reconnaissance

Open-source web security training platform with 350+ challenges.

Exposight: external attack surface management — passive subdomain discovery, probing, port scanning, TLS/header inspection and risk scoring, with a FastAPI + Postgres job queue, change detection, scheduled monitoring, email alerts, Supabase auth and multi-tenant isolation.

Scrape all wordpress plugins (updates every 6 hour)

Community curated list of search queries for various products across multiple search engines.

24/7 passive, read-only multi-model hunting pipeline for the Threema bug-bounty program, gated by scope and 7-question validation.

This repo Gathers all available cve exploits from github.⚠️ Be careful Malware.

Turns a clean Ubuntu 24.04 or 26.04 VM into an OSINT workstation: 20+ tools, one menu entry per task, case folders with logged commands and SHA-256 hashes.

All-in-one web recon orchestrator (the "enum4linux-ng of the web"): parallel fingerprint, content discovery, vuln scan and CMS tools, with product-aware nuclei and prioritized next-step recommendations.

AI-powered offensive security platform: recon, vulnerability scanning, bug bounty workflow and an AI copilot in one workspace.

secator - the pentester's swiss knife

an OSINT tool for gathering information on Steam users' friends lists.

MCP translation layer for ProjectDiscovery recon. den:whisker runs subfinder. den:fang runs nuclei. Confirm gates the active jobs.

⚡ Master Bug Bounty & VAPT Multi-Target Reconnaissance Framework with 33 Master Phases, 13,600+ Mega Dork DB & Tool-Major CLI Engine

List of Fresh DNS resolvers updates every 1 hour

Uncover hidden subdomains and map attack surfaces with SubOracle, a powerful OSINT recon framework for pentesters and security researchers.

Access a curated index of open-source intelligence and reconnaissance tools for digital investigations and threat monitoring.

Route network traffic through Google Apps Script as a secure relay to your private server backend.

Locate username presence across 500+ platforms using an asynchronous OSINT framework for identity verification and digital footprint audits.

Find social media accounts by username across 400+ networks

Inspect Stripe API keys for research, enumerate secrets, and review account data with a focused security tool