🛰️
Reconnaissance
Tools for OSINT, enumeration, surface mapping
7 tools in this category
Amass
Go • Apache-2.0
4.4
OWASP\'s attack-surface mapping tool — passive, active and brute-force enumeration of an organization\'s external footprint
14,823 stars•Reconnaissance
ReconnaissanceOpen SourceFree
Subfinder
Go • MIT
4.5
Fast passive subdomain enumeration across dozens of OSINT sources — the quick way to expand a target\'s scope
13,987 stars•Reconnaissance
ReconnaissanceOpen SourceFree
Recon-ng
Python • MIT
3.9
Web recon framework 100+ modules
4,000 stars•Multiple
ReconnaissanceNetwork AnalysisOpen Source
theHarvester
Python • MIT
4.7
Email, subdomain, name recon
12,000 stars•Multiple
ReconnaissanceNetwork AnalysisOpen Source
Sublist3r
Python • MIT
4.5
Fast subdomain enumeration
10,000 stars•Multiple
ReconnaissanceNetwork AnalysisOpen Source
Altdns
Python • MIT
3.9
Subdomain permutation tool
3,500 stars•Multiple
ReconnaissanceNetwork AnalysisOpen Source
MassDNS
Python • MIT
3.8
High-performance DNS resolver
3,000 stars•Multiple
ReconnaissanceNetwork AnalysisOpen Source