Alternatives and similar repositories for recon:

Users that are interested in recon are comparing it to the libraries listed below

• Sambal0x / Recon-tools
  Some of my bug bounty tools
  ☆50Updated 5 years ago
• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆38Updated 4 years ago
• yourbuddy25 / Hunter
  A small script for my recon during bug hunting. Needs some modifications
  ☆17Updated 5 years ago
• AdmiralGaust / bountyReconV2
  Framework to automate Bug Bounty Reconnaissance
  ☆43Updated 4 years ago
• gwen001 / BBvuln
  A listing of the most common vuln that you can link in your PoCs
  ☆28Updated 6 years ago
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆48Updated 2 years ago
• emadshanab / Scan-Apple-ASN-for-vulnerabilities-and-leave-no-port
  ☆44Updated 3 years ago
• Sajibekanti / Bug_Bounty_List
  Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.
  ☆31Updated 4 years ago
• an4kein / REST_API
  API research and learning
  ☆12Updated 5 years ago
• Virdoexhunter / OneLinerBashrcCommands
  ☆19Updated 4 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆58Updated 3 years ago
• Naategh / dom-red
  Small script to check a list of domains against open redirect vulnerability
  ☆26Updated 3 years ago
• ghostlulzhacks / s3brute
  s3 brute force tool
  ☆44Updated 3 years ago
• 1ndianl33t / 1ndiList
  Recon Custom WordList Ganerator
  ☆58Updated 4 years ago
• random-robbie / wheres-my-git
  Wheres My Git - Find /.git/config files based on dirs found in home url
  ☆20Updated 3 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 3 years ago
• darkc0d37 / wordlistsbyNahamsec
  ☆37Updated 5 years ago
• abuvanth / kicks3
  S3 bucket finder from html,js and bucket misconfiguration testing tool
  ☆34Updated 5 years ago
• RogueSMG / Scavenger
  Noobish Recon Automation
  ☆21Updated last year
• iustin24 / SSRF
  ☆34Updated 4 years ago
• devpwn / xmlrpc-scan
  golang tool to scan domains or single domains with know security issues against xmlrpc
  ☆62Updated last year
• Rhynorater / reports
  ☆59Updated 9 months ago
• sayaanalam / CORS-EXPLOIT
  ☆38Updated 4 years ago
• shifa123 / chaos-hunt
  Bash Script to Hunt all the targets/Subdomains from Chaos by Project Discovery Team
  ☆34Updated 4 years ago
• Damian89 / simple-oob-scanner
  Simple tool to test for SSRF/OOB HTTP Read within the Path of a request
  ☆30Updated 5 years ago
• bonino97 / LemonBooster-v2
  Reestructured LemonBooster.
  ☆47Updated 8 months ago
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆71Updated 3 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• sw33tLie / bcscope
  Get the scope of your bugcrowd programs
  ☆67Updated 4 years ago