git clone https://github.com/rawfilejson/awesome-osint-arsenal && cd awesome-osint-arsenal && sudo bash install.sh
### 🎯 Or pick just what you need
sudo bash osint.sh # 🔍 OSINT only (Sherlock, Maigret, Amass, …)
sudo bash redteam.sh # ⚔️ Red team (Sliver, BloodHound, Mimikatz, Nuclei, …)
sudo bash blueteam.sh # 🛡️ Blue team (Wazuh, Sigma, Suricata, Velociraptor, …)
sudo bash forensics.sh # 🔬 DFIR + RE (Volatility, Ghidra, radare2, …)
sudo bash hardware.sh # 🔌 Hardware + SDR (binwalk, hackrf, openocd, …)
sudo bash labs.sh # 🎓 Vulnerable apps for practice (DVWA, Juice Shop, …)
bash termux.sh # 📱 Android (Termux subset, no sudo needed)
> Works on **Kali, Debian, Ubuntu, Parrot, Mint, Pop!_OS** (best — `apt`)
> Partial on **Arch / Manjaro / Fedora / RHEL** (auto-detected, falls back to git/pip/go)
> Termux subset on **Android**
[!IMPORTANT]
🙏 A note before you fork
This repo has 753 tools across 50 categories. Keeping that current — links, install commands, new tools every week — is a lot for one person.
If nobody helps, parts of this list will go stale. That's just real talk.
How you can help in 30 seconds: - ⭐ Star the repo (more stars = more contributors find it) - 🐛 Spotted a dead link? Open an issue, takes 1 minute - 🧩 Adding a tool? Skim CONTRIBUTING.md first — keeps your PR from getting closed - ☕ Buy me a coffee so weekends keep going to this - 📢 Share it — tweet, Discord, wherever the security crowd hangs out
If something's broken: don't just complain — open an issue or PR. That's how this stays useful.
[!WARNING] DISCLAIMER: This repository is for educational and authorized security research only. Always obtain written permission before testing systems you do not own. The authors are not responsible for any misuse of the tools or techniques listed here. See the full Legal Disclaimer at the bottom.
git clone https://github.com/rawfilejson/awesome-osint-arsenal
cd awesome-osint-arsenal
sudo bash install.sh
| Script | What it installs | Use when |
|---|---|---|
osint.sh |
OSINT tools (Sherlock, Maigret, Amass, theHarvester, …) | You only do recon / investigations |
redteam.sh |
Sliver, BloodHound, Impacket, NetExec, Mimikatz, Nuclei, … | Authorized pentesting / red team |
blueteam.sh |
Wazuh, Sigma, Suricata, Velociraptor, Atomic Red Team, MITRE CALDERA | SOC / detection engineering |
forensics.sh |
Volatility 3, Ghidra, radare2, Plaso, CyberChef, … | DFIR / malware analysis |
hardware.sh |
binwalk, hackrf, openocd, GNU Radio, gqrx, … | RF / IoT / firmware research |
labs.sh |
DVWA, Juice Shop, WebGoat (Docker) | Local practice labs |
termux.sh |
Android-compatible subset | Phone-based recon |
The installers auto-detect your package manager:
| Distro | Manager | Status |
|---|---|---|
| Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS | apt |
✅ Best — primary target |
| Arch / Manjaro / EndeavourOS | pacman |
🟡 Partial (apt-only tools skip cleanly) |
| Fedora / RHEL / Rocky / Alma | dnf |
🟡 Partial (apt-only tools skip cleanly) |
| Termux (Android) | pkg |
✅ Subset only — use bash termux.sh |
| macOS / Windows | — | ❌ Use a Kali VM or WSL2 |
~/osint-install-errors.log/opt/osint-arsenal/ (or $HOME/osint-arsenal/ on Termux)echo 'export PATH="$PATH:/opt/osint-arsenal"' >> ~/.bashrc
source ~/.bashrc
Tools installed via apt/pip/go install are already on your $PATH.
| 日期 | 榜单 | 排名 | 周期新增 | 总 STAR |
|---|