DDWPasteRecon

DDWPasteRecon Pastesites are websites that allows users to share plain text through public posts called “pastes.” Once attackers compromise the external perimeter and gain access to the internal resources they release the part of data on the "paste" sites like pastebin or hastebin. As these hacke...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

SPF

SPF SpeedPhish Framework is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. Requirements: dnspython twisted PhantomJS Installation root@kitploit: apt-get update apt-get upgrade -y apt-get install git build-essential python-dev...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

Awesome-OSINT-List

Awesome OSINT For Everything A list of osint tools/websites for pentration testing, Reverse Searching, Red team Oprations, information gathering, bugbounty and almost cover everything in single file. Index AI ⁕ Breaches & Leaks ⁕ Basic OSINT ⁕ Recon ⁕ Productivity ⁕ OSINT Challenge ⁕ File Upload ...

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

X-Recon

A utility for identifying web page inputs and conducting XSS scanning. Features: Subdomain Discovery: Retrieves relevant subdomains for the target website and consolidates them into a whitelist. These subdomains can be utilized during the scraping process. Site-wide Link Discovery: Collects all...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

urlhunter

root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

ivre

IVRE IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including tools for passive and active recon. IVRE can use data from: Passive tools: Zeek Argus Nfdump p0f airodump-ng Active tools: Nmap Masscan ZGrab2 ZDNS Nuclei...

PAVELOW

PAVELOW Exploit Toolbox. Programmed by Xecurity. Language: BASH Description: PAVELOW helps you with your exploiting and vulnerability searching adventures on KALI Linux by using a few different pre-installed tools among several others that PAVELOW will installed & setup for youthey all can be fou...

ReconNote

ReconNote Web Application Security Recon Automation Framework It takes user input as a domain name and maximize the attack surface area by listing the assets of the domain like - Subdomains from - Amass ,findomain, subfinder & resolvable subdomains using shuffledns Screenshots Port Scan JS files...

oxo

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

Recon-Scan

Recon-Scan ReconScan is a open-source passive recon scanner with a FastAPI backend, async worker pipeline, and a single-page frontend. You can check the deployed site at https://recon-scan.vercel.app/ The point is fast signal: run a scan, get module-by-module findings, and get an AI summary that...

claude-bug-bounty

BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ Powered byAwareXone.com — Your AI Agent Against Scams & Fraud 💜 Open for Sponsorship BugHunter is open for sponsorship. Your support funds new features...

IntRec-Pack

IntRec-Pack Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

T3MP3ST

🌩️ T3MP3ST 🌩️ root@kitploit: ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░...