
WireTapper
Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform DNS…

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

a low(zero) cost threat intelligence&response tool against phishing domains

Find Microsoft Exchange instance for a given domain and identify the exact version

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

A modular recon tool for pentesting

The most exhaustive list of reliable DNS resolvers.

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…

Passive domain monitoring tool leveraging Certificate Transparency logs to discover and track newly issued domains for an organization, with Slack…

A new generation of tool for discovering subdomains( ip , cdn and so on)

Bash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

Offensive Security recon tool

Just a silly recon tool that uses data from SSL Certificates to find potential host names

BinGoo! A Linux bash based Bing and Google Dorking Tool