
httpx
Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

🕵️♂️ Collect a dossier on a person by username from 3000+ sites

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

E-mails, subdomains and names Harvester - OSINT

Project Eyes On is a high-speed, multi-threaded surveillance tool by Y0oshi (@rde0) for locating open IP cameras worldwide. Unifies Google Dorking…

Automated Recon for Pentesting & Bug Bounty

Go client to communicate with Chaos DB API.

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

The most exhaustive list of reliable DNS resolvers.

Monitoring the Cloud Landscape

DNS Enumeration Script

OSINT Tools for the Dark Web

Quickly discover exposed hosts on the internet using multiple search engines.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

Local static query builder for precise search across web engines, Shodan, crt.sh, and Wayback Machine. Supports Google dorks, filetype filters, date…

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)