Reconnaissance Python Packages

sherlock-project

Hunt down social media accounts by username across social networks

maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

recon-tool

Passive recon tool. Zero credentials required. Finds Microsoft 365 & Google Workspace tenants, scores email security, fingerprints 650+ SaaS/infrastructure services via DNS & certificates, and ships a native MCP server for AI agents

theharvester

E-mails, subdomains and names Harvester - OSINT

social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

secator

secator - the pentester's swiss knife

openosint

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 16 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

endpointscanner

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

netlas

Netlas.io Python SDK & CLI Tool

fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

phantomsignal

Open-source OSINT intelligence framework — nmap-powered port scanning with OS detection, rich CLI panels, DNS recon, tech fingerprinting, 30+ threat intel APIs, Shadow Profiler, and cyberpunk web UI. pip install phantomsignal

opendoor

OWASP Web Recon & Directory Discovery Platform

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

subdominator

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

robofinder

Robofinder fetches historical robots.txt files from Archive.org to uncover old directories, hidden paths, and valuable OSINT data for reconnaissance.

phoneintel

PhoneIntel is an OSINT tool for retrieving detailed information about phone numbers.

cewler

CeWLeR - Custom Word List generator Redefined. CeWL alternative in Python, based on the Scrapy framework.

maryam

Maryam: Open-source Intelligence(OSINT) Framework

awsmap

A fast, comprehensive tool for mapping and inventorying AWS resources across 150+ services and all regions.

reconninja

38-phase automated reconnaissance framework for security researchers

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

aarya

E-mail to digital footprint | Validate the existence of email address on various online platforms [Instagram, wattpad, duolingo etc.] | Extract rich metadata like Google maps contributions, reviews etc. from target email

graphinder

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️