Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.

External Network Reconnaissance script

yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage

GET ALL THE DATAS

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

SSH Username Finder

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

PentestBuddy "All In One Recon Tool For Pentesters"

A simple recon script, targeting potential XSS vulnerabilities

Scan a lot of web paths in parallel

Scan IP addresses, ports, vhosts, web paths, and JS files for domains

R2R is the short for Ready-To-Recon, This is a shell script written to install the major Known Reconnaissance tools in your Ubuntu-Linux-Fedora etc, Operating Systems to get started with Penetration Testing and Web App security with these tools.

An automated approach to performing recon for bug bounty hunting and penetration testing.

Get all possible href | src | url from target url or domain

Automated domain(s) recon on DigitalOcean VPS.

Bash script for scraping, parsing and retrieving data from Pastebin/Gist using Pastebeen

Take a list of domains and probe for working HTTP and HTTPS servers

GitRoller: A Git Recon Tools

A blue team tool for watching over domains using bug hunting methodology!