Recon Python Packages

courlan

Clean, filter and sample URLs to optimize data collection – Python & command-line – Deduplication, spam, content and language filters

bbot

The recursive internet scanner for hackers. 🧡

arjun

HTTP parameter discovery suite.

recon-tool

Map a domain's public technical footprint with provenance, confidence, and explicit uncertainty. Passive by default, machine-readable, and built to report evidence, not guesses.

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

theharvester

E-mails, subdomains and names Harvester - OSINT

wayparam

Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).

osint-mcp-server

MCP tools for domain and website investigations: public OSINT lookups, batch recon, shared infrastructure and certificate history. No API keys.

agentic-bug-hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

lupaxa-cms-detection

Detect which CMS a website is using from public signals, with evidence, version, and confidence, for authorised security-assessment recon.

nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

recon-kit-mcp

MCP server giving AI coding agents (Claude Code, Codex, Cline) safe, structured network & security recon tools — DNS, WHOIS, TLS, and HTTP security headers, each with a graded verdict. Authorized testing & education only.

aarya

validate the existence of email address on various online platforms, find digital footprint related to it, like Google maps contributions, reviews etc. | aarya was featured on https://osintool.org/

bloodrecon

BloodRecon — 🧠 Master the art of digital hunting with 34+ OSINT modules.

astrarecon

A Linux-first, plugin-based recon workflow engine with DAG execution, persistent sessions, AI-ready exports, and Rich CLI.

reconninja

⚡ ReconNinja v10.6.0— 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

dirbpy

This is the new version of dirb in python

burp2model

Turn a Burp Suite history into an evidence-backed model of a web app's attack surface. Query it with no AI; every claim cites a request.

wraith-sec

Pipeline-based offensive security scanner: recon and web vuln testing (XSS/SQLi/IDOR/BAC), every finding double-confirmed. Python, no core deps.

vamp-shodan-hunt

Shodan OSINT exposure hunter — CVE-exposed hosts, product enumeration, org attack surface, raw queries. No Shodan SDK required.

apihunter-bess1lie

Professional REST API security testing CLI for OpenAPI discovery, authentication analysis, security heuristics and bug bounty reconnaissance.

belphegor

Recon & enumeration toolkit para bug bounty y pentesting

mailcat-osint

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

webhawk

A Web Recon Framework is written in Python 3