Awesome Open Source

Programming Languages

Search results for osint recon

104 search results found

Amass ⭐ 11,764

In-depth attack surface mapping and asset discovery

Theharvester ⭐ 10,375

E-mails, subdomains and names Harvester - OSINT

Red Teaming Toolkit ⭐ 8,230

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Oneforall ⭐ 7,315

OneForAll是一款功能强大的子域收集工具

Rengine ⭐ 6,446

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Reconftw ⭐ 5,204

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Hakrawler ⭐ 4,120

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

H8mail ⭐ 3,476

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

A recursive internet scanner for hackers.

Awesome Asset Discovery ⭐ 1,749

List of Awesome Asset Discovery Resources

Reconspider ⭐ 1,729

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

Redteam Offensivesecurity ⭐ 1,630

Tools & Interesting Things for RedTeam Ops

Urlhunter ⭐ 1,384

a recon tool that allows searching on URLs that are exposed via shortener services

Cariddi ⭐ 1,228

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Metabigor ⭐ 1,087

OSINT tools and more but without API ke

Hosthunter ⭐ 1,060

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Inventory ⭐ 1,019

Asset inventory of over 800 public bug bounty programs.

Maryam: Open-source Intelligence(OSINT) Framework

Sitedorks ⭐ 719

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

Datasurgeon ⭐ 630

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Secuirty Numbers and a lot More From Text

Go CLI and Library for quickly mapping organization network ranges using ASN information.

Infoooze ⭐ 590

A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

Censys Subdomain Finder ⭐ 589

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

Aiodnsbrute ⭐ 579

Python 3.5+ DNS asynchronous brute force utility

All in One Recon Tool for Bug Bounty

Find emails of Github users

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

Bigbountyrecon ⭐ 471

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

Ntlmrecon ⭐ 458

Enumerate information from NTLM authentication enabled web endpoints 🔎

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

Network footprint scanner platform. Discover domains and run your custom checks periodically.

Poastal ⭐ 366

Poastal - the Email OSINT tool

Osint_team_links ⭐ 313

Links for the OSINT Team

Awesome Cyber Security ⭐ 255

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

An advanced tool for email reconnaissance

Bucketloot ⭐ 252

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

Arsenal ⭐ 247

Arsenal is a Simple shell script (Bash) used to install tools and requirements for Bug Bounty

🦚 A web-app pentesting suite written in rust .

OSINT Tool on Twitter and Instagram.

Bbrecon ⭐ 179

Python library and CLI for the Bug Bounty Recon API

Geo Recon ⭐ 165

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Infohound ⭐ 130

InfoHound is an OSINT to extract a large amount of data given a web domain name.

Web Hacking Toolkit ⭐ 127

A web hacking toolkit (docker image).

Insiders ⭐ 111

Archive of Potential Insider Threats

Traxosint ⭐ 109

Osint tool for track ip adress

Hakip2host ⭐ 99

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

Osinteye ⭐ 91

Username enumeration & reconnaisance suite

Bevigil Osint Cli ⭐ 88

bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API.

SubEvil is an advanced open source intelligence framework (OSINT) for grouping subdomains.

A simple tool that helps to find assets/domains based on the Google Analytics ID.

Automate recon for red team assessments.

Recon365 ⭐ 77

Gather information from an email address connected to Office 365

Bugradar ⭐ 72

Advanced external automation on bug bounty programs by running the best set of tools to perform scanning and finding out vulnerabilities.

Web Recon ⭐ 71

All About Web Recon & OSINT

spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong to a specific organization.

Enumerepo ⭐ 60

List all public repositories for (valid) GitHub usernames

Osint Recon ⭐ 51

Open source intelligence tools and resources

Sifter - All purpose penetration testing op-center

Monitoring the Cloud Landscape

Osint Tools ⭐ 45

Resources I use for OSINT

Osint Tools ⭐ 42

OSINT tools can be used for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.

Pentesting Resources ⭐ 37

Resources, repos and scripts for pentesters and bug bounty.

Pasv Agrsv ⭐ 34

Passive recon / OSINT automation script

Webhackurls ⭐ 34

Simple python OSINT tool for urls recon thanks to the waybackmachine.

Burp Ntlm Challenge Decoder ⭐ 33

Burp extension to decode NTLM SSP headers and extract domain/host information

Thorndyke ⭐ 32

Lightweight username enumeration tool that checks the availability of a specified username on over 200 websites.

Social-Media OSINT tool - gather info on users across multiple platforms; easily extensible by design. 📷

Revwhoix ⭐ 28

A simple utility to perform reverse WHOIS lookups using whoisxml API

Simple Python tool to check if there is an Office 365 instance linked to a domain.

Red Team Tools ⭐ 27

Domaindouche ⭐ 25

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

Related subdomains finder

Initiate external reconnaissance, parse Nessus xml reports and more.

A semi-automatic osint/recon framework.

a tool for extracting, searching, and saving JavaScript files (with optional headless browser)

Nuubi Tools (Information-ghatering|Scanner|Recon.)

🌐 Get Some Useful Info From Domain/IP/ASN 🔥

Command Line Sock Puppet Creator for Investigators.

Searcher ⭐ 13

Run a base query (plus optional add-ons) through ask, bing, brave, duck duck go, yahoo, and yandex.

Retrieves information about a given domain from the Google Transparency Report : https://transparencyreport.google.com/https/certif

This is a Python based GUI(Graphical User Interface) application for Google Dorking. Easy and convinient tool

Acquirer.sh ⭐ 9

acquirer.sh A Automated recon script made by @AlbonyCal

Distro_osint_v2 ⭐ 9

Actualización de Huron, distro Linux para Osint

Subdomainfinder ⭐ 8

Find subdomains by searching public certificate records

Automation platform for open source intelligence

Recon Deutschland ⭐ 8

Wie man die komplette öffentliche Verwaltung in Deutschland scannt.

A simple utility to generate domain names with all possible TLDs

Doing recon is important. No matter if you do investigation or simple recon on your target, OSINT plays a heavy part. This is scripts that I've made over the time to do so, it's a mishmash of languages - But who cares!

Osint Framework ⭐ 6

🍴 All-in-one OSINT-RECON Swiss Knife

💥 This tool is intended for bounty hunters, the script installs and launches the best set of tools for expanding the attack surface, for Web Sites, portals, and Organizations.

Lemme See ⭐ 6

Automated Dork scanner designed for Hunters

Sec_toolbelt ⭐ 5

Tools for recon and enumeration, feel free to alter them to your will

Cert4recon ⭐ 5

Simple passive Python Recon tool for subdomains enumeration with crt.sh

Br0ther_ey3 ⭐ 5

A python based RECON Tool for collecting data on people by their usernames. Capable of getting data from 50+ websites as of 28/06/2022.

Related Searches

Python Osint (666)

Python Recon (372)

1-100 of 104 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.