Reconnaissance Tools

808 tools
Emora-Project
Emora-Project
Free Reconnaissance

Emora is an OSINT tool like sherlock but with a GUI, which search for accounts by username across social networks

emploleaks
emploleaks
Free Exploitation Reconnaissance

An OSINT tool that helps detect members of a company with leaked credentials

EndPointer
EndPointer
Open Source Reconnaissance

This is the open sourced code for the extension, EndPointer

ethical-hacking-tools-python
ethical-hacking-tools-python
Open Source Reconnaissance

Python programs & tools built in the Ethical Hacking with Python EBook

Exif
Exif
Open Source Reconnaissance

ExifTool is a powerful command-line tool that can be used to extract and edit metadata in a wide range of media files, including images, aud…

exifLooter
exifLooter
Open Source Exploitation Reconnaissance

ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap

ExifTool
ExifTool
Open Source Kali Forensics Reconnaissance

Platform-independent Perl library and command-line tool for reading, writing, and editing metadata in a wide variety of files including phot…

exiftool-web
exiftool-web
Free Reconnaissance

exiftool (OSINT image metadata utility) in the browser (via WebAssembly!)

exploit
exploit
Open Source Post-Exploitation Reconnaissance

This is An Offensive Hacking Tool which can be used by hackers and for penetration testing purposes. Hack Responsibly!!!!!!!

exposor
exposor
Open Source Exploitation Reconnaissance

Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.

eye_of_web
eye_of_web
Open Source Reconnaissance

State of the art OSINT tool. | A powerful open-source alternative to other face search engines.

EyeSpy
EyeSpy
Open Source Exploitation Reconnaissance

EyeSpy is a PowerShell tool for finding IP Cameras and spraying credentials at the underlying RTSP streams if present.

EyeWitness
EyeWitness
Open Source Kali Reconnaissance Web Application

Takes screenshots of web pages, RDP, and VNC services. Reports on default credentials and interesting headers. Useful for rapidly assessing …

fav-up
fav-up
Open Source Reconnaissance

IP lookup by favicon using Shodan

favicorn
favicorn
Open Source Exploitation Post-Exploitation

All-sources tool to search websites by favicons

favihunter
favihunter
Open Source Reconnaissance

Discover and monitor internet assets using favicon hashes across search engines.

favirecon
favirecon
Open Source Reconnaissance Web Application

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

FBI_Watchdog
FBI_Watchdog
Open Source Reconnaissance

FBI Watchdog is a multi-layered domain monitoring tool that detects law enforcement seizures, DNS changes, HTTP fingerprint shifts, WHOIS re…

FBI-tools
FBI-tools
Free Forensics Reconnaissance

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

fetchmeurls
fetchmeurls
Open Source Reconnaissance

A Tool for Bug Bounty Hunters that uses Passive and Active Techniques to fetch URLs as a strong Recon, so you can then create Attack Vectors…

Fierce
Fierce
Open Source Kali Reconnaissance

DNS reconnaissance tool for locating non-contiguous IP space and hostnames against specified domains. Performs zone transfers, brute-force, …

fierce
fierce
Open Source Reconnaissance

A DNS reconnaissance tool for locating non-contiguous IP space.

FinalRecon
FinalRecon
Open Source Reconnaissance

findcdn
findcdn
Free Reconnaissance Scanning & Enumeration

findCDN is a tool created to help accurately identify what CDN a domain is using.