Reconnaissance Python Packages

maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

108K 29K 2K

sherlock-project

Hunt down social media accounts by username across social networks

86K 83K 10K

recon-tool

Passive recon tool. Zero credentials required. Finds Microsoft 365 & Google Workspace tenants, scores email security, fingerprints 346+ SaaS/infrastructure services via DNS & certificates, and ships a native MCP server for AI agents.

19K 1 0

theharvester

E-mails, subdomains and names Harvester - OSINT

19K 16K 2K

opendoor

OWASP Web Recon & Directory Discovery Platform

11K 967 187

social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

8K 23K 2K

secator

secator - the pentester's swiss knife

6K 1K 129

netlas

Netlas.io Python SDK & CLI Tool

5K 30 6

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

4K 1K 129

reconninja

38-phase automated reconnaissance framework for security researchers

4K 39 7

fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

3K 2K 214

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

2K 62 4

beastcrypt

JS & Source Map Secret Scanner - hunt exposed API keys, tokens & internal paths from live targets ☕

2K 0 0

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

2K 676 56