Links for the OSINT Team

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.

A tool to discover ASN of any host and fetch IP ranges.

ReconHound is Best OSINT Tool For Enumeration We've Given 10 Different Type Of Enumeration Sub Tools Its Recon Framework Based On Api

OSINT Framework

This is a Python script that provides the ability to perform: Check all NS Records for Zone Transfers. Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT). Perform common SRV Record Enumeration. Top Level Domain (TLD) Expansion.

Favicon based recon for faster fingerprinting of web services

Finding subdomain using subfinder

A shell script to automate those simple and repetitive tasks on recon

A customized reconaissance automation tool written in Rust.

Find vulnerable modules inside packed files (bundles)

Various OSINT data and info related to the air fleet operated by the RCMP

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

Surveillance and Reconnaissance using Kali Linux

EyeShot is a tool written in python3 designed to take screenshots for a list of websites and collect basic info about.

PowerShell script to "interact" with Azure

HackerTarget API's through command line interactive interface or can be automated through command line

This is a port scanning script,that aims to determine which ports on a target machine are up or down.It is a great tool for pentesters,wanting to gain recon info,from the target machine.