Recon-ng

Automated OSINT reconnaissance platform with over 200 data sources. Integrates Shodan, VirusTotal and HaveIBeenPwned.

Tool for gathering emails, subdomains, IPs and URLs using multiple public data sources.

Network mapping and attack surface discovery tool. Finds subdomains and IPs.

Find usernames across multiple social networks. Ideal for OSINT investigations.