awesome-recon-tools
github.com/nateahess/awesome-recon-tools ↗A compiled list of tools for reconnaissance and footprinting
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me programs and web applications resources from awesome-recon-tools"
Installation instructions →What's inside
Domain and Network Recon
- AmassPrograms and Web Applications
In-depth attack-surface mapping and asset discovery tool combining passive OSINT, active DNS, certificate transparency, and brute force.
- ARIN Whois/RDAPPrograms and Web Applications
Retrieves information about IP number resources, organizations, and points of contact registered with ARIN.
- BuiltWithPrograms and Web Applications
Identifies technologies used by websites, including hosting, analytics, frameworks, and ecommerce platforms.
- CensysPrograms and Web Applications
Searches internet-wide datasets to discover hosts, services, certificates, and exposed infrastructure.
- crt.shPrograms and Web Applications
Searches certificate transparency logs to discover domains and subdomains from certificate history.
- DataSploitPrograms and Web Applications
Performs automated OSINT on domains, email addresses, usernames, and phone numbers using multiple data sources.
Personal Information and Email Footprinting
- BeenVerifiedPrograms and Web Applications
Provides public-record and background-information searches.
- EpieosPrograms and Web Applications
Browser-based account and identity lookup tool using email addresses and related public information.
- FollowerwonkPrograms and Web Applications
Social media audience research and analytics tool operated as part of Fedica's suite.
- GHuntPrograms and Web Applications
Google-account OSINT framework for gathering publicly available information associated with an email address or Gaia ID.
- Have I Been PwnedPrograms and Web Applications
Checks email addresses and domains for exposure in known data breaches.
- Hunter.ioPrograms and Web Applications
Finds and verifies email addresses associated with a domain.
See Also
- OSINT Framework
Visual directory of OSINT tools and data sources organized by investigation category.
Showing a sample of 53 resources. View the full list on GitHub →