Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

awesome-recon-tools

A compiled list of tools for reconnaissance and footprinting
https://github.com/nateahess/awesome-recon-tools

Last synced: 5 days ago
JSON representation

  • Domain and Network Recon

    • Programs and Web Applications

      • ARIN Whois/RDAP - A public resource that allows a user to retrieve information about IP number resources, organizations, and Points of Contact registered with ARIN.
      • Batch IP Converter - An award-winning network tool to work with IP addresses. Domain-to-IP Converter, Batch Ping, Tracert, Whois, and more.
      • Censys - Mines a global internet dataset to enumerate assets that may compromise an attack surface.
      • FindSubDomains - From Spyse. Awesome tool to find subdomains.
      • FireCompass - Discovers and organization's digital attack surface.
      • Informer - Retrieves a quick aggregated view of everything the Web can promptly tell you about a site.
      • Maltego - Open Source Intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
      • Netcraft - Multiple tools from site report to DNS search.
      • Professional Toolset - Ping, Tracert, HTTP Headers, and more!
      • Shodan - Shodan has servers around the world that crawl the internet 24/7 to provide the latest internet intelligence.
      • Traceroute NG - Continuous probing, detects path changes, supports IPv4 & IPv6, Creates a txt logfile.
      • URL Fuzzer - Free light scan for hidden files and directories.
      • VisualRoute - Continuous trace routing, reverse tracing, port probing, route analysis, and much more!
      • You Get Signal - Port forwarding, network location, visual trace route, reverse IP domain check, and more!
      • Wireshark - The world's foremost and widely-used network protocol analyzer.
      • Whois.net - Quick and easy Whois lookup. Domain name search, registration and availability, and more.
      • FireCompass - Discovers and organization's digital attack surface.
      • Aquatone - A tool for visual inspection of websites across a large amount of hosts. Very convenient for quickly gaining an overview of HTTP-based attack surfaces.
      • Batch IP Converter - An award-winning network tool to work with IP addresses. Domain-to-IP Converter, Batch Ping, Tracert, Whois, and more.
      • BuiltWith - Scans for over 46,953 different web technologies. Discover what tools a site uses such as shopping carts, hosting, analytics, and more.
      • DataSploit - Performs automated OSINT on a domain/email/username/phone and finds relevant information from different sources.
      • VisualRoute - Continuous trace routing, reverse tracing, port probing, route analysis, and much more!
      • Wappalyzer - Identify technologies on websites. Find out the technology stack of any website.
      • WebShag - Multi-threaded, multi-platform web server audit tool. Gathers useful functionalities for web server auditing like website crawling, URL scanning, or file fuzzing.
      • You Get Signal - Port forwarding, network location, visual trace route, reverse IP domain check, and more!

    • Windows CLI

      • nslookup - Command-line tool for querying the Domain Name System to obtain name or IP address mapping and other DNS records.
      • tracert - Commmand-line tool for displaying a route and measuring transit delays of packets across an Internal Protocol network.

    • Linux CLI // Kali

      • dig - Domain Information Groper - Queries the DNS of a given server.
      • dnsrecon - Check NS Records for Zone Transfers, enumerate general DNS records, check cached DNS records, and more.
      • dnstracer - Determines where a given Domain Name Server gets its information from for a given hostname.
      • traceroute - Print the route packets trace to network host.
      • unicornscan - Provides a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network.
      • whois - Quick and easy client for the whois directory service.
      • Fierce - DNS reconnaissance tool for locating non-contiguous IP space.
      • Ghost Eye - Information gathering tool for Whois, DNS, EtherApe, Nmap, and more.
      • recon-ng - Provides a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly.

  • Personal Information and Email Footprinting

    • Programs and Web Applications

      • BeenVerified - Background checks with loads of information.
      • eMailTrackerPro - Pull detailed information from an email header. Also includes spam filtering.
      • Followerwonk - Information scraped from Twitter.
      • Infoga - Gather email OSINT. Domains, sources, breaches, and more.
      • Jigsaw - OSINT-X Intelligence Collection Tool from Jigsaw allows for the collection of data from RSS feeds, the dark web, Twitter, Facebook, and other sources.
      • PeekYou - Locate personal information from family members to social media accounts.

    • Linux CLI // Kali

      • theHarvester - Pulls a list of email addresses of a specific domain from multiple search engines.
      • sherlock - Crawls the web for social profiles.
Programming Languages
Python 6 Go 1
Categories
Domain and Network Recon 36 Personal Information and Email Footprinting 8
Sub Categories
Programs and Web Applications 31 Linux CLI // Kali 11 Windows CLI 2
Keywords
osint 3 reconnaissance 3 gathering 2 information-gathering 2 python3 2 clickjacking-vulnerability 1 zone-transfers 1 subdomain 1 name-server 1 fierce 1 domain 1 dns 1 discovered-domains 1 security 1 golang 1 chromium 1 chrome-headless 1 osint-tool 1 osint-resources 1 osint-python 1 information 1 gathering-data 1 windows 1 tools 1 sherlock 1 redteam 1 python 1 macos 1 linux 1 cli 1 whois-lookup 1 nmap 1 location-finder 1 link-grabber 1 informationgathering 1 ethical-hacking 1 etherape 1 dns-lookup 1 cybersecurity 1 cookie-scraper 1 cms-detector 1 email 1