Sublist3r: Subdomain Enumeration Tool

Sublist3r is a Python tool designed to enumerate subdomains of websites using OSINT (Open Source Intelligence). It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu, and Ask.

GatheTOOL: Information Gathering Tool

GatheTOOL is an information-gathering tool that utilizes the hackertarget.com API for various reconnaissance tasks.

SiteBroker: Information Gathering and Penetration Automation Tool

SiteBroker is a cross-platform Python-based utility designed for information gathering and penetration automation. This tool provides a variety of features to help in assessing and testing the security of websites.

Devploit: Information Gathering Tool

Devploit is a simple Python script designed for information gathering. This tool, authored by Joker-Security [dev-labs], offers a range of functionalities to aid in the collection and analysis of various data points related to network and web security.

CMSeeK: CMS Detection and Exploitation Suite

CMSeeK is a powerful tool designed to detect and exploit vulnerabilities in a wide range of Content Management Systems (CMS). It supports scanning for over 180 different CMSs, making it an essential tool for web security professionals.

AUXILE Framework: Website Security Tool

The AUXILE Framework is a powerful tool designed to enhance the security of your website by identifying potential vulnerabilities. This versatile framework can be used to search for admin panels, upload panels, and perform SQL injection attacks using dorks. It also offers functionalities for information gathering and more.

XAttacker: Website Vulnerability Scanner & Auto Exploiter

XATTACKER is a robust and comprehensive tool designed for scanning and auto-exploiting vulnerabilities in web applications. By providing a target website to the tool, it automatically detects the site's architecture, identifies if it is using a Content Management System (CMS), and attempts to find vulnerabilities based on the detected CMS.

D-TECT: All-In-One Tool for Penetration Testing

D-TECT is an All-In-One Tool for Penetration Testing. This is specially programmed for Penetration Testers and Security Researchers to make their job easier, instead of launching different tools for performing different tasks. D-TECT provides multiple features and detection capabilities which gather target information and find different flaws in it.

Red Hawk: Information Gathering, Vulnerability Scanning, and Crawling

RED HAWK is a powerful tool for web reconnaissance, vulnerability scanning, and web crawling. It’s designed to help security researchers, penetration testers, and web developers gather information about websites, detect potential vulnerabilities, and gain insights into their target’s infrastructure.

WeebDNS: A Fast and Efficient DNS Enumeration Tool

WeebDNS is an 'Asynchronous' DNS Enumeration Tool designed to make DNS enumeration much faster and more efficient. Built with Python 3, WeebDNS leverages asynchronous programming to speed up the process of gathering DNS information.