### Example of Wrapped Lines in Commit Messages Source: https://github.com/nateahess/awesome-recon-tools/blob/main/contributing.md Demonstrates the correct indentation for wrapped lines in commit messages, ensuring readability and adherence to formatting standards. This format helps maintain consistency across contributions. ```text - That means lines wrap like this - Not like this ``` -------------------------------- ### recon-ng Framework for Web Reconnaissance Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt A powerful web reconnaissance framework that automates OSINT collection. It uses modules to gather information about domains, hosts, and more. Requires installation and setup. ```bash # recon-ng - Web reconnaissance framework recon-ng # Inside recon-ng: # > marketplace search # > marketplace install all # > workspaces create example # > db insert domains example.com # > modules load recon/domains-hosts/hackertarget # > run ``` -------------------------------- ### unicornscan for TCP/IP Stimulus and Response Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt A fast, asynchronous TCP/IP scanner for network reconnaissance, capable of performing various scanning techniques. Requires `unicornscan` installation. ```bash # unicornscan - TCP/IP stimulus and response measurement unicornscan -mT 192.168.1.0/24:80 unicornscan -mU 192.168.1.1:1-65535 ``` -------------------------------- ### Shodan CLI for Device Search Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Uses the Shodan command-line interface to search for internet-connected devices based on various criteria. Requires Shodan CLI installation and API key. ```bash # Shodan - Search for internet-connected devices # Visit: https://shodan.io # Example search queries: shodan search "apache" --limit 10 shodan host 8.8.8.8 ``` -------------------------------- ### dnsrecon for DNS Enumeration (Linux) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Conducts comprehensive DNS enumeration, including standard and brute-force techniques, with support for wordlists. Requires `dnsrecon` to be installed. ```bash # dnsrecon - Comprehensive DNS enumeration dnsrecon -d example.com -t std dnsrecon -d example.com -t brt -D /usr/share/wordlists/dnsmap.txt ``` -------------------------------- ### DNSDumpster for Domain Host Discovery Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Utilizes DNSDumpster's web interface to discover hosts related to a target domain, helping to map the attack surface. No local installation is required, accessed via a web browser. ```bash # DNSDumpster - Discover hosts related to a domain # Visit: https://dnsdumpster.com # Enter target domain to map attack surface ``` -------------------------------- ### DataSploit for Automated OSINT (Domains/Emails/Usernames) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Automates OSINT gathering for domains, emails, and usernames. Requires cloning the repository, installing dependencies, and running the Python script. ```bash # DataSploit - Automated OSINT on domains/emails/usernames git clone https://github.com/DataSploit/datasploit.git cd datasploit pip install -r requirements.txt python datasploit.py -d example.com ``` -------------------------------- ### Wappalyzer Browser Extension for Tech Detection Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Uses the Wappalyzer browser extension to detect technologies used by a website. Install the extension and visit the target site to view detected technologies. ```bash # Wappalyzer - Browser extension for tech detection # Visit: https://www.wappalyzer.com # Install extension and visit target site to see technologies ``` -------------------------------- ### dnstracer for DNS Delegation Path Tracing (Linux) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Traces the path of DNS delegation for a given domain, showing how DNS queries are resolved through different name servers. Requires `dnstracer` to be installed. ```bash # dnstracer - Trace DNS delegation path dnstracer example.com ``` -------------------------------- ### traceroute for Packet Route Tracing (Linux) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Traces the network path (route) to a destination host by showing the intermediate routers using ICMP or UDP packets. Requires `traceroute` to be installed. ```bash # traceroute (Linux) - Trace packet route traceroute example.com traceroute -n 192.168.1.1 ``` -------------------------------- ### ronin-recon for Recursive Reconnaissance Engine Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt A recursive reconnaissance engine that automates the process of gathering information. Requires Ruby and the `ronin-recon` gem to be installed. ```bash # ronin-recon - Recursive reconnaissance engine gem install ronin-recon ronin-recon run example.com ``` -------------------------------- ### tshark for Network Packet Capture and Analysis Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Command-line interface for Wireshark, used for capturing network packets to a file or analyzing existing capture files. Requires Wireshark/tshark installation. ```bash # Wireshark - Network protocol analyzer wireshark # Or capture from command line: tshark -i eth0 -w capture.pcap tshark -r capture.pcap -Y "http.request" ``` -------------------------------- ### Censys CLI for Asset Enumeration Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Employs Censys to enumerate assets and attack surface by searching for certificates, hosts, and services. Requires Censys CLI installation and API credentials. ```bash # Censys - Enumerate assets and attack surface # Visit: https://censys.io # Search for certificates, hosts, and services ``` -------------------------------- ### sherlock for Social Media Account Discovery Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Finds social media accounts associated with a given username across various platforms. Requires Python and `sherlock-project` installation. Supports timeout and printing found accounts. ```bash # sherlock - Find social media accounts by username pip install sherlock-project sherlock username sherlock username --timeout 10 --print-found ``` -------------------------------- ### whois for Domain Registration Lookup (Linux) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Retrieves domain registration information and IP address ownership details using the `whois` command. Works for both domain names and IP addresses. ```bash # whois - Lookup domain registration information whois example.com whois 192.168.1.1 ``` -------------------------------- ### fierce for DNS Reconnaissance (Linux) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Performs DNS reconnaissance, particularly effective for non-contiguous IP spaces and subdomain enumeration. Supports specifying domains and wordlists for subdomains. ```bash # fierce - DNS reconnaissance for non-contiguous IP space fierce --domain example.com fierce --domain example.com --subdomains subdomains.txt ``` -------------------------------- ### PeekYou for Social Media and Personal Info Aggregation Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt A web-based service that aggregates social media profiles and personal information from various online sources. Accessed via their website. ```bash # PeekYou - Social media and personal info aggregator # Visit: https://peekyou.com ``` -------------------------------- ### theHarvester for Email and Subdomain Harvesting Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Gathers email accounts, subdomains, and hostnames from public sources like search engines and PGP key servers. Supports specifying domain, data sources, and result limits. ```bash # theHarvester - Email and subdomain harvester theHarvester -d example.com -b google theHarvester -d example.com -b all -l 500 ``` -------------------------------- ### tracert for Route Tracing (Windows) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Traces the network path (route) to a destination host by showing the intermediate routers. Built into Windows. ```cmd # tracert - Trace route to destination tracert example.com tracert -d 192.168.1.1 ``` -------------------------------- ### BuiltWith for Website Technology Identification Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Leverages BuiltWith's web service to identify the technology stack of a website, including CMS, analytics, and hosting providers. Accessed via their website by entering a URL. ```bash # BuiltWith - Identify website technology stack # Visit: https://builtwith.com # Enter URL to discover CMS, analytics, hosting, etc. ``` -------------------------------- ### SpiderFoot for Automated OSINT Collection Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt An automated OSINT (Open Source Intelligence) collection tool that gathers information from various sources. Can be run locally or accessed via a web interface. ```bash # SpiderFoot - Automated OSINT collection # Visit: https://www.spiderfoot.net/ # Or run locally: spiderfoot -l 127.0.0.1:5001 ``` -------------------------------- ### Infoga for Email OSINT Gathering Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt An OSINT tool to gather information about email addresses, including domain information, related social media, and potential vulnerabilities. Requires Python and cloning the repository. ```bash # Infoga - Email OSINT gathering git clone https://github.com/m4ll0k/infoga.git cd infoga python infoga.py --domain example.com --source all python infoga.py --info email@example.com ``` -------------------------------- ### dig for DNS Record Querying (Linux) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Performs DNS lookups to retrieve various record types (ANY, MX, NS) for a specified domain using the `dig` command. Supports querying specific DNS servers. ```bash # dig - Query DNS records for a domain dig example.com ANY dig example.com MX dig @8.8.8.8 example.com NS ``` -------------------------------- ### nslookup for DNS Querying (Windows) Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt Queries DNS servers to resolve hostnames to IP addresses and vice versa, supporting various record types and specific DNS servers. Built into Windows. ```cmd # nslookup - Query DNS servers nslookup example.com nslookup -type=MX example.com nslookup -type=NS example.com 8.8.8.8 ``` -------------------------------- ### BeenVerified for Background Checks Source: https://context7.com/nateahess/awesome-recon-tools/llms.txt A web-based service that provides background check information on individuals. Accessed via their website. ```bash # BeenVerified - Background check service # Visit: https://beenverified.com ``` === COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.