Tools that recon

Python toolkit for Windows protocols.

Map the associations of a private Instagram account.

Local-first social media OSINT research agent.

Next-generation crawling framework.

Kerberos username enumeration and brute-forcing.

Mine historical contacts from web.archive.org snapshots.

Passive credential-leak discovery across breach sources

Linux privilege-escalation enumerator.

Curated kernel privesc exploit database.

Local-LLM CLI that drives recon tools and AI-analyzes targets.

Username OSINT across 3000+ sites.

Self-hostable email OSINT platform, no API keys required.

Graph-based OSINT and link analysis.

Mass IP port scanner.

Fast port scanner in Go.

Fast service fingerprinting CLI for 170+ protocols

Network service exploitation.

The classic network mapper and port scanner.

Modular Go framework for attack surface management and scanning

Local-first link-analysis and geospatial board for investigations.

In-depth attack surface mapping.

AI-powered OSINT agent with REPL, CLI and MCP server.

Evaluate IAM permissions in AWS.

Open-source AWS exploitation framework.