gray-hat-hacking-tools

NombreHUNT is a production-grade phone OSINT framework with 35+ modules, scanning 250+ social platforms, 8 breach databases, dark web monitoring, geolocation, risk assessment & graph analysis. Features async concurrency, SIM swap detection, Google dorking, and comprehensive digital footprint intelligence for cybersecurity investigations.

UnderBOSS is an advanced Android RAT (Remote Administration Tool) with 80+ commands for penetration testing, device surveillance, hardware control, and security assessment. Features include camera access, location tracking, keylogging, flashlight effects, volume manipulation, SMS/Call control, and persistence mechanisms for authorized activity

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260 (CRITICAL), tests default credentials, performs network discovery, and generates professional security reports. For authorized security testing only! 🛡️🔒

SSLBPS is an Android security research project for analyzing APK structure, manifests, Smali code, certificate trust models, and mobile security controls. Built for educational analysis, defensive research, software auditing, and reverse‑engineering learning. Perfect for understanding app architecture, code review, and secure development practices

GOBLIN TSUNAMI - OSINT framework generating 400+ Google Dorks across Instagram, Threads, Facebook & TikTok. Advanced digital footprint analysis with 25+ tracking categories for cybersecurity professionals, threat intelligence, and ethical reconnaissance operations.

SkullVision is a professional-grade cctv hacking framework with 35+ modules, 800+ activities, and 300+ offensive techniques for penetration testing, vulnerability assessment, CCTV security, and credential testing. FOR AUTHORIZED USE ONLY. Professionals only.

Advanced SMTP penetration testing framework featuring AI-driven anomaly detection, 2026 CVE database, multi-threaded brute force, email harvesting, TLS certificate analysis, SPF/DKIM/DMARC validation, and interactive TUI. Gray hat tool for professional security assessments and bug bounty hunting.

DigitalDart is a cutting-edge cybersecurity reconnaissance tool that validates email existence across 30+ providers using SMTP/HTTP/Headless Browser verification. Features async architecture, Tor/proxy support, cyberpunk TUI/CLI, and bulk scanning for OSINT, pentesting, and security audits.

secMONSTER performs 150+ security tests including XSS, SQLi, RCE, SSRF, LFI, SSTI, XXE, NoSQL, CMDi, CRLF, open redirect, JWT attacks, OAuth/SAML bypass, cloud metadata (AWS/GCP/Azure), container escape, Kubernetes, WebSocket, HTTP/2, DNS rebinding, QUIC, API/GraphQL, AI prompt injection, Web3/DeFi, and comprehensive vulnerability exploitation

TELGUARD-X v4.0 is an advanced mobile network penetration testing framework for GTP host discovery, 5G core analysis, API security testing, container detection, JWT/OAuth2 testing, threat intelligence integration, and comprehensive vulnerability assessment with interactive HTML reports.

UGM-133: Advanced 10-Layer DDoS testing tool for security professionals. Multi-vector attack engine with async architecture, IP spoofing, amplification, WebSocket/SIP floods, and slow-layer attacks. Educational cybersecurity research only. Full OSI layer penetration testing simulation. Python-based.

THUGSAPI - Advanced Web Reconnaissance & APi-Key Bypassing Tool for professional penetration testing, featuring multi-phase analysis, WAF evasion, subdomain takeover detection, GraphQL introspection, JWT decoding, CORS analysis, and comprehensive secret discovery across 50+ security checks.

ProfileYOKAI is a Python-powered Wattpad OSINT and reconnaissance framework built to collect, analyze, and organize publicly available profile intelligence. It streamlines username investigation, profile discovery, metadata extraction, and structured reporting for authorized security research, digital investigations, and OSINT workflows.

TikTok User Info Scraper & Username Reconnaissance Framework - A strategic OSINT & cybersecurity reconnaissance tool for TikTok profile intelligence gathering, cross-platform username enumeration, and digital footprint analysis.

LocBITE - Location, Binary, Image, Temporal, EXIF... is a professional photo forensics and metadata extraction tool for cybersecurity professionals, digital forensic investigators, OSINT analysts, and researchers. It extracts hidden image intelligence including GPS location, EXIF data, timestamps, device information etc

HelloSpecter is a professional cybersecurity partners reconnaissance & vulnerability assessment tool for HelloTalk. It combines OSINT capabilities, security testing (authentication flaws, API exploitation, injection vulnerabilities), IP and multi-platform username hunting with automatic sanitization. Designed for security researchers only

ParamScout is an advanced HTTP parameter discovery tool that combines intelligent anomaly detection, passive intelligence gathering from Wayback Machine, CommonCrawl, and OTX, with multi-method support (GET, POST, JSON, XML) to uncover hidden and vulnerable parameters in web applications efficiently and stealthily.

BGP is a Gateway Protocol client supporting 4‑byte ASN, multiprotocol extensions, route refresh, ADD‑PATH, and exponential backoff reconnection. Delivers JSON logs, thread‑safe output, and automatic dependency installation via Python launcher. Ideal for peering, testing, and monitoring BGP sessions in production or lab environments.

TestCardX is a professional-grade credit card testing & validation framework for payment gateway integration, security auditing, and QA. Features Luhn-valid generation, multi-country BIN database, batch processing, parallel execution, and multiple export formats For authorized testing only.

iPerf3 Test Suite v2.0 is a powerful network performance analysis tool featuring 71 pre‑built iPerf3 commands across 7 categories (Bandwidth, TCP, UDP, Wi‑Fi, Latency, Infrastructure, Advanced). For authorised network troubleshooting, ISP verification, VPN testing, and capacity planning. 🚀