Search results

Exploit-DB paper archive with security research, exploitation papers, and technical writeups.

Exploit-DB binary exploit archive for security research and controlled testing.

Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.

OSINT tool that helps derive possible phone numbers connected to an email using partial number clues.

Awesome Android Reverse Engineering is a GitHub repository or organization with source code, releases, documentation, or project resources.

Awesome Malware Analysis is a GitHub repository or organization with source code, releases, documentation, or project resources.

Curated list of specialized search engines for hackers, OSINT, security, and research work.

Decompiler Explorer

github.com

Decompiler Explorer is a GitHub repository or organization with source code, releases, documentation, or project resources.

A fast and multi-purpose DNS toolkit from ProjectDiscovery for running DNS probes, resolving records and filtering DNS responses.

🔍 Chrome扩展，为安全研究和渗透测试提供Google/百度/Bing高级搜索语法快捷执行。一键Dorking、批量提取URL、智能过滤黑名单，大幅提升信息收集效率。 🔍 Chrome extension for security research and penetration testing. One-click advanced search (Dorking) on Google/Baidu/Bing, bulk URL extraction, smart blacklist filtering. Boost OSINT efficiency.

jd-gui

github.com

jd-gui is a GitHub repository or organization with source code, releases, documentation, or project resources.

Open-source scanner for auditing onion-service metadata and operational security.

Open source tool that searches newly registered domain feeds to find typosquatting, IDN homograph, doppelganger and bitsquatting domains impersonating

Passive OSINT reconnaissance framework in Rust: subdomains, DNS, ASN, certificate transparency history, GitHub dorking, tech fingerprinting, emails an

OSINT tool for checking Proton Mail addresses and ProtonVPN-related IP information during security research.

Reverse Engineering Resources is a GitHub repository or organization with source code, releases, documentation, or project resources.

Enumerate available domains generated modifying the original domain name through different cybersquatting techniques

Multi-source subdomain enumeration tool querying crt.sh Certificate Transparency logs, HackerTarget, and RapidDNS. Features HTTP/HTTPS liveness probin

automates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website

WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.

Russian-language guide for reducing online exposure and understanding counter-OSINT practices.

Open source threat intelligence platform for analyzing observables, files, and security indicators.

Adsbypasser

github.com

Adsbypasser is an open source password, passkey, or secure vault tool for managing credentials.

Agentic Radar

github.com

Open-source CLI security scanner for agentic workflows.