awesome-social-engineering

The free software for enabling onion routing online anonymity

SET

The Social-Engineer Toolkit from TrustedSec

Open-Source Phishing Framework

King Phisher

Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content

wifiphisher

Automated phishing attacks against Wi-Fi networks

Phishing Frenzy is an Open Source Ruby on Rails application that is leveraged by penetration testers to manage email phishing campaigns

Evilginx2

MITM attack framework used for phishing credentials and session cookies from any Web service

(commercial) tool to perform security awareness trainings for employees including custom phishing campaigns, malware attacks etc. Includes many useful attack templates as well as training materials to raise security awareness

OWASP

Defcon 23

RSA Conference Europe 2012

DerbyCon 2015

MIT, Technology Review

DarkReading

Infosec Institute

Scott Adams' Blog

Sophie Daniel

Awesome OSINT

Awesome list of OSINT

Collection of various OSInt tools broken out by category

A collection of OSINT links and custom Web interfaces to other services such as and

A blog about OSINT curated by Justin Seitz, the same author of BHP

XRay

XRay is a tool for recon, mapping and OSINT gathering from public networks

A Linux Virtual Machine that is pre-configured for online investigators

Proprietary software for open source intelligence and forensics, from Paterva

theHarvester

E-mail, subdomain and people names harvester

creepy

A geolocation OSINT tool

exiftool.rb

A ruby wrapper of the exiftool, a open-source tool used to extract metadata from files

metagoofil

Metadata harvester

a database of Google dorks; can be used for recon

Google-Dorks

Common google dorks and others you prolly don't know

GooDork

Command line go0gle dorking tool

dork-cli

Command-line Google dork tool

Shodan is the world's first search engine for Internet-connected devices

A full-featured Web Reconnaissance framework written in Python

github-dorks

CLI tool to scan github repos/organizations for potential sensitive information leak

vcsmap

A plugin-based tool to scan public version control systems for sensitive information

multi-source OSINT automation tool with a Web UI and report visualizations

DataSploit

OSINT visualizer utilizing Shodan, Censys, Clearbit, EmailHunter, FullContact, and Zoomeye behind the scenes

snitch

information gathering via dorks

Geotweet_GUI

Track geographical locations of tweets and then export to google maps