Skip to main content

A compiled list of tools for reconnaissance and footprinting

177
GitHub Stars
53
Curated Resources
3
Categories
18 hours ago
Last Refreshed
Domain and Network ReconPersonal Information and Email FootprintingSee Also

Use this list with your AI agent

Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:

"Show me programs and web applications resources from awesome-recon-tools"

Installation instructions →

What's inside

Domain and Network Recon

  • AmassPrograms and Web Applications

    In-depth attack-surface mapping and asset discovery tool combining passive OSINT, active DNS, certificate transparency, and brute force.

  • ARIN Whois/RDAPPrograms and Web Applications

    Retrieves information about IP number resources, organizations, and points of contact registered with ARIN.

  • BuiltWithPrograms and Web Applications

    Identifies technologies used by websites, including hosting, analytics, frameworks, and ecommerce platforms.

  • CensysPrograms and Web Applications

    Searches internet-wide datasets to discover hosts, services, certificates, and exposed infrastructure.

  • crt.shPrograms and Web Applications

    Searches certificate transparency logs to discover domains and subdomains from certificate history.

  • DataSploitPrograms and Web Applications

    Performs automated OSINT on domains, email addresses, usernames, and phone numbers using multiple data sources.

Personal Information and Email Footprinting

  • BeenVerifiedPrograms and Web Applications

    Provides public-record and background-information searches.

  • EpieosPrograms and Web Applications

    Browser-based account and identity lookup tool using email addresses and related public information.

  • FollowerwonkPrograms and Web Applications

    Social media audience research and analytics tool operated as part of Fedica's suite.

  • GHuntPrograms and Web Applications

    Google-account OSINT framework for gathering publicly available information associated with an email address or Gaia ID.

  • Have I Been PwnedPrograms and Web Applications

    Checks email addresses and domains for exposure in known data breaches.

  • Hunter.ioPrograms and Web Applications

    Finds and verifies email addresses associated with a domain.

See Also

  • OSINT Framework

    Visual directory of OSINT tools and data sources organized by investigation category.

Showing a sample of 53 resources. View the full list on GitHub →