Links for the OSINT Team

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.

WebExtractor is a powerful OSINT and ethical hacking tool developed in Python. It is used to extract email addresses, phone numbers, and links (both visible and hidden) from a target website

A tool to discover ASN of any host and fetch IP ranges.

ReconHound is Best OSINT Tool For Enumeration We've Given 10 Different Type Of Enumeration Sub Tools Its Recon Framework Based On Api

imRobust — Network/Web recon and OSINT CLI tool for pentesters.

Favicon based recon for faster fingerprinting of web services

This is a Python script that provides the ability to perform: Check all NS Records for Zone Transfers. Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT). Perform common SRV Record Enumeration. Top Level Domain (TLD) Expansion.

Finding subdomain using subfinder

OSINT Framework

Various OSINT data and info related to the air fleet operated by the RCMP

A shell script to automate those simple and repetitive tasks on recon

A customized reconaissance automation tool written in Rust.

Find vulnerable modules inside packed files (bundles)

A curated registry of chinese military aircrafts meant for military intelligence or OSINT.

Surveillance and Reconnaissance using Kali Linux

WhoisX is a powerful WHOIS lookup tool written in C. It is designed to be more reliable and flexible than normal whois tools.

Google Dorking Tool – A powerful OSINT utility for manual and automated Google dorking, featuring 14 search categories, export options, and a user-friendly interface.