Tools
reconftw
six2dez/reconftw
An automated reconnaissance tool for security researchers that chains subdomain enumeration, vulnerability scanning, OSINT, port scanning, and fuzzing into one workflow.
Topics
Related projects
leaky-paths1.2kLeaky-paths is a curated wordlist of sensitive and high-value web paths and API endpoints, designed to be fed into content-discovery tools for quick wins.
pentest-tools3.4kPentest-tools is a collection of custom Bash, Python, and PHP scripts for quick security testing, covering subdomain enumeration, port scanning, web vulnerability checks, hashing, and recon utilities.
WebHackersWeapons5.1kWebHackersWeapons is a curated awesome-list of tools used by web security researchers and bug hunters. It catalogs scanners, proxies, recon utilities, bookmarklets and extensions by type, with links and language tags.- MobileHackersWeapons1.3kMobileHackersWeapons is a curated awesome-list of tools used by mobile security researchers, organized by platform and purpose across iOS and Android.
bbot11.1kBBOT is a recursive internet scanner for security recon, bug bounties and attack-surface management, with modules for subdomain enumeration, web spidering, email harvesting and graph output.
yakit7.9kYakit is an all-in-one interactive application security testing platform with a GUI for MITM interception, web fuzzing, reverse connections, and other pentesting workflows.