Subdomain Discovery Engine
crt.sh, SecurityTrails, VirusTotal, Shodan, Archive.org, HackerTarget, AlienVault OTX, ThreatCrowd
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
GitHub Secrets Scanner
AWS keys, GitHub tokens, Slack tokens, Stripe keys, private keys, database URLs, JWTs, and more. Rate-limit aware with auto-wait Severity classification (CRITIC
Shodan Dorking Automation
Shodan dorking automation with 305 categorized dorks (10 categories including web_technologies), severity ranking and report export.
Web Fingerprinting Module
Web servers, languages, frameworks, CMS, CDN/WAF, JS frameworks, caching, monitoring, CI/CD, cloud, app servers. Header, cookie, HTML body, meta generator analy
Metadata Extractor for Documents
Discovers PDF, DOCX, XLSX, PPTX files on a target domain, downloads them, and extracts: Authors, creators, last modified by (username enumeration) Software vers
Cloud Asset Discovery Tool
S3 bucket enumeration with permutations Azure Blob/File/Queue/Table/DFS storage GCP Storage buckets Cloud subdomain identification (20+ cloud services)
Social Media Intelligence Gatherer
LinkedIn employee enumeration via Google dorks Twitter/X reconnaissance GitHub org member enumeration + commit email extraction Cross-platform identity correlat
DNS Intelligence Analyzer
Zone transfer attempts on all nameservers DNSSEC NSEC walking for zone enumeration Misconfiguration detection (open resolver, version disclosure) Subdomain take
Dark Web Monitoring Script
IntelX and Pastebin search HIBP breach checking Ahmia .onion index search Tor SOCKS proxy support