VulnScanners Logo

Recon & OSINT

Recon-ng

Modular web reconnaissance framework.

osintrecon
recon-ng — terminal
$ recon-ng -w example

What it does

Recon-ng offers a Metasploit-style module framework for web-based OSINT and stores results in a per-workspace database. Modules cover hosts, contacts, credentials, and more.

Common use cases

  • •Run a structured, repeatable OSINT workflow against multiple targets in separate workspaces.
  • •Harvest contacts, credentials, and subdomains through a single modular interface.
  • •Chain automated modules to build a complete target profile without manual copying between tools.

Key features

  • •Module-based architecture similar to Metasploit for reconnaissance.
  • •Stores all results in a per-workspace SQLite database for easy querying.
  • •Includes modules for contacts, hosts, locations, credentials, and more.
  • •Generates reports in HTML, CSV, and JSON formats.

Source

https://github.com/lanmaster53/recon-ng ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.dnsxFast, multi-purpose DNS toolkit for resolution and probing.theHarvesterEmail, subdomain, and host OSINT gathering.

Need hosted scanning instead of local tooling?

Run a scan in the browser →