Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

GitHub - therealilyas/pentest-toolkit: PentestKit — Advanced penetration testing toolkit in Python & Bash for bug bounty and ethical hacking.

Fast DNS history enumeration tool for network and OSINT investigations

A small program for network recon

A tool to take Nmap scans, and store the results in a queryable database.

Fast DNS recon in Go

DNS recon CLI (A/NS/MX, AXFR, brute force, whois, reverse PTR)

🕵️♂️ Discover and extract endpoints, subdomains, and GraphQL queries effortlessly with this Burp Suite extension for efficient passive reconnaissance.

A high-performance TCP port scanner written in Java using non-blocking I/O (java.nio). Designed to scan thousands of ports quickly while collecting basic service banners and fingerprints.

Recon batch files with common networking tools

AI-assisted network reconnaissance tool combining Nmap scanning, host classification and local LLM analysis via Ollama.

ASN Breaker – A reconnaissance tool that extracts CIDR ranges from ASN numbers for large-scale security scanning and attack surface mapping.

Web interface for Shodan Queries with Nuclei support

Scan TCP ports quickly with Java NIO using asynchronous sockets, supporting up to 2000 concurrent connections and basic service fingerprinting.

🔍 Perform Reverse WHOIS queries to uncover domains linked by specific terms for effective cybersecurity and threat intelligence insights.

Ultra‑fast Python port scanner using sockets and threading. Detects open ports and services reliably on any host for effective network recon.