Top 23 Reconnaissance Open-Source Projects

• sherlock

  109 51,283 7.3 Python

  🔎 Hunt down social media accounts by username across social networks

  

Project mention: Checking all accounts associated with my email address? | /r/PrivacySecurityOSINT | 2023-11-12

In the interest of cleaning my digital life a bit I really want to delete all of my old accounts that I no longer use. The terminal application "Sherlock" on github can search for instances of a username you input and find associated websites. Sherlock

• phoneinfoga

  38 11,941 7.5 Go

  Information gathering framework for phone numbers

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• social-analyzer

  22 11,069 4.4 JavaScript

  API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

  

• theHarvester

  19 10,319 9.4 Python

  E-mails, subdomains and names Harvester - OSINT

Project mention: Search for sensitive data using theHarvester and h8mail tools | dev.to | 2023-12-01

• subfinder

  8 9,318 9.4 Go

  Fast passive subdomain enumeration tool.

  

Project mention: Subdomain.center – discover all subdomains for a domain | news.ycombinator.com | 2023-09-15

https://github.com/projectdiscovery/subfinder does this, but it explains all the methods and lets you choose to only do a passive scan.

• rengine

  4 6,685 9.6 Python

  reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Project mention: Any self-host FOSS suites for running phishing testing campaigns? | /r/selfhosted | 2023-05-21

I couldn't find anything named reEngine, but I found reNgine ( https://yogeshojha.github.io/rengine/ ) which I think is what you meant.

• OSINT-Framework

  6 6,629 7.3 JavaScript

  OSINT Framework

  

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• seeker

  5 6,463 7.1 CSS

  Accurately Locate Smartphones using Social Engineering

Project mention: Usefulness of links that provide location of people when clicked | /r/hacking | 2023-06-24

How good is this compared to a free tool like Seeker?

• AllAboutBugBounty

  3 5,409 3.5

  All about bug bounty (bypasses, payloads, and etc)

Project mention: How I hacked chess.com with a rookie exploit | news.ycombinator.com | 2024-01-26

Yeah, pretty close: "On-site request forgery"[0]

[0] https://github.com/daffainfo/AllAboutBugBounty/blob/master/O...

• reconftw

  3 5,231 9.3 Shell

  reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Project mention: Automated recognition frameworks? | /r/bugbounty | 2023-06-23

• osmedeus

  2 5,069 6.5 Go

  A Workflow Engine for Offensive Security

• hakrawler

  3 4,225 0.0 Go

  Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

• discover

  3 3,309 8.2 PowerShell

  Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

Project mention: Do you know a Kali tool to find an username with just the name of the person ? | /r/Kalilinux | 2023-07-03

https://github.com/leebaird/discover try this

• Raccoon

  4 2,993 0.0 Python

  A high performance offensive security tool for reconnaissance and vulnerability scanning

• massdns

  3 2,962 5.9 C

  A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

• uncover

  3 2,239 7.9 Go

  Quickly discover exposed hosts on the internet using multiple search engines.

  

Project mention: Uncover: Quickly find exposed hosts using multiple search engines | news.ycombinator.com | 2023-12-30

• reconspider

  1 1,899 0.0 Python

  🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

• HackVault

  3 1,876 0.0 JavaScript

  A container repository for my public web hacks!

Project mention: What are polyglots and how to use them as a pentester | dev.to | 2023-12-03

• Awesome-Asset-Discovery

  2 1,867 2.5

  List of Awesome Asset Discovery Resources

  

• sn0int

  1 1,847 5.2 Rust

  Semi-automatic OSINT framework and package manager

• Sudomy

  3 1,847 2.2 Shell

  Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

• rapidscan

  1 1,650 4.1 Python

  :new: The Multi-Tool Web Vulnerability Scanner.

  

• Adalanche

  17 1,523 9.0 Go

  Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

Project mention: Active Directory ACL Visualizer and Explorer | news.ycombinator.com | 2024-01-30

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Reconnaissance related posts

• Checking all accounts associated with my email address?
  1 project | /r/PrivacySecurityOSINT | 12 Nov 2023
• OSINT tools only available on Linux
  1 project | /r/OSINT | 10 Nov 2023
• [Hiring] Online Search Job
  1 project | /r/hiring | 18 Jun 2023
• Can hackers find me through Youtube?
  1 project | /r/hacking | 12 Jun 2023
• Wrote a plugin-based Maltego/Palantir alternative that's in early beta (Built with Python, TypeScript, and Go)
  1 project | /r/webdev | 10 Jun 2023
• Introducing OSINTBuddy: Node Graphs, Plugins, OSINT Data Mining, and more
  1 project | /r/cybersecurity | 10 Jun 2023
• How correctly create venv projects if GH repos will be cloned?
  2 projects | /r/learnpython | 7 Jun 2023
• A note from our sponsor - WorkOS
  workos.com | 25 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com