10.4. 社会工程学

10.4.1. OSINT

• osint

• osint git

• OSINT-Collection

• trape

• Photon

• pockint

10.4.2. 社交工具

• SlackPirate Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

• twint An advanced Twitter scraping & OSINT tool

10.4.3. 个人搜索

• pipl

• hunter

• EagleEye

• LinkedInt

• sherlock

• email enum

• Sreg

• usersearch

• User Searcher User-Searcher is a powerful and free tool to help you search username in 2000+ websites.

10.4.4. Hacking database

• GHDB

• have i been pwned

10.4.5. 钓鱼

• spoofcheck

• gophish

• SocialFish

• HFish A Most Convenient Honeypot Platform

• blackeye complete Phishing Tool, with 32 templates +1 customizable

• king phisher Phishing Campaign Toolkit

• espoofer An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures

• ditto A tool for IDN homograph attacks and detection

• SiteCopy sitecopy is a tool that facilitates personal website backup and network data collection

• goblin 一款适用于红蓝对抗中的仿真钓鱼系统

10.4.6. squatting

• dnstwist Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

10.4.7. 网盘搜索

• 虫部落

• 盘多多

• Infinite Panc

10.4.8. 密码猜测

• OMEN Ordered Markov ENumerator - Password Guesser

• genpAss

10.4.9. 伪造

• email_hack 基于 Python 伪造电子邮件发件人

10.4.10. 综合框架

• theHarvester

• Th3inspector

• ReconDog