Top 23 Go Reconnaissance Projects

Reconnaissance

• Add a project

1. phoneinfoga

   1 38 14,258 6.4 Go

   Information gathering framework for phone numbers

   

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. subfinder

   2 10 11,647 8.9 Go

   Fast passive subdomain enumeration tool.

   

   Project mention: Ask HN: How did internet discover my subdomain? | news.ycombinator.com | 2025-03-06

   I'm surprised nobody mentioned subfinder yet: https://github.com/projectdiscovery/subfinder

   Subfinder uses different public and private sources to discover subdomains. Certificate Transparency logs are a great source, but it also has some other options.

4. osmedeus

   3 2 5,592 5.1 Go

   A Workflow Engine for Offensive Security

   

5. hakrawler

   4 3 4,708 2.5 Go

   Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

   

6. uncover

   5 3 2,598 8.7 Go

   Quickly discover exposed hosts on the internet using multiple search engines.

   

7. Adalanche

   6 17 1,920 9.3 Go

   Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

   

8. cariddi

   7 7 1,668 8.6 Go

   Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

   

9. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

10. shuffledns

    8 1 1,425 3.2 Go

    MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

    

    Project mention: More mysterious DNS root query traffic from a large cloud/DNS operator (2022) | news.ycombinator.com | 2025-03-11

11. metabigor

    9 1 1,322 6.4 Go

    OSINT tools and more but without API key

    

12. scilla

    10 4 1,007 6.4 Go

    Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

    

13. SatIntel

    11 5 728 6.3 Go

    SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭

    

14. xurlfind3r

    12 1 602 8.6 Go

    A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

    

15. csprecon

    13 6 427 8.9 Go

    Discover new target domains using Content Security Policy

    

16. BucketLoot

    14 3 411 4.2 Go

    BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

    

17. favirecon

    15 8 210 9.0 Go

    Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

    

18. asnip

    16 1 205 1.8 Go

    ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight

    

19. udon

    17 1 175 2.8 Go

    A simple tool that helps to find assets/domains based on the Google Analytics ID.

    

20. bitcrook

    18 1 164 5.4 Go

    Open-Source Intelligence Apparatus

    

21. maigret

    19 1 122 10.0 Go

    A simple username osint tool built in go (by krishpranav)

    

22. upi-recon-cli

    20 3 114 0.0 Go

    UPI Reconnaissance tool

    

23. goblob

    21 3 87 6.6 Go

    A fast enumeration tool for publicly exposed Azure Storage blobs.

    

24. spk

    22 1 83 3.4 Go

    spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong to a specific organization.

    

25. UnChain

    23 1 80 2.4 Go

    A tool to find redirection chains in multiple URLs

    

26. SaaSHub

    www.saashub.com featured

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    

Go Reconnaissance related posts

• Subfinder: Fast passive subdomain enumeration tool

  1 project | news.ycombinator.com | 16 Jan 2025

• osmedeus - workflow engine for network osint

  1 project | /r/OSINT | 25 Mar 2023

• Subdomain enumeration.

  1 project | /r/bugbounty | 21 Mar 2023

• PhoneInfoga Linux 2023.1 VMware player 17

  2 projects | /r/Kalilinux | 19 Mar 2023

• Phone Number Research

  1 project | /r/u_OSINTLosena | 7 Mar 2023

• Any tips on efficiently evaluating a huge list of subdomains for a PenTest?

  3 projects | /r/AskNetsec | 31 Jan 2023

• can I find someone's social media accounts with a phone number?

  1 project | /r/OSINT | 26 Jan 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 17 May 2025

  InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now. Learn more →

Index

Sponsored

InfluxDB – Built for High-Performance Time Series Workloads

InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

www.influxdata.com

Do not miss the trending Go projects with our weekly report!