Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers...

Nmap  is a free and open source utility for network discovery and security auditing. Many systems and...

GoLismero is an open source framework for security testing. It's currently geared towards web security, but...

Sn1per works by automating a bunch of processes that collect basic recon on a target domain, (for example executing...

A python based non-interactive ugly reverse IP lookup script to find domains on a target server.

DataSploit is an open source intelligence collection (OSINT) tool. It is a simple way to dump data for a domain...

Recon-NG is a reconnaissance tool with an interface similar to Metasploit. Running Recon-NG from the command line,...

A popular CT search tool is crt.sh. Subdomains can be detected using Certificate Transparency (CT). SSL/TLS certificates...

WPScan is an open source WordPress security scanner. You can use it to scan your WordPress website for known vulnerabilities...

BuiltWith checks websites for snippets of code or tags related to some technologies. Since that data is publicly...

GrayhatWarfare is a searchable database where a list of open S3 buckets can be found. Amazon's S3 cloud storage,...

SpiderFoot is a reconnaissance tool that automatically queries over 100 public data sources (OSINT) to gather intelligence...