GitHub topics: passive-recon

Repositories

NakuTenshi/JSHound

JSHound is a recon tool designed for bug bounty hunters and pentesters. It helps you extract JavaScript files of a target domain from multiple sources (Wayback Machine, Common Crawl, urlscan.io), and then searches those files for potentially sensitive information such as API keys, tokens, credentials, and more.

Language: Python - Size: 487 KB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 1 - Forks: 0

atharvbyadav/GhostPath

👻 GhostPath — A powerful modular reconnaissance toolkit built for hackers, OSINT professionals & bug bounty hunters — passive + active recon in a sleek CLI shell. Discover subdomains, probe paths, mine archives and hunt certificates — all from one interactive terminal interface.

Language: Python - Size: 5.09 MB - Last synced at: 11 days ago - Pushed at: 11 days ago - Stars: 2 - Forks: 0

Ali2888/fast-subcheck

🌐 Discover active subdomains quickly with fast-subcheck, a fast and efficient tool for subdomain enumeration using a user-friendly CLI interface.

Language: Python - Size: 44.9 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 0 - Forks: 0

InfoSecWarrior/Offensive-Recon

Passive Reconnaissance Techniques Approach helps for penetration testing and bug bounty hunting by gathering information about a target system or network.

Language: PHP - Size: 85.9 KB - Last synced at: 20 days ago - Pushed at: 20 days ago - Stars: 15 - Forks: 16

TahaHatami/fast-subcheck

A fast and live subdomain checker with CLI output.

Language: Python - Size: 55.7 KB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 1 - Forks: 0

DelorianCS/dns-osint

Lightweight OSINT tool for passive DNS/subdomain discovery, DNS record lookup, reverse‑DNS and title extraction.

Language: Python - Size: 3.58 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 1 - Forks: 0

josh1643/totalrecon

A lightweight Python tool for passive reconnaissance, including subdomain, email, and S3 bucket extraction, with AI-powered scanner for sensitive infrastructure mentions.

Language: Python - Size: 13.7 KB - Last synced at: about 7 hours ago - Pushed at: 4 months ago - Stars: 6 - Forks: 0

abuyv/exposor

Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.

Language: Python - Size: 1.83 MB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 57 - Forks: 10

ahali00/subcrt

Minimal Python tool for subdomain discovery using crt.sh

Language: Python - Size: 21.5 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

hack-with-ethics/dns-recon-dns-redTeaming

This is a Python script that provides the ability to perform: Check all NS Records for Zone Transfers. Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT). Perform common SRV Record Enumeration. Top Level Domain (TLD) Expansion.

Language: Python - Size: 20.5 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 7 - Forks: 0