1N3/Goohak

SpiderFoot is a mature open-source OSINT automation tool written in Python 3 that orchestrates over 200 modules in a publisher/subscriber model to pull data from virtually every public-facing data source. It targets domains, IPs, subdomains, ASN, emails, phone numbers, usernames, people names, Bitcoin addresses, and even social media accounts, feeding everything into a SQLite backend for querying. You can run it via a web UI or entirely from the CLI, with CSV/JSON/GEXF export for downstream analysis. The correlation engine ships 37 pre-defined YAML rules for pattern-matching findings into actionable leads. It has been in active development since 2012, giving it a depth of module coverage that newer tools struggle to match, though the sheer volume of output can be overwhelming without careful scoping.

Payloads All The Things is an open-source GitHub repository maintained by swisskyrepo that collects payloads and bypass techniques for web application security testing. The README describes it as organized by vulnerability class, with each section containing a README.md write-up, example payloads, and often files for Burp Intruder.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

🤖 The Modern Port Scanner 🤖