Reconnaissance Tools

808 tools
DNSlivery
DNSlivery
Open Source Reconnaissance

Easy files and payloads delivery over DNS

dnsmonster
dnsmonster
Open Source Forensics Reconnaissance

Passive DNS Capture and Monitoring Toolkit

DNSrecon
DNSrecon
Open Source Kali Reconnaissance

DNS enumeration script supporting zone transfers, reverse lookups, SRV record enumeration, top-level domain expansion, and brute-force subdo…

dnstwist
dnstwist
Open Source Reconnaissance Scanning & Enumeration

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dnstwister
dnstwister
Free Reconnaissance Social Engineering

Domain name permutation as a service

DNSWatch
DNSWatch
Open Source Kali Reconnaissance

DNSWatch - DNS Traffic Sniffer and Analyzer

dnsx
dnsx
Open Source Reconnaissance Scanning & Enumeration

Fast and multi-purpose DNS toolkit from ProjectDiscovery. Resolves domains, performs wildcard filtering, brute-forces subdomains, and extrac…

DocuFinderJS
DocuFinderJS
Open Source Reconnaissance

An external attack surface monitoring (EASM) tool to find externally accessible documents.

domain-digger
domain-digger
Open Source Reconnaissance

Full Toolkit for Next-Level Domain Analysis

Domain-Response
Domain-Response
Open Source Reconnaissance Social Engineering

Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to automate…

domainthreat
domainthreat
Open Source Reconnaissance Social Engineering

Newly registered Domain Monitoring to detect phishing and brand impersonation with subdomain enumeration and source code scraping

DorkAgent
DorkAgent
Open Source Reconnaissance

đŸ¤– LLM-powered agent for automated Google Dorking in bug hunting & pentesting.

DorkEye
DorkEye
Free Exploitation Reconnaissance

Automated Google Dorking Tool. Generates and runs advanced search queries for exposed files. It also tests SQLi, Analyzes and extracts metad…

DorkHub
DorkHub
Open Source Exploitation Reconnaissance

DorkHub is the security researcher's companion. It’s a comprehensive repository of Google dorks collected in one place, specifically designe…

DorkingDB
DorkingDB
Open Source Reconnaissance

Collection of dorking-related resources. Dorks lists, Cheatsheets, Articles, Databases. Google, Yahoo, Yandex, Bing, Baidu, DuckDuckGo, Brav…

dorks_hunter
dorks_hunter
Free Reconnaissance

Simple Google Dorks search tool

Dorks-collections-list
Dorks-collections-list
Free Reconnaissance

List of Github repositories and articles with list of dorks for different search engines

doxcord
doxcord
Free Reconnaissance

osint tool for dumping links containing trackers from each user on one or all discords

dpulse
dpulse
Open Source Reconnaissance

DPULSE - Tool for complex approach to domain OSINT

DraculaOS
DraculaOS
Free Kali Reconnaissance

Dracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber ​​Intelligence missions.

DSInternals
DSInternals
Open Source Post-Exploitation Reconnaissance

Directory Services Internals (DSInternals) PowerShell Module and Framework

E4GL30S1NT
E4GL30S1NT
Open Source Reconnaissance

E4GL30S1NT - Simple Information Gathering Tool

Email-Username-OSINT
Email-Username-OSINT
Free Reconnaissance

Some great resources to gather OSINT on Email Addresses & Usernames. Alternatively check the exposure of your Email & Username.

email2phonenumber
email2phonenumber
Open Source Reconnaissance

A OSINT tool to obtain a target's phone number just by having his email address