Open Source - Free Tools

We love community, and we are passionate about giving back. In our free time, we work on Open Source / Free tools.

BurpSuite Asset Discover

Burp Suite extension to discover assets from HTTP response.

Maltego Scripts

Custom Maltego scripts for various reconnaissance relates tasks.

DataSploit

OSINT Framework - Supported by RedHunt Labs

ConfluentPwn

Confluence pre-auth ONGL injection remote code execution scanner (CVE-2022-26134).

Hunt4Spring

Hunt4Spring helps with identifying as well as exploiting URLs which are potentially vulnerable to CVE-2022-22965 aka Spring4Shell.

HTTPLoot

An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability.

OctoPii

Burp Suite extension to discover assets from HTTP response.

KubeStalk

KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective.

HTTPLoot

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

Online IDE and Paste Search Engine

A Custom Google Search Engine that helps finding sensitive information in. Online IDEs, Paste(s) sites, Code Sharing Platforms.

RedHunt OS

Virtual Machine for Adversary Emulation and Threat Hunting

Awesome Asset Discovery

List of Awesome Asset Discovery Resources