Member-only story
Comprehensive Reconnaissance Tools for Red Teaming and OSINT Operations
Reconnaissance
Active Intelligence Gathering
EyeWitness
Is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
https://github.com/ChrisTruncer/EyeWitness
AWSBucketDump
Is tool to quickly enumerate AWS S3 buckets to look for loot.
https://github.com/jordanpotti/AWSBucketDump
AQUATONE
Ia a set of tools for performing reconnaissance on domain names.
https://github.com/michenriksen/aquatone
spoofcheck
Is a program that checks if a domain can be
spoofed from. The program checks SPF and DMARC records for weak configurations that allow spoofing.
https://github.com/BishopFox/spoofcheck
Nmap
Is used to discover hosts and services on a computer network, thus building a “map” of the
network.
dnsrecon
Is a tool DNS Enumeration Script.
https://github.com/darkoperator/dnsrecon
