Awesome Open Source

Programming Languages

Search results for reconnaissance

reconnaissance x

467 search results found

Url Tracker ⭐ 285

Change monitoring app that checks the content of web pages in different periods.

Blacksheepwall ⭐ 279

blacksheepwall is a hostname reconnaissance tool

Master script for web reconnaissance

Sniffrom ⭐ 270

A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.

Phomber ⭐ 255

[PH0MBER]: An open source infomation grathering & reconnaissance framework!

An advanced tool for email reconnaissance

Bucketloot ⭐ 252

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

Csprecon ⭐ 248

Discover new target domains using Content Security Policy

Arsenal ⭐ 247

Arsenal is a Simple shell script (Bash) used to install tools and requirements for Bug Bounty

Cut Cdn ⭐ 243

✂️ Removing CDN IPs from the list of IP addresses

A passive subdomain finder

Autorecon ⭐ 235

Simple shell script for automated domain recognition with some tools

Recon My Way ⭐ 230

This repository created for personal use and added tools from my latest blog post.

Yar is a tool for plunderin' organizations, users and/or repositories.

Gorecon ⭐ 227

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

Investigator ⭐ 218

An online handy-recon tool

Web Security Scanner

A modular OSINT honeypot for blue teamers

N0kovo_subdomains ⭐ 214

An extremely effective subdomain wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

Subrake ⭐ 211

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

Generate tens of thousands of subdomain combinations in a matter of seconds

🕵️ Email osint tool

Intelspy ⭐ 197

Perform automated network reconnaissance scans

Investigo ⭐ 191

🔎 Find usernames and download their data across social media.

I See You ⭐ 188

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.

ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight

Gotator ⭐ 183

Gotator is a tool to generate DNS wordlists through permutations.

A Github organization reconnaissance tool.

Sagemode ⭐ 178

👀Sagemode: Track and Unveil Online identities across social media platforms🕵️‍♂️

Subdomz ⭐ 177

All in One Subdomain Enumeration Tool

Instarecon ⭐ 176

Automated digital reconnaissance

Bug_bounty_tools_and_methodology ⭐ 175

Bug Bounty Tools used on Twitch - Recon

Reconky Automated_bash_script ⭐ 170

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

Lazyrecon ⭐ 169

An automated approach to performing recon for bug bounty hunting and penetration testing.

Geo Recon ⭐ 165

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Intrec Pack ⭐ 164

Intelligence and Reconnaissance Package/Bundle installer.

Osmedeus Base ⭐ 163

Build your own reconnaissance system with Osmedeus Next Generation

Autosetup ⭐ 162

Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.

Recsech ⭐ 161

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

Secretopt1c ⭐ 156

SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

Make URL path combinations using a wordlist

Skytrack ⭐ 153

skytrack is a planespotting and aircraft OSINT tool made using Python 🛩🔍

Favirecon ⭐ 149

Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

Dnsdumpster ⭐ 148

A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups

Webosint ⭐ 148

W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering.

Knockknock ⭐ 147

A simple reverse whois lookup tool which returns a list of domains owned by people or companies

Tugarecon ⭐ 144

Pentest: Subdomains enumeration tool for penetration testers.

Scriptkiddi3 ⭐ 141

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools.

Ntlm_challenger ⭐ 141

Parse NTLM challenge messages over HTTP and SMB

Git Secret ⭐ 141

Go scripts for finding sensitive data like API key / some keywords in the github repository

Sherlock Js ⭐ 140

Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock

Bitcrook ⭐ 139

Open-Source Intelligence Apparatus

Bug Bounty Recon Dataset ⭐ 138

recon data for public bug bounty programs (irregular updates)

Sourcewolf ⭐ 137

Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥

Kitsec Core ⭐ 136

Ethical hacking, made easy.

Ashok is a OSINT Recon Tool , a.k.a 😍 Swiss Army knife .

Web Hacking Toolkit ⭐ 127

A web hacking toolkit (docker image).

Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers to your "resolver.txt"

Cloudunflare ⭐ 122

Reconnaissance Real IP address for Cloudflare Bypass

Webstor ⭐ 119

A script to quickly enumerate all websites across all of your organization's networks, store their responses, and query for known web technologies, such as those with zero-day vulnerabilities.

Querytool ⭐ 117

Querytool is an OSINT framework based on Google Spreadsheets. With this tool you can perform complex search of terms, people, email addresses, files and many more.

An automation tool to install the most popular tools for bug bounty or pentesting.

Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework

Insiders ⭐ 111

Archive of Potential Insider Threats

Shonydanza ⭐ 110

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Phoneinfoga ⭐ 108

PhoneInfoga is one of the most advanced tools to scan phone numbers using only free resources.

Foxyrecon ⭐ 107

A Firefox add-on for OSINT investigations

Mqtt Pwn ⭐ 105

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

Spaces Finder ⭐ 102

A tool to hunt for publicly accessible DigitalOcean Spaces

Smartrecon ⭐ 102

smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter

Docker Osmedeus ⭐ 99

Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning

Extract pieces of info from a web page's Wayback Machine history

Certeagle ⭐ 98

Weaponizing Live CT logs for automated monitoring of assets

Subscraper ⭐ 97

Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomains to enumerate a list of subdomains for a given URL.

Daprofiler ⭐ 97

DaProfiler allows you to create a profile on your target based in France only. The particularity of this program is its ability to find the e-mail addresses your target.

Urls de-duplication tool for better recon.

The Nmap Scanner for Telco

Smwyg Show Me What You Got ⭐ 95

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.

DNSrr is a tool written in bash, used to enumerate all the juicy stuff from DNS.

Xsubfind3r ⭐ 92

A command-line interface (CLI) based passive subdomain discovery utility. It is designed to efficiently identify known subdomains of given domains by tapping into a multitude of curated online passive sources.

Upi Recon Cli ⭐ 92

UPI Reconnaissance tool

Bing Ip2hosts ⭐ 91

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

Osinteye ⭐ 91

Username enumeration & reconnaisance suite

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

Art Of Packet Crafting With Scapy ⭐ 88

A workshop on Packet Crafting using Scapy.

Xposedornot ⭐ 87

XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.

Lazyrecon ⭐ 87

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

Kostebek ⭐ 86

This script will automatically set up an OSINT workstation starting from a Ubuntu OS.

Graphinder ⭐ 86

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

Sub Drill ⭐ 82

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

yet another Shodan.io client

Chameleonminilivedebugger ⭐ 80

Live logger and GUI tool for the Chameleon Mini developed for Android OS in Java.

A simple tool that helps to find assets/domains based on the Google Analytics ID.

Pentest Tools ⭐ 79

Some random tools I use for penetration testing

Automate recon for red team assessments.

ScanPro - NMap Scanning Scripts ~ Network Mapper

Asnrecon ⭐ 79

ASN reconnaissance script

Xcrawl3r ⭐ 79

A command-line interface (CLI) based utility to recursively crawl webpages. It is designed to systematically browse webpages' URLs and follow links to discover linked webpages' URLs.

Secator - the pentester's swiss knife

101-200 of 467 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.