Open source recon projects
Every project in the registry tagged recon, ranked by real GitHub adoption.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Semi-automatic OSINT framework and package manager
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Related tags
Frequently asked questions
How many open source recon projects are there?
This registry tracks 6 projects tagged recon, with 26,490 GitHub stars between them. The most-adopted is rengine at 8,912 stars.
Are these recon projects free to use?
Yes — 6 of the 6 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which recon project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these recon projects still maintained?
5 of the 6 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.