项目说明
<h1 align="center">
<a href="
<img src="Logo/Recon-Tools.PNG" alt="Awesome Recon Tools" width="400">
</a>
<br>
Awesome Recon Tools
</h1>
<p align="center">
<a href="
<img src=" alt="Awesome">
</a>
</p>
Reconnaissance and footprinting techniques for disco hosts, domains, infrastructure, identities, and other publicly a information.
Contents
Domain and Network Recon - Tools for gathering network-related information.Personal Information and Email Footprinting - Tools for finding personal information, social networks, and email-related information.See Also - Additional curated OSINT resources.Hacking with Google - Search operators for reconnaissance and information discovery.Domain and Network Recon
Robust tools for gathering domain and network information.
Programs and Web Applications
Amass - In-depth attack-surface mapping and asset discovery tool combining passi, active DNS, certificate transparency, and brute force.ARIN Whois/RDAP - Retrie about IP number resources, organizations, and points of contact registered with ARIN.BuiltWith - Identifies technologies used by websites, including hosting, analytics, frameworks, and ecommerce platforms.Censys - Searches internet-wide datasets to disco, services, certificates, and exposed infrastructure.crt.sh - Searches certificate transparency logs to disco and subdomains from certificate history.DataSploit - Performs automated OSINT on domains, email addresses, usernames, and phone numbers using multiple data sources.DNSDumpster - Discovers hosts related to a domain and helps map an organization's external attack surface.DomScan - Performs domain and network reconnaissance across DNS, WHOIS/RDAP, TLS, subdomains, reputation, and typosquatting.DomainTools - Provides WHOIS information, registrar details, name servers, and related domain intelligence.FireCompass - Discovers an organization's external digital attack surface.GreyNoise - Provides context on internet background noise and scanners to help distinguish broad scanning from targeted activity.httpx - Fast, multi-purpose HTTP probing toolkit for identifying live web services from discovered hosts.Informer - Provides an aggregated view of publicly a information about a website.Maltego - Open-source intelligence and graphical link-analysis platform for gathering and connecting in information.Netcraft - Provides site reports, DNS searches, hosting intelligence, and other internet reconnaissance tools.Nmap - Network discovery and security auditing tool for host discovery, port scanning, and service detection.Nuclei - Template-based scanner for and exposures discovered during reconnaissance.Professional Toolset - Provides ping, traceroute, HTTP header inspection, and other network utilities.SecurityTrails - Provides historical DNS, WHOIS, and passive DNS data for in infrastructure history.Shodan - Internet intelligence search engine for disco internet-connected systems, services, and exposed devices.SpiderFoot - Automated OSINT collection and attack-surface reconnaissance framework.Subfinder - Fast passi discovery tool from ProjectDiscovery.Traceroute NG - Continuously probes network paths, detects route changes, supports IPv4 and IPv6, and creates text log files.URL Fuzzer - Scans websites for hidden files and directories. - Provides continuous tracerouting, reverse tracing, port probing, and route analysis.Wappalyzer - Identifies technologies and software stacks used by websites.Whois.net - Provides WHOIS lookup, domain registration information, and domain a searches.Wireshark - Network protocol analyzer for inspecting and troubleshooting network traffic.You Get Signal - Provides port testing, network location, traceroute, reverse IP lookup, and related network utilities.Windows CLI
nslookup - Queries the Domain Name System for host, address, and DNS record information.tracert - Displays a network route and measures transit delays across an Internet Protocol network.Linux CLI / Kali
dig - Queries DNS servers for domain name and DNS record information.dnsrecon - Enumerates DNS records, checks for zone transfers, and performs related DNS reconnaissance.dnstracer - Traces DNS queries to determine where a DNS ser information for a hostname.Fierce - DNS reconnaissance tool for locating non-contiguous IP space and disco targets.Ghost Eye - Information-gathering toolkit for WHOIS, DNS, EtherApe, Nmap, and related reconnaissance tasks.recon-ng - Modular framework for conducting web-based open-source intelligence reconnaissance.ronin-recon - Recursi framework for subdomains, DNS records, ports, TLS certificates, websites, and email addresses.traceroute - Displays the route packets take to a network host.unicornscan - Asynchronous network reconnaissance and stimulus-response measurement tool.whois - Command-line client for querying WHOIS directory services.Personal Information and Email Footprinting
Tools for gathering personal information, social-network information, and email-related intelligence.
Programs and Web Applications
Been - Provides public-record and background-information searches.Epieos - Browser-based account and identity lookup tool using email addresses and related public information.Followerwonk - Social media audience research and analytics tool operated as part of Fedica's suite.GHunt - Google-account OSINT framework for gathering publicly a information associated with an email address or Gaia ID.Have I Been Pwned - Checks email addresses and domains for exposure in known data breaches.Hunter.io - Finds and email addresses associated with a domain.Maigret - Username OSINT tool that checks thousands of sites for matching accounts and profiles.PeekYou - Searches publicly a information associated with people and online identities.Xquik - Independent X data API for search, follower export, and monitoring.Linux CLI / Kali
sherlock - Searches many social networks for accounts associated with a username.theHar - Collects email addresses, names, subdomains, IPs, and URLs from public sources.See Also
OSINT Framework - directory of OSINT tools and data sources organized by in category.Hacking with Google
Search operators for finding publicly indexed information with Google.
| Operator | Purpose |
| -------------- | ------------------------------------------------------------------------ |
| "phrase" | Searches for an exact word or phrase. |
| allintext: | Searches for pages containing all specified terms in the page text. |
| allintitle: | Searches for pages containing all specified terms in the page title. |
| allinurl: | Searches for pages containing all specified terms in the URL. |
| after: | Finds documents updated after a specified date. |
| before: | Finds documents updated before a specified date. |
| filetype: | Restricts results to a specified file type. |
| inurl: | Searches for pages containing a specified term in the URL. |
| intitle: | Searches for pages containing a specified term in the title. |
| inanchor: | Searches for pages containing specified anchor text. |
| intext: | Searches for pages containing a specified term in the page text. |
| site: | Restricts results to a specified domain or site. |
| * | Acts as a wildcard for one or more unspecified words. |
| \| | Acts as a logical OR operator between search terms. |
| - | Excludes results containing a specified term. |
项目信息
开发语言：未知
Star 数：179
技术要点
该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A compiled list of tools for reconnaissance and footprinting展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。