Ross ROSS = Recommend OSS · open-source software intelligence for agents

resource: osint

118 resources, primary matches first, then adoption-weighted; health v2 shown.

ResourceHealth v2StarsMaturity
Hack-with-Github/Awesome-Hacking
A curated meta-collection of awesome lists for hackers, pentesters, and security researchers. It aggregates links to specialized repositori…
75119102active
jivoi/awesome-osint
A curated awesome-list of open-source intelligence (OSINT) tools and resources covering search engines, social media investigation, people/…
8828349active
enaqx/awesome-pentest
A curated awesome-list of penetration testing and offensive security resources, tools, books, conferences, and training materials. It organ…
7527017active
vitalysim/Awesome-Hacking-Resources
A curated awesome-list of hacking, penetration testing, and AI red-teaming resources including courses, YouTube channels, labs, and tools. …
7017359active
lockfale/OSINT-Framework
A curated directory of free open-source intelligence (OSINT) tools and resources, browsable at osintframework.com and stored as structured …
7512014active
edoardottt/awesome-hacker-search-engines
A curated awesome-list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, and bug bounty…
7611089active
infosecn1nja/Red-Teaming-Toolkit
A curated list of cutting-edge open-source security tools for red teamers and threat hunters, organized by attack lifecycle stages such as …
6910654active
A-poc/RedTeam-Tools
A curated collection of 150+ tools, techniques, and tips for red teaming and penetration testing, organized by category with links to exter…
679664active
cipher387/osint_stuff_tool_collection
A curated awesome-list collection of 1000+ online tools for OSINT (open-source intelligence), organized into categories like geolocation, s…
698738active
nomi-sec/PoC-in-GitHub
An automatically curated dataset and web service that collects proof-of-concept (PoC) exploit repositories from GitHub as CVEs are publishe…
778012active
fastfire/deepdarkCTI
A curated collection of Cyber Threat Intelligence sources from the Deep and Dark Web, organized for CTI practitioners. It catalogs forums, …
777195active
S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet
A curated cheat sheet of common enumeration and attack techniques for Windows Active Directory environments. It serves as a quick reference…
706715active
streaak/keyhacks
KeyHacks is a curated reference repository listing commands and methods to validate leaked API keys found during bug bounty programs or pen…
756322active
KingOfBugbounty/KingOfBugBountyTips
A curated collection of bug bounty reconnaissance tips and one-liner commands shared by well-known bug hunters, with explanations to help n…
735521active
hahwul/WebHackersWeapons
A curated awesome-list cataloging tools, bookmarklets, browser addons, and Burp/Caido/ZAP extensions used by web hackers for bug bounty and…
685042active
slowmist/Knowledge-Base
A curated knowledge base of blockchain security research published by the SlowMist security team, covering attack techniques like false dep…
764592active
riramar/Web-Attack-Cheat-Sheet
A curated cheat sheet of tools, techniques, and resources for web application attacks, covering discovery, enumeration, scanning, and explo…
764433active
Threekiii/Awesome-Redteam
A curated knowledge base for red teaming and offensive security, collecting cheatsheets, scripts, tips, and links to open-source tools. It …
714315active
Astrosp/Awesome-OSINT-List
A curated awesome-list of OSINT (Open Source Intelligence) tools and websites covering reconnaissance, reverse searching, red team operatio…
764306active
CyberMonitor/APT_CyberCriminal_Campagin_Collections
A curated collection of links and archived PDF reports about APT (Advanced Persistent Threat) and cybercriminal campaign disclosures, organ…
324098active
arkadiyt/bounty-targets-data
A dataset repository containing hourly-updated dumps of bug bounty program scopes from platforms like HackerOne, Bugcrowd, Intigriti, YesWe…
773915active
blaCCkHatHacEEkr/PENTESTING-BIBLE
A curated collection of links to articles, cheatsheets, and write-ups on penetration testing, bug bounty, red teaming, and offensive securi…
3213939maintenance
dwisiswant0/awesome-oneliner-bugbounty
A curated awesome-list collection of one-liner shell scripts for bug bounty hunting, covering tasks like LFI, open-redirect, XSS, prototype…
323188active
blackorbird/APT_REPORT
A curated collection of APT (Advanced Persistent Threat) reports, malware samples, and special IOCs gathered from security vendors and rese…
773084active
ItIsMeCall911/Awesome-Telegram-OSINT
A curated awesome-list of Telegram OSINT (open-source intelligence) tools, search engines, directories, bots, and resources. It serves as a…
322846active
redhuntlabs/Awesome-Asset-Discovery
A curated awesome-list of resources, tools, and services for asset discovery during security assessments, covering subdomains, IPs, emails,…
332833active
WebBreacher/WhatsMyName
WhatsMyName is a community-maintained JSON dataset of 700+ websites with rules for checking whether a username exists on each site. It powe…
762803active
cipher387/Dorks-collections-list
A curated awesome-list of GitHub repositories and articles collecting search engine dorks (Google, Shodan, Censys, GitHub, DuckDuckGo, and …
392732active
osintbrazuca/osint-brazuca
A curated catalog of Brazilian OSINT sources, websites, portals, and investigation techniques. It aggregates open, legal, publicly accessib…
772676active
danieldurnea/FBI-tools
A curated awesome-list of open-source OSINT (Open Source Intelligence) tools for information gathering, reconnaissance, and forensics. It c…
372626active
Lifka/hacking-resources
A curated collection of hacking resources, cheat sheets, tools, scripts, and tutorials for offensive and defensive security professionals. …
322611active
apurvsinghgautam/dark-web-osint-tools
A curated list of open-source OSINT tools for the dark web, organized by category: search engines, onion link discovery, onion link scannin…
752550active
rawfilejson/awesome-osint-arsenal
A curated awesome-list of 753+ open-source OSINT and security tools across 50 categories, paired with shell installer scripts for one-comma…
562538active
cipher387/API-s-for-OSINT
A curated awesome-list of APIs useful for automating OSINT (open-source intelligence) tasks, covering phone number lookup, domain/DNS/IP lo…
752507active
ARPSyndicate/awesome-intelligence
A collaboratively curated awesome-list of Open-Source Intelligence (OSINT) resources, maintained via an intel. file and browsable through a…
102404active
Ph055a/OSINT_Collection
A maintained, curated collection of free and actionable OSINT (open-source intelligence) resources organized by investigation type. It cata…
102402active
bst04/CyberSources
A curated list (awesome-list style) of cybersecurity tools, resources, and educational materials covering OSINT, pentesting, cryptography, …
662395active
kkrypt0nn/wordlists
A curated collection of wordlists for security tasks such as password brute-forcing, username enumeration, and directory scanning, sorted b…
772352active
elementalsouls/Claude-OSINT
A collection of eight drop-in SKILL.md files for the Claude skills system that prime Claude with expert offensive OSINT and external recon …
592342active
cipher387/Advanced-search-operators-list
A curated list of documentation links explaining advanced search operators for many services including mailboxes, search engines, social me…
352220active
Jieyab89/OSINT-Cheat-sheet
A curated cheat sheet repository listing OSINT (open-source intelligence) tools, datasets, wikis, articles, and tutorials for reconnaissanc…
772182active
0xmaximus/Galaxy-Bugbounty-Checklist
A curated collection of checklists, tips, and tutorials for bug bounty hunting and penetration testing. It organizes attack techniques (e.g…
522115active
notthehiddenwiki/NTHW
A large community-maintained wiki of over 5,000 curated cybersecurity links, including tools, publications, and recordings. It also hosts r…
702112active
sushiwushi/bug-bounty-dorks
A curated list of Google Dorks for finding companies with responsible disclosure or bug bounty programs that are not listed on platforms li…
572087active
eset/malware-ioc
A repository of Indicators of Compromise (IOCs) published by ESET researchers from their malware investigations. It includes YARA rules and…
721979active
The-Osint-Toolbox/Telegram-OSINT
A curated repository of Telegram OSINT resources including tools, bots, browser extensions, command-line utilities, and tradecraft guides. …
671968active
osintambition/Social-Media-OSINT-Tools-Collection
A curated collection of open-source intelligence (OSINT) tools focused on social media intelligence (SOCMINT), organized by platform includ…
581951active
OffcierCia/On-Chain-Investigations-Tools-List
A curated awesome-list handbook of tools, manuals, and methodology for investigating cryptocurrency hacks, scams, and security incidents on…
611930active
BullsEye0/google_dork_list
A regularly updated plain-text dataset of over 13,700 Google dork search queries used to locate vulnerable, misconfigured, or exposed websi…
751906active
yogsec/Hacking-Tools
A curated list of penetration testing and ethical hacking tools organized by category, drawing from Kali Linux and other notable sources. I…
651892active
rootsecdev/Azure-Red-Team
A curated collection of notes, links, and resources for Microsoft Azure and Microsoft 365 red teaming and penetration testing. It covers en…
631773active
K2SOsint/Legendary_OSINT
A curated, categorized list of OSINT (open-source intelligence) tools and resources covering areas like people search, infrastructure, malw…
521711active
wgpsec/AboutSecurity
A large structured penetration testing knowledge base containing 200+ skill methodologies covering recon, exploitation, lateral movement, a…
651702active
AmnestyTech/investigations
A repository of indicators of compromise (IOCs) extracted from Amnesty International's technical investigations into targeted spyware attac…
321696active
phishdestroy/destroylist
A continuously updated phishing and scam domain blocklist with 208k+ curated threats, distributed in multiple formats (hosts, AdBlock, Dnsm…
721624active
tanjiti/sec_profile
A continuously updated dataset and scraping project that crawls security information sources like secwiki and xuanwu.github.io/sec.today, a…
771602active
wishihab/Android-RATList
A curated list of known Android Remote Access Trojans (RATs) with their features and required permissions, intended for documentation and r…
741602active
trickest/inventory
A continuously updated asset inventory of over 800 public bug bounty programs, including DNS and web server data, maintained by Trickest. I…
351602active
0xJs/RedTeaming_CheatSheet
A community-maintained pentesting and red teaming cheatsheet collecting commands and techniques across infrastructure, Windows Active Direc…
561576active
OffcierCia/non-typical-OSINT-guide
An unconventional, community-maintained guide to open-source intelligence (OSINT) investigation, covering techniques, training resources, g…
621568active
euphrat1ca/Security-List
A curated Chinese-language security knowledge index (awesome-style list) covering the full red team attack lifecycle, from reconnaissance a…
321529active
BushidoUK/Ransomware-Tool-Matrix
A curated knowledge base mapping the tools used by ransomware and extortion gangs, organized by category (RMM, exfiltration, credential the…
651434active
jiep/offensive-ai-compilation
A curated list of resources covering Offensive AI, including adversarial machine learning attacks (extraction, inversion, poisoning, evasio…
741418active
ffffffff0x/Digital-Privacy
A curated collection of resources on digital privacy protection and OSINT (open-source intelligence), covering sensitive information discov…
104944maintenance
Proviesec/google-dorks
A curated collection of Google Dork queries (advanced search operators) for web security testing and bug bounty hunting. It documents searc…
751355active
projectdiscovery/public-bugbounty-programs
A community-curated dataset of public bug bounty and responsible disclosure programs, maintained as YAML with a JSON schema and distributed…
761341active
may215/awesome-termux-hacking
A curated awesome list of the best hacking and penetration testing tools that run in Termux on Android. It catalogs links to tools for OSIN…
324767maintenance
wddadk/Offensive-OSINT-Tools
A curated awesome-list of offensive OSINT tools and links for penetration testers and red teamers. It organizes tools by reconnaissance cat…
751261active
thehappydinoa/awesome-censys-queries
A curated awesome-list of Censys Search queries (dorks) for discovering exposed industrial control systems, IoT devices, databases, dashboa…
741240active
giuliacassara/awesome-social-engineering
A curated awesome-list of social engineering resources including online courses, books, CTF events, tools, and OSINT links. It is aimed at …
324244maintenance
uphiago/recon-skills
A curated pack of Markdown skill files documenting reconnaissance and penetration-testing procedures for web apps, APIs, authentication, cl…
581199active
tib36/PhishingBook
A curated Chinese-language resource collection (memo/awesome list) of phishing simulation and red-blue team exercise materials, covering Of…
301183active
pe3zx/my-infosec-awesome
A curated awesome-list of links, resources, and tools covering information security topics such as adversary simulation, application securi…
741169active
Zeyad-Azima/Offensive-Resources
A large curated collection of learning resources and labs for offensive security, covering topics like infrastructure, web, mobile, API, cl…
481167active
cipher387/python-for-OSINT-21-days
A 21-day beginner course teaching Python for open-source intelligence (OSINT) work, provided as a PDF/Notion curriculum with sample code fi…
581120active
nixawk/pentest-wiki
A free online knowledge library (wiki) of penetration testing and security resources, organized into sections like information gathering, v…
323751maintenance
sinwindie/OSINT
A curated collection of tools, bookmarks, and guides for open-source intelligence (OSINT) collection, organized by platform and target type…
323711maintenance
TheBurnsy/Vehicle-OSINT-Collection
A curated collection of websites, browser add-ons, and repositories for gathering open-source intelligence about vehicles. It covers image-…
321058active
mikeroyal/Digital-Forensics-Guide
A curated guide to Digital Forensics covering tools, libraries, frameworks, books, tutorials, and certifications across computer, mobile, n…
323104maintenance
NoorQureshi/kali-linux-cheatsheet
A community-maintained cheat sheet of Kali Linux commands and techniques for penetration testers, covering recon, enumeration, password cra…
322988maintenance
wtsxDev/Penetration-Testing
A curated awesome-list of penetration testing resources, including tools, distributions, books, courses, vulnerability databases, and secur…
322783maintenance
alphaSeclab/awesome-rat
A curated awesome-list collecting 250+ open-source RAT (Remote Administration Tool) and C&C (Command & Control) projects along with 1200+ a…
322259maintenance
ThreatHuntingProject/ThreatHunting
An informational repository of knowledge about hunting for adversaries in IT environments, associated with ThreatHunting.net. It serves as …
321886maintenance
zbetcheckin/Security_list
A curated awesome-list of security resources covering penetration testing, OSINT, malware analysis, CTFs, forensics, and more. It is a refe…
321880maintenance
aptnotes/data
APTnotes data is a curated dataset of publicly available papers and blogs about APT (Advanced Persistent Threat) campaigns and toolsets, in…
321809maintenance
JoasASantos/Awesome-Red-Team-Operations
A curated awesome-list of red team and penetration testing tools, organized by category such as PowerShell scripts, AMSI bypass, payload ho…
321729maintenance
igorbrigadir/twitter-advanced-search
A reference guide documenting Twitter/TweetDeck advanced search operators with examples and tested links. It is documentation, not software…
321602maintenance
we1h0/redteam-tips
A curated collection of links to red team and penetration testing learning materials, mostly in Chinese, covering domain penetration, intra…
321513maintenance
danielmiessler/RobotsDisallowed
A curated dataset of robots.txt disallowed directories harvested from the top 100K websites (Alexa/Majestic), useful for content discovery …
321490maintenance
Karanxa/Bug-Bounty-Wordlists
A curated collection of wordlists commonly used during bug bounty hunting and web security testing, aggregated from public sources into one…
231429maintenance
xiaoZ-hc/redtool
A curated Chinese-language collection of red team tools and self-written shell scripts for offensive security testing, favoring DIY and les…
321420maintenance
adon90/pentest_compilation
A curated compilation of penetration testing commands, tips, and scripts covering enumeration, exploitation, privilege escalation, tunnelin…
321362maintenance
HowToFind-bot/osint-tools
A curated catalog of 308 open-source OSINT tools organized by input data type such as email, phone, username, IP, and cryptocurrency. It se…
321324maintenance
chriskaliX/AD-Pentest-Notes
A set of Chinese-language study notes on internal network and Active Directory domain penetration testing, covering reconnaissance, SPN sca…
321254maintenance
Kyuu-Ji/Awesome-Azure-Pentest
A curated awesome-list of tools, articles, labs, talks, and books for penetration testing and securing Microsoft Azure and Microsoft 365 en…
321220maintenance
Ershu1/2021_Hvv
A community-curated repository of resources related to China's HVV (HW, 'HuWang') offensive/defensive security exercise, collecting tools, …
321200maintenance
TCM-Course-Resources/Open-Source-Intellingence-Resources
A curated compilation of links and tools from TCM Security's OSINT Fundamentals course, organized by category such as search engines, image…
321148maintenance
jhaddix/pentest-bookmarks
A curated collection of penetration testing bookmarks assembled by Jason Haddix, organized into categories like OSINT sites, blogs, and for…
321120maintenance
ForbiddenProgrammer/conti-pentester-guide-leak
An archive of leaked technical training manuals originally distributed to affiliates of the Conti ransomware gang, covering attack techniqu…
321104maintenance
h4x0r-dz/Leaked-Credentials
A tutorial repository teaching how to find leaked credentials (API keys, tokens, passwords) in web traffic using regex patterns with Chrome…
251051maintenance

page 1 / 2 next →