Recon Python Packages

courlan

Clean, filter and sample URLs to optimize data collection – Python & command-line – Deduplication, spam, content and language filters

10.3M 176 14

bbot

The recursive internet scanner for hackers. 🧡

75K 10K 872

recon-tool

Passive recon tool. Zero credentials required. Finds Microsoft 365 & Google Workspace tenants, scores email security, fingerprints 650+ SaaS/infrastructure services via DNS & certificates, and ships a native MCP server for AI agents

38K 4 0

arjun

HTTP parameter discovery suite.

28K 6K 857

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

23K 5K 584

theharvester

E-mails, subdomains and names Harvester - OSINT

19K 17K 3K

wraith-sec

Pipeline-based offensive security scanner: recon and web vuln testing (XSS/SQLi/IDOR/BAC), every finding double-confirmed. Python, no core deps.

18K 0 0

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

13K 50 4

recon-kit-mcp

MCP server giving AI coding agents (Claude Code, Codex, Cline) safe, structured network & security recon tools — DNS, WHOIS, TLS, and HTTP security headers, each with a graded verdict. Authorized testing & education only.

6K 1 0

d0rk3r

Shodan IP scraper with auto-proxy rotation. No API key needed. Perfect for OSINT, bug bounty & pentesting.

5K 0 0

phantomsignal

Open-source OSINT intelligence framework — nmap-powered port scanning with OS detection, rich CLI panels, DNS recon, tech fingerprinting, 30+ threat intel APIs, Shadow Profiler, and cyberpunk web UI. pip install phantomsignal

3K 1 0

webanalyzer-security

WebAnalyzer is a versatile tool for comprehensive domain analysis. It provides insights into WHOIS data, DNS records, subdomains, SEO, web technologies, and security. Designed for developers and cybersecurity enthusiasts, it offers detailed reports and modular features for in-depth website audits.

2K 21 3

robofinder

Robofinder fetches historical robots.txt files from Archive.org to uncover old directories, hidden paths, and valuable OSINT data for reconnaissance.

2K 265 29

h1-asset-fetcher

Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs

2K 40 10

reconninja

38-phase automated reconnaissance framework for security researchers

1K 40 8

nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

1K 5K 1K

porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

1K 463 57

aarya

E-mail to digital footprint | Validate the existence of email address on various online platforms [Instagram, wattpad, duolingo etc.] | Extract rich metadata like Google maps contributions, reviews etc. from target email

1K 35 2

mailcat-osint

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

891 906 148