Tools that recon

Automated external attack-surface mapping.

Account search across 600+ networks.

Active Directory attack-path graphing.

Custom wordlist generator.

Active Directory Certificate Services attack tool.

Visualize AWS environments.

Wordlist framework for hackers.

Docker enumeration + container escape.

Advanced web path scanner.

Directory, DNS and vhost brute-forcer.

Microsoft Graph post-exploitation toolset.

OSINT-driven hostname discovery.

Python toolkit for Windows protocols.

Next-generation crawling framework.

Kerberos username enumeration and brute-forcing.

Linux privilege-escalation enumerator.

Curated kernel privesc exploit database.

Username OSINT across 3000+ sites.

Graph-based OSINT and link analysis.

Mass IP port scanner.

Fast port scanner in Go.

Network service exploitation.

The classic network mapper and port scanner.

In-depth attack surface mapping.