Passive Recon Python Packages

recon-tool

Map a domain's public technical footprint with provenance, confidence, and explicit uncertainty. Passive by default, machine-readable, and built to report evidence, not guesses.

sentineldeck

Passive attack-surface scanner: turn a domain into a risk grade, copy-paste fixes, and a client-ready report. Safe DNS, HTTP, TLS, email, and certificate-transparency checks.

ghostpath

👻 GhostPath — A powerful modular reconnaissance toolkit built for hackers, OSINT professionals & bug bounty hunters — passive + active recon in a sleek CLI shell. Discover subdomains, probe paths, mine archives and hunt certificates — all from one interactive terminal interface.

webexpose-scanner

🔍 Passive web exposure scanner — finds publicly exposed files, backups, configs, secrets, and sensitive documents on websites you own. Python CLI with Markdown/JSON reports.

exposor

Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.

totalrecon

A lightweight Python tool for passive reconnaissance, including subdomain, email, and S3 bucket extraction, with AI-powered scanner for sensitive infrastructure mentions.