web-reconnaissance

All In One Web Recon

Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subdomains, SSL certificates, exposed services, archived content, and configuration data. — Omnisci3nt gives you the full picture in seconds.

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

Yet another web recon tool

Advanced Web Directory & File Bruteforcer with Updated Wordlists (May 2026)

A Simple Tool to gather information from any website, domain, sub-domain, DNS, links by enumeration with simple commands.

DirBatch é uma ferramenta educacional em Batch para Windows que simula a enumeração de diretórios via requisições HTTP usando wordlists.

Well-labeled files & regexes to search for when performing reconnaissance against websites.

PentestHorizon is a sophisticated Telegram bot designed for cybersecurity professionals, offering automated web reconnaissance, enumeration, scanning, and vulnerability assessment tools through an easy-to-use Telegram interface.

RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)

All in One Advanced and Detailed Web Scanner with over 1000 plug-ins.

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

Automated web reconnaissance platform

An educational recon and OSINT tool suite

ReconX is a Linux-based, terminal-driven reconnaissance and vulnerability assessment framework for penetration testing and bug bounty hunting. It automates the full reconnaissance lifecycle.

DirRaptor is a high-speed Python-based directory and file brute-forcing tool for web applications. It discovers hidden paths on websites using wordlists, with support for multithreading, status code filtering, and real-time output — ideal for bug bounty hunting and ethical hacking.

-->JSmap<-- is a lightning-fast, all-in-one web reconnaissance and XSS discovery toolkit that concurrently crawls entire domains, summarizes dangerous parameter patterns, catalogs every JavaScript asset with precise versioning, and auto-scans with retirejs and XSStrike—delivering deep, actionable vulnerability insights in a single......

Full-scope recon case study on Audible’s HackerOne program using whois, amass, and httpx. Over 1,000 subdomains discovered and documented in a legally scoped workflow.