Discover new target domains using Content Security Policy

Probe: This is a special tool for bug hunter for automated recon process smoothly.

A comprehensive OSINT (Open Source Intelligence) script that gathers detailed information about a target domain using various public sources and APIs. It integrates multiple tools to create an extensive intelligence report, making it ideal for cybersecurity professionals.

Get acquisitions by scraping titles of crunchbase.

MottaHunter: Advanced email reconnaissance tool for security professionals. Hunt emails across Google, Twitter, and LinkedIn, validate via SMTP, and generate smart permutations. Features rate limiting, catch-all detection, and permutation splitting for stealth operations.

Python tool which checks for data breaches for provided emails

A powerful tool which check the username on hundreds of websites works on kali linux and termux both

A basic passive reconnaissance tool made using Python. It checks tech stacks, security headers and hidden directories in a website.

Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — written in async Rust.

favinfo scrapes favicon in HTML code and many other different ways.

ReconDorker Pro is an elite, high-performance OSINT reconnaissance framework designed for deep intelligence gathering. By orchestrating advanced dorking techniques across multiple search engines, it automates the discovery of sensitive data, exposed assets, and shadow infrastructure.

High-Speed Subdomain Enumeration & Automated Recon Tool for Bug Bounty Hunters. Amass Alternative.

Ghost Eye Information gathering Foot printing Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff

Banner hunter

DirX is a high-performance directory brute-force tool designed for fast and precise web reconnaissance. Powered by async scanning, it offers status filters, response exclusion, proxy support, and real-time progress with ETA, helping pentesters and bug bounty hunters discover hidden endpoints efficiently.

Passive Recon Suite — Harvest URLs, discover subdomains, filter live endpoints and extract parameters from public archives & OSINT sources.

🦙 Evil-Ollama v3.0 — Exposed Ollama Instance Hunter, Vulnerability Scanner & Proxy Tool. Find, fingerprint & exploit publicly exposed Ollama LLM instances.

React and Go (Fiber) based web tool for fast and clean subdomain enumeration using Subfinder and Sublist3r.

Easiest way to calculate and generate the favicon hash value with the help of CLI.

WPFather - WordPress Vulnerability Scanner & Security Recon Tool with 16 Modules | Zero Config Single Binary