Tools that recon

Gather open-source intelligence about a target.

82 tools indexed

httpx

—

Fast HTTP toolkit.

ReconScanWeb apps

GoMIT

ldapdomaindump

—

AD information dumper via LDAP.

ReconActive Directory

PythonMIT

linuxprivchecker

—

Linux privesc enumeration script.

ReconScanEndpoints

PythonCustom

pspy

—

Spy on Linux processes without root.

MonitorReconEndpoints

GoMIT

reNgine

—

Automated reconnaissance framework for web applications

ReconScanWeb appsNetworks

PythonGPL-3.0

reconFTW

—

Automated recon and web vulnerability-scanning framework.

ReconScanWeb appsNetworks

ShellMIT

sn0int

—

Semi-automatic OSINT framework.

ReconAutomateWeb appsNetworks

RustGPL-3.0

theHarvester

—

E-mail and subdomain harvester.

ReconWeb appsNetworks

PythonGPL-2.0

wafw00f

—

WAF fingerprinting.

ReconScanWeb apps

PythonBSD-3-Clause

waybackurls

—

Historical URLs from the Wayback Machine.

ReconWeb apps

GoMIT