recon-tool

Discover new target domains using Content Security Policy

Probe: This is a special tool for bug hunter for automated recon process smoothly.

A comprehensive OSINT (Open Source Intelligence) script that gathers detailed information about a target domain using various public sources and APIs. It integrates multiple tools to create an extensive intelligence report, making it ideal for cybersecurity professionals.

Get acquisitions by scraping titles of crunchbase.

MottaHunter: Advanced email reconnaissance tool for security professionals. Hunt emails across Google, Twitter, and LinkedIn, validate via SMTP, and generate smart permutations. Features rate limiting, catch-all detection, and permutation splitting for stealth operations.

A powerful tool which check the username on hundreds of websites works on kali linux and termux both

Python tool which checks for data breaches for provided emails

A basic passive reconnaissance tool made using Python. It checks tech stacks, security headers and hidden directories in a website.

ReconDorker Pro is an elite, high-performance OSINT reconnaissance framework designed for deep intelligence gathering. By orchestrating advanced dorking techniques across multiple search engines, it automates the discovery of sensitive data, exposed assets, and shadow infrastructure.

Fast favicon reconnaissance tool for extracting, hashing, and analyzing website favicons with Shodan, FOFA, Censys, ZoomEye, and Quake query generation.

Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — written in async Rust.

High-Speed Subdomain Enumeration & Automated Recon Tool for Bug Bounty Hunters. Amass Alternative.

People Search is a web-based OSINT tool that generates Google dorks to find people using their name and a clue.

🦙 Evil-Ollama v3.0 — Exposed Ollama Instance Hunter, Vulnerability Scanner & Proxy Tool. Find, fingerprint & exploit publicly exposed Ollama LLM instances.

Ghost Eye Information gathering Foot printing Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff

Banner hunter

WPFather - WordPress Vulnerability Scanner & Security Recon Tool with 16 Modules | Zero Config Single Binary

Passive Recon Suite — Harvest URLs, discover subdomains, filter live endpoints and extract parameters from public archives & OSINT sources.

DirX is a high-performance directory brute-force tool designed for fast and precise web reconnaissance. Powered by async scanning, it offers status filters, response exclusion, proxy support, and real-time progress with ETA, helping pentesters and bug bounty hunters discover hidden endpoints efficiently.

React and Go (Fiber) based web tool for fast and clean subdomain enumeration using Subfinder and Sublist3r.