Packages that primarily attack social networking sites.
Tool count: 98
| Name | Version | Description | Category | Website |
|---|---|---|---|---|
| anontwi | 1.1b | A free software python client designed to navigate anonymously on social networks. It supports Identi.ca and Twitter.com. | social | |
| blackeye | 1:v2.0.r0.g27a3f04 | The most complete Phishing Tool, with 32 templates +1 customizable. | social automation | |
| bridgekeeper | 57.55c390c | Scrape employee names from search engine LinkedIn profiles. Convert employee names to a specified username format. | recon social | |
| brute-force | 52.78d1d8e | Brute-Force attack tool for Gmail, Hotmail, Twitter, Facebook, Netflix. | cracker social webapp | |
| buster | 92.131437e | Find emails of a person and return info associated with them. | social recon | |
| cardpwn | 32.166abf9 | OSINT Tool to find Breached Credit Cards Information. | social recon | |
| catphish | 44.768d213 | For phishing and corporate espionage. | social | |
| chameleonmini | 613.ad0eece | Official repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data. | social hardware nfc | |
| citadel | 95.3b1adbc | A library of OSINT tools. | recon social | |
| cr3dov3r | 46.99a1660 | Search for public leaks for email addresses + check creds against 16 websites. | social recon | |
| credsniper | 21.f52461b | Phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens. | social | |
| creepy | 1:137.9f60449 | A geolocation information gatherer. Offers geolocation information gathering through social networking platforms. | scanner social recon | |
| crosslinked | 1:47.9c0069d | LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. | social recon | |
| domainhunter | 51.38cb7ef | Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names. | recon social | |
| email2phonenumber | 29.9df9dbe | A OSINT tool to obtain a target's phone number just by having his email address. | social recon | |
| evilginx | 3.3.0 | Man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. | social | |
| evilginx2 | 59.5a477f7 | Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication. | social | |
| facebash | 17.95c3c25 | Facebook Brute Forcer in shellscript using TOR. | social cracker | |
| facebookosint | 21.656a04a | OSINT tool to replace facebook graph search. | social recon | |
| facebrok | 33.0f6fe8d | Social Engineering Tool Oriented to facebook. | social | |
| fbi | 28.0f94e99 | An accurate facebook account information gathering. | social recon | |
| fbid | 16.1b35eb9 | Show info about the author by facebook photo url. | recon social | |
| fluxion | 3:1571.4f461a4 | A security auditing and social-engineering research tool. | social wireless | |
| genisys | 53.d53bb0c | Powerful Telegram Members Scraping and Adding Toolkit. | social recon | |
| gg-images | 35.b2dd863 | The application was created to allow anyone to easily download profile pictures from GG. | social misc | |
| gh-dork | 3.799f86f | Github dorking tool. | recon social | |
| git-hound | 174.1d20536 | Pinpoints exposed API keys on GitHub. A batch-catching, pattern-matching, patch-attacking secret snatcher. | recon social | |
| github-dorks | 82.d50a677 | Collection of github dorks and helper tool to automate the process of checking dorks. | recon social | |
| gitmails | 71.8aa8411 | An information gathering tool to collect git commit emails in version control host services. | recon social | |
| gitrecon | 30.6467e78 | OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits. | recon social | |
| gloom | 1:93.cd6e927 | Linux Penetration Testing Framework. | scanner exploitation recon fuzzer social | |
| gocabrito | 4.33ac59a | Super organized and flexible script for sending phishing campaigns. | social | |
| gomapenum | v1.1.0.r110.g8b344df | User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin. | cracker recon social windows | |
| gophish | 813.8e792944 | Open-Source Phishing Framework. | social | |
| h8mail | 344.ee31c8f | Email OSINT and password breach hunting. | recon social | |
| hashcheck | 2.72b0c6e | Search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. | crypto social recon | |
| hemingway | 8.9c70a13 | A simple and easy to use spear phishing helper. | social | |
| hiddeneye | 1228.7a3deaf | Modern phishing tool with advanced functionality. | social | |
| hiddeneye-legacy | RC1.r226.g7a3deaf | Modern Phishing Tool With Advanced Functionality. | social | |
| holehe | 434.14da70f | A tool for Efficiently finding registered accounts from emails. | social recon | |
| hookshot | 205.df30b85 | Integrated web scraper and email account data breach comparison tool. | webapp scanner recon social | |
| inquisitor | 1:28.12a9ec1 | OSINT Gathering Tool for Companies and Organizations. | recon social | |
| instagramosint | 21.30b5735 | An Instagram Open Source Intelligence Tool. | social recon | |
| jeopardize | 5.34f1d07 | A low(zero) cost threat intelligence & response tool against phishing domains. | defensive social | |
| lazagne | 872.3ed06c7 | An open source application used to retrieve lots of passwords stored on a local computer. | forensic social | |
| linkedin2username | 1:144.8889f30 | OSINT Tool: Generate username lists for companies on LinkedIn. | social recon misc | |
| littlebrother | 112.338cf82 | OSINT tool to get informations on French, Belgian and Swizerland people. | recon social | |
| metaforge | 115.7b32693 | Auto Scanning to SSL Vulnerability. | misc social | |
| muraena | 227.5804f03 | Almost-transparent reverse proxy to automate phishing and post-phishing activities. | social | |
| nexfil | 43.4d93c57 | OSINT tool for finding profiles by username. | social recon | |
| omnibus | 129.88dbf5d | OSINT tool for intelligence collection, research and artifact management. | recon social | |
| osi.ig | 101.4debaa2 | Instagram OSINT Tool gets a range of information from an Instagram account. | social recon | |
| osint-spy | 25.03dcf48 | Performs OSINT scan on email/domain/ip_address/organization. | recon social | |
| osrframework | 840.e02a6e9 | A project focused on providing API and tools to perform more accurate online researches. | recon social | |
| pepe | 13.b81889b | Collect information about email addresses from Pastebin. | social recon | |
| phemail | 28.302b24d | A python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test. | social automation | |
| phishery | 14.5743953 | An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector. | backdoor social | |
| phishingkithunter | 20.ac9bd1e | Find phishing kits which use your brand/organization's files and image. | social defensive | |
| phoneinfoga | v2.11.0.r0.g5f6156f | Information gathering & OSINT framework for phone numbers. | social mobile | |
| phonia | 593.8ae14ff | Advanced toolkits to scan phone numbers using only free resources. | social scanner | |
| pown | 332.0e32edf | Security testing and exploitation toolkit built on top of Node.js and NPM. | webapp recon scanner social proxy | |
| protosint | 26.1ee6ee4 | Python script that helps you investigate Protonmail accounts and ProtonVPN IP addresses. | recon social | |
| pwned-search | 40.04c1439 | Pwned Password API lookup. | recon social | |
| pwnedornot | 150.d25d3fa | Tool to find passwords for compromised email addresses. | recon social | |
| qrljacker | 218.1b0a4e2 | QRLJacker is a highly customizable exploitation framework to demonstrate "QRLJacking Attack Vector". | social | |
| reelphish | 5.dc1be33 | A Real-Time Two-Factor Phishing Tool. | social | |
| scavenger | 103.75907e8 | Crawler (Bot) searching for credential leaks on different paste sites. | recon social | |
| scylla | 99.621b7b8 | The Simplistic Information Gathering Engine | Find Advanced Information on a Username, Website, Phone Number, etc | recon social | |
| seeker | 1:376.692e531 | Accurately Locate People using Social Engineering. | social recon | |
| sees | 67.cd741aa | Increase the success rate of phishing attacks by sending emails to company users as if they are coming from the very same company's domain. | social | |
| set | 1:8.0.3 | Social-engineer toolkit. Aimed at penetration testing around Social-Engineering. | social exploitation | |
| sherlock | 1:0.15.0 | Find usernames across social networks. | social recon | |
| simpleemailspoofer | 54.7075f0c | A simple Python CLI to spoof emails. | social | |
| skiptracer | 1:123.ca40957 | OSINT python2 webscraping framework. Skipping the needs of API keys. | social recon | |
| slackpirate | 142.9788be6 | Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace. | social recon | |
| snscrape | 0.4.3.20220106 | A social networking service scraper in Python. | recon social | |
| social-analyzer | 0.45 | Analyzing & finding a person's profile across social media websites. | social recon | |
| social-mapper | 190.92be8da | A social media enumeration and correlation tool. | social recon | |
| social-vuln-scanner | 11.91794c6 | Gathers public information on companies to highlight social engineering risk. | social recon | |
| socialfish | 248.4795024 | Ultimate phishing tool with Ngrok integrated. | social | |
| socialpwned | v2.0.1.r5.g6af3563 | OSINT tool that allows to get the emails, from a target, published in social networks. | social recon | |
| sooty | 333.6cb15e6 | The SOC Analysts all-in-one CLI tool to automate and speed up workflow. | defensive recon social | |
| spf | 85.344ac2f | A python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. | social | |
| spoofcheck | 16.8cce591 | Simple script that checks a domain for email protections. | recon social | |
| tinfoleak | 3.6469eb3 | Get detailed information about a Twitter user activity. | recon social webapp | |
| tinfoleak2 | 41.c45c33e | Get detailed information about a Twitter user activity. | recon social webapp | |
| token-hunter | 343.3358a33 | OSINT Tool - Search the group and group members' snippets, issues, and issue discussions for sensitive data that may be included in these assets. | social recon | |
| trape | 132.6baae24 | People tracker on the Internet: OSINT analysis and research tool by Jose Pino. | social recon | |
| tweets-analyzer | 55.8d6bd3c | Tweets metadata scraper & activity analyzer. | social recon | |
| twint | 1:845.e7c8a0c7 | An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations. | social recon | |
| ultimate-facebook-scraper | 236.5661bdc | A bot which scrapes almost everything about a Facebook user's profile. | social recon | |
| userrecon | 10.3b56891 | Find usernames across over 75 social networks. | recon social fingerprint | |
| userrecon-py | 1:15.eebd422 | Recognition usernames in 187 social networks. | social recon | |
| websploit | 4.0.4 | An Open Source Project For, Social Engineering Works, Scan, Crawler & Analysis Web, Automatic Exploiter, Support Network Attacks | exploitation fuzzer scanner social | |
| weeman | 91.53c2efa | HTTP Server for phishing in python. | social | |
| whatbreach | 42.dad6b9f | OSINT tool to find breached emails and databases. | social recon | |
| wifi-pumpkin | 2:v1.1.7.r2.g344a475 | Framework for Rogue Wi-Fi Access Point Attack. | wireless dos spoof exploitation sniffer social | |
| wifiphisher | 1:798.bc4a077 | Fast automated phishing attacks against WPA networks. | wireless social |