reconnaissance

Hunt down social media accounts by username across social networks

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Information gathering framework for phone numbers

E-mails, subdomains and names Harvester - OSINT

Fast passive subdomain enumeration tool.

OSINT Framework

A Modern Orchestration Engine for Security

A Tool for Domain Flyovers

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

Semi-automatic OSINT framework and package manager

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 19 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds

🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, and unprotected AI agents