Links for the OSINT Team

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.

A tool to discover ASN of any host and fetch IP ranges.

ReconHound is Best OSINT Tool For Enumeration We've Given 10 Different Type Of Enumeration Sub Tools Its Recon Framework Based On Api

imRobust — Network/Web recon and OSINT CLI tool for pentesters.

This is a Python script that provides the ability to perform: Check all NS Records for Zone Transfers. Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT). Perform common SRV Record Enumeration. Top Level Domain (TLD) Expansion.

Favicon based recon for faster fingerprinting of web services

OSINT Framework

Finding subdomain using subfinder

Various OSINT data and info related to the air fleet operated by the RCMP

A shell script to automate those simple and repetitive tasks on recon

A customized reconaissance automation tool written in Rust.

Find vulnerable modules inside packed files (bundles)

A curated registry of chinese military aircrafts meant for military intelligence or OSINT.

Surveillance and Reconnaissance using Kali Linux

Google Dorking Tool – A powerful OSINT utility for manual and automated Google dorking, featuring 14 search categories, export options, and a user-friendly interface.

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

MAHAKAL Framework 🔱 is a professional-grade terminal-based cybersecurity suite built for recon, cracking, web auditing, and anonymity — combining tools like Nmap, SQLMap, Hashcat, and more into one powerful modular CLI shell.