Reconnaissance Python Packages

maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

sherlock-project

Hunt down social media accounts by username across social networks

theharvester

E-mails, subdomains and names Harvester - OSINT

recon-tool

Passive domain intelligence: M365 tenant lookup, email security scoring, 225+ SaaS fingerprints, crt.sh enrichment & signal intelligence. Zero-credential, purely passive. Native MCP server for AI agents (Claude, Cursor, etc.).

opendoor

OpenDoor — OWASP Web Directory Scanner

social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

secator

secator - the pentester's swiss knife

netlas

Netlas.io Python SDK & CLI Tool

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

reconninja

⚡ ReconNinja v8.2.1 — 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

beastcrypt

​Advanced JS Reconnaissance Tool | Wayback & Katana Integration | Auto-Source Map Discovery Automated engine to hunt for exposed secrets, API keys, and sensitive endpoints by analyzing historical JS files and automatically locating hidden .map files.

phoneintel

PhoneIntel is an OSINT tool for retrieving detailed information about phone numbers.

graphinder

Escape Graphinder

cewler

CeWLeR - Custom Word List generator Redefined. CeWL alternative in Python, based on the Scrapy framework.

subsurfer

Recon Subdomain Scan Tool

maryam

Maryam: Open-source Intelligence(OSINT) Framework

aarya

Validates the existence of registered accounts across social & shopping platforms and extracts rich identity intelligence (Names, Photos, IDs).

python3-libraccoon

libraccon a library for high performance offensive security tool for reconnaissance based on raccoon scanner. This include performing DNS reconnaissance

scopez

Scopez verifies connectivity to target servers, reveals CDN presence, and provides detailed target insights like reachability and RDAP.

gitlab-harvester

Global term search for GitLab via gitlab-python

facebook-snooper

Scrapes Facebook profile pages using a normal login (without an API key)