Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Fast DNS history enumeration tool for network and OSINT investigations

A small program for network recon

A tool to take Nmap scans, and store the results in a queryable database.

Recon batch files with common networking tools

🕵️♂️ Discover and extract endpoints, subdomains, and GraphQL queries effortlessly with this Burp Suite extension for efficient passive reconnaissance.

Python-based host discovery tool. Performs multithreaded ICMP sweeps with clean, color-coded output for quick visibility into live hosts on a network.

Lightweight, multithreaded Python port scanner. Quickly identifies open ports and running services across IPs—efficient and platform-independent for fast recon.

External recon automation tool for red teams and researchers. Gathers WHOIS, subdomains, DNS records, HTTP headers, SSL details, and more—fast, modular, and multithreaded.

🛠️ Scan IP addresses for open ports quickly while using minimal system resources with HolyScan's efficient Python-based solution.