sherlock-project/sherlock
Hunt down social media accounts by username across social networks
A star delta has been computed for 62,252 of 63,106 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 00:47 and 14:26 (BKK).
Hunt down social media accounts by username across social networks
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
🕵️♂️ Collect a dossier on a person by username from 6K websites
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
Vulnerability Intelligence Platform
The Network Execution Tool
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes dev + stakeholder reports (PDF).
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
IoT firmware identification and extraction
Cameradar hacks its way into RTSP videosurveillance cameras
Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise asset correlation and native MCP support. Docker-ready.
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
IoT static scanner for secrets, SBOM, CVEs and more.
Damn Vulnerable Web Application (DVWA)
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking.
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
Pentest Report Generator
Snoop — инструмент разведки на основе открытых данных (OSINT world)
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
A simple way to check if your data has been compromised in major security breaches affecting Iran – similar to "Have I Been Pwned" but focused specifically on Iranian incidents.
Encrypted file vault that lives entirely in your browser — no server, no account. Convenient local desktop with a clinical level of paranoia.
Proper sandboxing for agentic coding and web browsing
Add a layer of active defense to your cloud applications.
Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.
Showing 30 of 54 repositories
