reconnaissance-tool

Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subdomains, SSL certificates, exposed services, archived content, and configuration data. — Omnisci3nt gives you the full picture in seconds.

Advanced reconnaissance framework for bug bounty hunters - Automate subdomain enumeration, vulnerability scanning, and security reconnaissance with 30+ integrated tools.

Kumo 蜘蛛 is a domain OSINT & security reconnaissance framework. Drop a domain, get everything back in real time across 26 parallel modules: DNS, open ports, leaked credentials, infostealer infections, vulnerable endpoints, subdomains, CVEs, malware families, and more.

An Open Sourced Model Context Protocol (MCP) Local server that gives AI Clients real-time cybersecurity reconnaissance capabilities

Helix by thalha-a9 — An advanced asynchronous OSINT identity mapper and relation tool.

Discover hidden information on the web with "Elite Google Dorks Search by Biscuit." This collection offers smart and improved Google search queries to help you find data and vulnerabilities more easily. Perfect for anyone interested in cybersecurity, it makes searching more effective and efficient.

⚡ Automated recon framework using modern web reconnaissance techniques 🔍 Subdomain enumeration, crawling, URL normalization & vulnerability template scanning 📱 Built for Termux and Linux

Ultimate Automation using tools like puredns, httpx, dnsx, smap, aquatone, waybackurls, gf, massdns, subzy, waymore, assetfinder, subfinder, and amass. Runs in Docker.

Fully Autonomous Bug Hunting & Attack Surface Engine

gScan is a Python-based Google dorking automation tool for reconnaissance and OSINT in web security testing. It helps security researchers quickly generate targeted Google search queries to discover subdomains, exposed files, login portals, and publicly indexed sensitive information.

Reverse IP & Subdomain enumeration tool : bulk scan with 30 threads, powered by 3B+ DNS records from dnsrift.net

PyQt5-based GUI tool that unifies multiple reconnaissance utilities for active and passive information gathering

High-performance network reconnaissance engine built with a modular C11/Rust architecture. Features epoll-based async I/O, O(1) scheduling, and 5-level stealth profiling for advanced security auditing.

BLACKSURFACE is an offensive security reconnaissance and attack-surface mapping platform designed for bug bounty hunters, red teamers, and Penetration Testers. It centralizes reconnaissance workflows, tools, and intelligence into a single, high-impact command interface.

DigitalDart is a cutting-edge cybersecurity reconnaissance tool that validates email existence across 30+ providers using SMTP/HTTP/Headless Browser verification. Features async architecture, Tor/proxy support, cyberpunk TUI/CLI, and bulk scanning for OSINT, pentesting, and security audits.

FlowOsint is an all-in-one web reconnaissance framework built for security researchers, penetration testers, and bug bounty hunters. Point it at a target and it automatically maps the attack surface — subdomains, hidden files, exposed secrets, misconfigurations, open ports, breach history, and more — all from a single interactive terminal menu.

NightProbe - Web Security Scanner built with Python and Django for reconnaissance, vulnerability scanning, and security research.

Reltih.js is a highly stealthy browser fingerprinting and reconnaissance framework designed for Before gaining internal access of a target

A high-performance reconnaissance tool built specifically for frontend web security.