Tools that recon

Automated Active Directory pentesting tool for Linux.

Automated external attack-surface mapping.

Recursive internet scanner for recon and attack-surface mapping.

Account search across 600+ networks.

Active Directory attack-path graphing.

Find public exploits and PoCs for a given CVE ID.

Custom wordlist generator.

Active Directory Certificate Services attack tool.

Visualize AWS environments.

Wordlist framework for hackers.

Docker enumeration + container escape.

MCP server exposing 66 dark-web threat-intelligence tools to AI.

Profile and deanonymize users from public post history.

Advanced web path scanner.

Directory, DNS and vhost brute-forcer.

Microsoft Graph post-exploitation toolset.

OSINT-driven hostname discovery.

Python toolkit for Windows protocols.

Next-generation crawling framework.

Kerberos username enumeration and brute-forcing.

Mine historical contacts from web.archive.org snapshots.

Linux privilege-escalation enumerator.

Curated kernel privesc exploit database.

Local-LLM CLI that drives recon tools and AI-analyzes targets.