automatic OSINT framework and package manager

recon-ng is an open source intelligence reconnaissance framework designed to automate the collection and aggregation of public information. It is a modular intelligence tool that utilizes a system of pluggable modules to harvest target data, resolve DNS queries, and parse web content. The framework is built as an API-driven tool with a programmatic interface to integrate with other security workflows. It is provided as a containerized application, using Docker to ensure a consistent environment for running reconnaissance tasks and managing a persistent data store. Its capabilities cover exte

An open source intelligence tool to crawl the graph of certificate Alternate Names

Metadata harvester

theHarvester is a command-line utility designed for gathering open-source intelligence and mapping an organization's external attack surface. It functions as a security information gathering framework that automates the collection of publicly available data to assist in reconnaissance and threat analysis. The tool utilizes a plugin-based architecture to execute isolated queries against various search engines and public databases. It employs asynchronous task execution to run multiple discovery operations in parallel, while a centralized pipeline aggregates and deduplicates findings from these

InSpy is a python based LinkedIn enumeration tool.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

A simple script to screenshot a list of websites

Holehe is an email account discovery and presence verification tool used for open source intelligence. It scans various social media platforms and web services to identify if a specific email address is linked to an existing account. The tool verifies account existence by utilizing registration and password recovery endpoints without notifying the account owner. It maps digital footprints by checking for the presence of an email across numerous third-party services and extracting available account metadata.

vcsmap is a plugin-based tool to scan public version control systems for sensitive information.