Hunt down social media accounts by username across social networks
E-mails, subdomains and names Harvester - OSINT
一个攻防知识库。A knowledge base for red teaming and offensive security.
A high performance offensive security tool for reconnaissance and vulnerability scanning
All In One Web Recon
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
The Ultimate Information Gathering Toolkit
🆕 The Multi-Tool Web Vulnerability Scanner.
The Offensive Manual Web Application Penetration Testing Framework.
A DNS reconnaissance tool for locating non-contiguous IP space.
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
Information gathering tool - OSINT
Making Favicon.ico based Recon Great again !
Maryam: Open-source Intelligence(OSINT) Framework
HostHunter a recon tool for discovering hostnames using OSINT techniques.
secator - the pentester's swiss knife
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
A (partial) Python rewriting of PowerSploit's PowerView
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
Add a description, image, and links to the reconnaissance topic page so that developers can more easily learn about it.
To associate your repository with the reconnaissance topic, visit your repo's landing page and select "manage topics."