Recon Python Packages

courlan

Clean, filter and sample URLs to optimize data collection – Python & command-line – Deduplication, spam, content and language filters

8.5M 171 13

bbot

The recursive internet scanner for hackers. 🧡

76K 10K 803

arjun

HTTP parameter discovery suite.

23K 6K 858

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

23K 5K 579

recon-tool

Passive recon tool. Zero credentials required. Finds Microsoft 365 & Google Workspace tenants, scores email security, fingerprints 346+ SaaS/infrastructure services via DNS & certificates, and ships a native MCP server for AI agents.

19K 1 0

theharvester

E-mails, subdomains and names Harvester - OSINT

19K 16K 2K

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

11K 50 4

openosint

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 9 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

5K 15 6

reconninja

38-phase automated reconnaissance framework for security researchers

4K 39 7

beastcrypt

JS & Source Map Secret Scanner - hunt exposed API keys, tokens & internal paths from live targets ☕

2K 0 0

aarya

Validates the existence of registered accounts across social & shopping platforms and extracts rich identity intelligence (Names, Photos, IDs).

1K 31 2

nettacker

Automates information gathering, vulnerability scanning and aids penetration testing engagements in general

851 5K 1K

dirbpy

This is the new version of dirb in python

841 36 11

subsurfer

Recon Subdomain Scan Tool

758 47 4

webhawk

Web Recon Framework

644 4 1

gitlab-harvester

Build a GitLab instance project index and search repositories for sensitive keywords (API-only, no cloning).

576 2 0

porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

457 457 55