reconnaissance

Hunt down social media accounts by username across social networks

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Information gathering framework for phone numbers

E-mails, subdomains and names Harvester - OSINT

Fast passive subdomain enumeration tool.

OSINT Framework

Accurately Locate Smartphones using Social Engineering

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

A Modern Orchestration Engine for Security

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

一个攻防知识库。A knowledge base for red teaming and offensive security.

The Ultimate Information Gathering Toolkit

A high performance offensive security tool for reconnaissance and vulnerability scanning

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

Quickly discover exposed hosts on the internet using multiple search engines.

All In One Web Recon

List of Awesome Asset Discovery Resources

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

Semi-automatic OSINT framework and package manager

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

A DNS reconnaissance tool for locating non-contiguous IP space.

Real-world infosec wordlists, updated regularly