Reconflow

This is all in one tool for gathering reconnaissance information about a target without the hassle of installing multiple tools and their dependencies & also presents you the results to your telegram chat.

https://github.com/adarshshetty18/reconflow

#recon #bugbounty #telegram

Shodan Dorks

https://raw.githubusercontent.com/Dheerajmadhukar/karma_v2/main/img/shodan_osint_manual_recon.txt

#bugbounty #osint #recon #shodan #dorks #bugbountytips

AsINT Collection

https://start.me/p/b5Aow7/asint_collection

#OSINT #Recon

Karma v2

Passive Open Source Intelligence Automated Reconnaissance Framework

https://github.com/Dheerajmadhukar/karma_v2

#osint #recon

Information Gathering and Scanning for Sensitive Information

https://0xjoyghosh.medium.com/information-gathering-scanning-for-sensitive-information-reloaded-6ff3455e0d4e

#OSINT #Recon

Recon — Horizontal Enumeration

https://aaryanapex.medium.com/bug-bounty-methodology-horizontal-enumeration-89f7cd172e6e

#osint #recon #enumeration

o365recon

Script to retrieve information via O365 and AzureAD with a valid cred.

https://github.com/nyxgeek/o365recon

#azure #recon #tools

KnockOutlook

KnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements.

https://github.com/eksperience/KnockOutlook

#exchange #outlook #com #recon

OSINT Tip

Quickly scrape email addresses from a site with this simple curl command

cat targets.txt | xargs -n1 -I{} curl -s https://{} | grep -E -o "\b[a-zA-Z0-9.-]+@[a-zA-Z0-9.-]+\.[a-zA-Z0-9.-]+\b" | sort -u

#osint #tip #curl #email #recon

🕵️ OSINT Collection

Collection of 4000+ OSINT resources

https://metaosint.github.io/table

#osint #recon #collection

🔒 TLSX

Collection of additional assets of a target CIDR/IP/HOST from TLS certificates.

Features:
— Fast And fully configurable TLS Connection
— Multiple Modes for TLS Connection
— Multiple TLS probes
— Auto TLS Fallback for older TLS version
— Pre Handshake TLS connection (early termination)
— Customizable Cipher / SNI / TLS selection
— TLS Misconfigurations
— HOST, IP, URL and CIDR input
— STD IN/OUT and TXT/JSON output

Example:

tlsx -u 209.133.79.0/24 -san -cn -silent -resp-only | dnsx -silent | httpx | nuclei

https://github.com/projectdiscovery/tlsx

#recon #tls #grabber #tools

🤖 BBOT: OSINT automation for hackers

This tools is capable of executing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with its gowitness module), vulnerability scanning (with nuclei), and much more. BBOT currently has over 50 modules and counting.

Features:
— Recursive;
— Graphing;
— Modular;
— Multi-Target;
— Automatic Dependencies;
— Smart Dictionary Attacks;
— Scope Distance;
— Easily Configurable via YAML.

Blog:
https://blog.blacklanternsecurity.com/p/bbot

Source:
https://github.com/blacklanternsecurity/bbot

#external #recon #osint #redteam #bugbounty

🔎 Radar

Tiny tool to identify technologies and services used by domains through their DNS footprints

🔗 Source:
https://github.com/Elite-Security-Systems/radar

#pentest #discovery #recon