Top 127 recon open source projects

E-mails, subdomains and names Harvester - OSINT

✭ 6,175

python Dockerfile osint redteam reconnaissance recon information-gathering discovery blueteam emails subdomain-enumeration

Amass

In-depth Attack Surface Mapping and Asset Discovery

✭ 6,284

go lua dns osint recon enumeration owasp subdomain network-security maltego hacktoberfest information-gathering osint-reconnaissance hacktoberfest2021 attack-surfaces

Bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

✭ 541

pentesting osint bugbounty cybersecurity pentest-tool reconnaissance recon red-team offensive-security

Reconpi

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

✭ 490

shell hacktoberfest docker raspberry-pi hacking hacking-tool recon

Odin

Automated network asset, email, and social media profile discovery and cataloguing.

✭ 476

python osint neo4j reconnaissance recon

Nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

✭ 451

python pentesting pentest-tool recon enumeration

Shotlooter

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

✭ 451

python screenshot reconnaissance recon

Hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

✭ 427

python python3 open-source hacking tool security-tools pentesting penetration-testing osint bugbounty hacking-tool reconnaissance recon ip network-security

Sifter

Sifter aims to be a fully loaded Op Centre for Pentesters

✭ 403

shell network pentesting penetration-testing scanner osint pentest exploitation recon post-exploitation vulnerability-scanner

Censys Subdomain Finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

✭ 402

python osint pentest-tool recon subdomain-scanner

Dnsgen

Generates combination of domain names from the provided input.

✭ 389

python bugbounty recon domains

Buster

An advanced tool for email reconnaissance

✭ 387

python penetration-testing osint infosec cybersecurity recon emails

Osint team links

Links for the OSINT Team

✭ 378

osint infosec recon journalism

Maryam

Maryam: Open-source Intelligence(OSINT) Framework

✭ 371

python search dns osint search-engine social-network reconnaissance recon owasp

Aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

✭ 370

python security async security-tools pentesting dns osint recon enumeration brute-force red-team subdomain resolver

Docker Onion Nmap

Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.

✭ 345

shell docker security pentesting scanner tor recon nmap

Zen

Find emails of Github users

✭ 343

python github osint recon information-gathering

Natlas

Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.

✭ 333

python infosec reconnaissance recon nmap scanning

Reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters

✭ 322

vue security-tools pentesting recon

Oneforall

OneForAll是一款功能强大的子域收集工具

Vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

✭ 269

javascript hacking pentesting scanner osint pentest-tool recon information-gathering bug-bounty

Pulsar

Network footprint scanner platform. Discover domains and run your custom checks periodically.

✭ 314

javascript security dns scanner osint collaboration integration recon paas

Whatweb

Next generation web scanner

Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

✭ 284

powershell security analysis monitor log recon forensics threat-hunting scan response siem baseline threat

Lazyrecon

An automated approach to performing recon for bug bounty hunting and penetration testing.

✭ 282

shell pentest bugbounty reconnaissance recon

Recon Pipeline

An automated target reconnaissance pipeline.

✭ 278

python python3 security-tools scanner bugbounty reconnaissance recon

Recon My Way

This repository created for personal use and added tools from my latest blog post.

✭ 271

c security-tools testing-tools bugbounty aws-s3 reconnaissance recon

Wordlists

Infosec Wordlists

✭ 271

python security infosec fuzzing dictionary recon discovery payloads

Megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

✭ 268

shell security infosec bugbounty reconnaissance recon

Priest

Extract server and IP address information from Browser SSRF

✭ 13

python HTML recon bugbounty ssrf bugbounty-tool ssrf-payload

fransRecon

Script will enumerate domain name using horizontal enumeration, reverse lookup. Each horziontal domain will then be vertically enumerated using Sublist3r.

✭ 31

python enumeration recon dig masscan oscp

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

✭ 507

security fuzzing recon nuclei bugbounty pentest dirsearch security-tools dirbuster ffuf

targets

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

✭ 85

python security information cybersecurity infosec recon bugbounty security-tools reconnaissance

querytool

Querytool is an OSINT framework based on Google Spreadsheets. With this tool you can perform complex search of terms, people, email addresses, files and many more.

✭ 104

osint lookup recon information-gathering reconnaissance osint-framework osint-resources osint-reconnaissance osint-tools people-search oryon-osint username-lookup email-lookup

reconness-agents

Reconness Agents Script

✭ 25

Dockerfile scripts recon bugbounty agents

nuubi

Nuubi Tools (Information-ghatering|Scanner|Recon.)

✭ 76

python osint scanner recon bugbounty hackertarget informasion-ghatering

osmedeus-workflow

Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own

✭ 26

infosec recon bugbounty osmedeus

SubWalker

Simultaneously execute various subdomain enumeration tools and aggregate results.

✭ 26

shell recon bugbounty subdomain-enumeration

OffensiveCloudDistribution

Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.

✭ 86

HCL shell security recon bugbounty scanning redteam

Reconky-Automated Bash Script

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

✭ 167

shell osint hacking enumeration nmap penetration-testing recon bugbounty bash-script exploitation automated-testing reconnaissance hacking-code pentesting-tools recon-tools bugbounty-tool bugbounty-tools

burp-ntlm-challenge-decoder

Burp extension to decode NTLM SSP headers and extract domain/host information

✭ 28

kotlin windows security osint extension ntlm ssp recon burp

asnap

asnap aims to render recon phase easier by providing updated data about which companies owns which ipv4 or ipv6 addresses and allows the user to automate initial port and service scanning.

✭ 28

go shell automation nmap asn recon information-gathering

cero

Scrape domain names from SSL certificates of arbitrary hosts

✭ 316

go Makefile tls ssl scrape recon websecurity domain-names

mailcat

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

learn

RECON learn: a free, open platform for training material on epidemics analysis

✭ 33

HTML javascript CSS SCSS Less TeX markdown website websites recon htmlwidgets blogdown lockedata outbreaks

Sub-Drill

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

✭ 70

shell subdomain bug-bounty recon bugbounty red-team reconnaissance subdomain-brute red-teaming subdomain-enumeration subdomain-bruteforcing subdomain-finder web-reconnaissance web-recon

goverview

goverview - Get an overview of the list of URLs

✭ 93

go HTML security screenshot browser favicon infosec recon bugbounty favicon-generator chromedp

easyrecon

Tool to automate recon

✭ 37

shell automation recon reconnaissance subfinder httprobe waybackurls cspshivam

recon ex

Elixir wrapper for Recon, tools to diagnose Erlang VM safely in production

✭ 55

elixir recon

ShadowClone

Unleash the power of cloud

✭ 224

python Dockerfile cloud lambda-functions distributed-computing recon bugbounty

WhoEnum

Mass querying whois records

✭ 24

python whois enumeration recon bugbounty

webrecon

Automated Web Recon Shell Scripts

✭ 48

shell security tools penetration-testing pentesting recon bash-script reconnaissance penetration-testing-tools

apkizer

apkizer is a mass downloader for android applications for all available versions.

✭ 40

python apk android-application recon bugbounty reconnaissance apkpure

s3recon

Amazon S3 bucket finder and crawler.

✭ 111

python Makefile crawler s3 s3-bucket finder recon

XposedOrNot

XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.

✭ 120

python osint recon intelligence-gathering reconnaissance password-leak credentials-gathering osinttool penetration-testing-tools breach-compilation password-breach

sharingan

Offensive Security recon tool

✭ 88

go dns security nmap recon

dirbpy

This is the new version of dirb in python

✭ 36

python shell Dockerfile security python-script recon security-scanner security-tools web-scanner webscanner webscan

ICU

An Extended, Modulair, Host Discovery Framework