Recon & OSINT

Recon-ng

Modular web reconnaissance framework.

osintrecon

recon-ng — terminal

$ recon-ng -w example

What it does

Recon-ng offers a Metasploit-style module framework for web-based OSINT and stores results in a per-workspace database. Modules cover hosts, contacts, credentials, and more.

Source

https://github.com/lanmaster53/recon-ng ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.dnsxFast, multi-purpose DNS toolkit for resolution and probing.theHarvesterEmail, subdomain, and host OSINT gathering.

Need hosted scanning instead of local tooling?

Run a scan in the browser →