FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find specific users in active directory via their username and logon IP address

bypass-url-parser

A collection of JavaScript engine CVEs with PoCs

USENET-inspired, uncensorable, decentralized internet discussion system running on IPFS & OrbitDB

PhoneInfoga is one of the most advanced tools to scan phone numbers using only free resources.

Malty: Combine two Maltego .mtz files into one.

Munk - Visualize Splunk Architecture in Maltego

Maltego Transform to put entities into MISP events

splinter - python test framework for web applications

Community maintained fork of pdfminer - we fathom PDF

Next generation web scanner

Argilla is a collaboration tool for AI engineers and domain experts to build high-quality datasets

Open Cyber Threat Intelligence Platform

A curated list of Community Plugins and Scripts written for Cutter

🔑 Hash type identifier (CLI & lib)

Check if phone numbers are connected to Telegram accounts.

A Google Earth Engine tool for identifying satellite radar interference.

Finds Instagram location IDs near a specified latitude and longitude.

Want to contribute? These are difficult, long-term projects that could be valuable to open source investigators at Bellingcat and around the world.

Simple parser for Splunk Processing Language (SPL) written in Python.

Converts IOCs parsed out by ioc-parser into a Splunk lookup table

newspaper3k is a news, full-text, and article metadata extraction in Python 3. Advanced docs:

A free, client-side web scraper that turns websites into structured data without having to use code.

Best Resource for learning Google Dorks

python library to send iMessages

Deep web crawler and search engine

A better Python REPL

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.