There is no neutrality in the face of evil.
How to use Python Sitemap Generator for OSINT by CyberDetective: https://publication.osintambition.org/how-to-use-python-sitemap-generator-for-osint-77bc69fa165d
Open-source alternatives to popular paid products: https://osssoftware.org/open-source-alternatives/
MISCRanked - The World’s Most Surveilled Cities: https://www.visualcapitalist.com/ranked-the-worlds-most-surveilled-cities/
Hunchly. Finding good investigation targets on the dark web can be a tricky task and many investigators find the dark web to be a scary place: https://www.hunch.ly/darkweb-osint/
TypeSense is an Open Source alternative to Algolia + Pinecone and an Easier-to-Use alternative to ElasticSearch. Fast, typo tolerant, in-memory fuzzy Search Engine for building delightful search experiences: https://github.com/typesense/typesense
Telegram similar channels search tool (CLI + Maltego): https://github.com/SocialLinks-IO/telegram-similar-channels
ScrapedIn. A tool to scrape LinkedIn without API restrictions for data reconnaissance: https://github.com/dchrastil/ScrapedIn
duolingOSINT. Gather information about a Duolingo user: https://github.com/ajuelosemmanuel/duolingOSINT
WrongSecrets. Vulnerable app with examples showing how to not use secrets: https://github.com/OWASP/wrongsecrets
DDosify. Effortless Kubernetes Monitoring and Performance Testing. Available on CLI, Self-Hosted, and Cloud: https://github.com/ddosify/ddosify
The Roundcube Webmail suite: https://github.com/roundcube/roundcubemail
Seekolver is a tool focused on attack-surface mapping. It performs searches for subdomains associated with root domains and root domains associated with organisations using open sources, additionally, it resolves these domains and subdomains in search of HTTP and HTTPS services and then filters the information obtained based on their response: https://github.com/Krypteria/Seekolver
MetaFinder. Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata: https://github.com/Josue87/MetaFinder
ReconSpider. Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations: https://github.com/bhavsec/reconspider
NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks: https://github.com/Pennyw0rth/NetExec
ppmap. A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets: https://github.com/kleiton0x00/ppmap
The FOFA Library collects usage tips, common scenarios, F&Q, and more for FOFA: https://github.com/FofaInfo/Awesome-FOFA
CloakQuest3r. Uncover the true IP address of websites safeguarded by Cloudflare: https://github.com/spyboy-productions/CloakQuest3r
CrackMapExec. A swiss army knife for pentesting networks: https://github.com/byt3bl33d3r/CrackMapExec
AutoSend Letters HeadHunter is a script for automatically sending responses to HeadHunter: https://github.com/ia-stepanov/autosend-letters-hh
LinkedIn: OSINTech's Featured Timeline
SubStack: OSINTech's Substack
WARNING! All tools, programs and techniques published in this article and repository are used for informational, educational purposes or for information security purposes. The authors are not responsible for the activities that users of these tools and techniques may carry out, and urge them not to use them to carry out harmful or destructive activities directed against other users or groups on the Internet.
