#osint
twint
Twitter scraping & OSINT tool allowing you to scrape a user's followers, following, tweets and more.
Osintgram
An interactive shell to perform analysis on Instagram account of any users by its nickname.
GatherContacts
Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.
postmaniac
Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces.
The Time Machine
Weaponizing WaybackUrls for recon, bug bounties, OSINT, sensitive endpoints and what not.
SocialPwned
Allows to get the emails from a target published in social networks to find possible credentials.
Oculus
OSINT tool used to discover environments, directories, and subdomains of a particular domain.
BlackWidow
Web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
The Social-Engineer Toolkit
Open-source penetration testing framework designed for social engineering.
Rengine
Automated reconnaissance framework for webapps, highly configurable streamlined recon process.