operator utilities
Scripts, tools, automation, recon helpers, security utilities, GitHub projects, and snippets from the black3dm0nd workflow.
Public repositories and release notes for tools created by black3dm0nd.
Clone, install, and usage commands kept visible for quick local testing.
Utilities are organized around authorized testing, reporting, and repeatability.
External reconnaissance for a domain's mail, identity, hosting, web stack, and public exposure.
Passive-first domain profiling for authorized external engagements, with opt-in modules for website fingerprinting, subdomain discovery, and people or email OSINT.
External identity reconnaissance for Microsoft 365 and Entra ID environments.
Credential-free modules for account enumeration, tenant and domain identity posture discovery, and username-format detection from public authentication endpoints.
Client-side attack-surface mapper for JavaScript-heavy web assessments.
Scans local files, URLs, URL lists, stdin, or crawled sites for secrets, endpoints, parameters, source maps, DOM-XSS leads, and client-side misconfigurations.
