1.sundowndev / phoneinfogaInformation gathering framework for phone numbersinformation-gatheringphone-numberosintopen-source-intelligencereconnaissancefootprint+4 moreGoGPL-3.018K total6.3K forks+2,173 starsfrom 16,214 · score 7.68
2.projectdiscovery / subfinderFast passive subdomain enumeration tool.subdomain-enumerationosintsubdomainsbugbountyreconnaissancehacking+1 moreGoMIT15K total1.6K forks+1,236 starsfrom 13,475 · score 7.12
3.owasp-amass / amassIn-depth attack surface mapping and asset discoverygodnssubdomainenumerationreconosint+7 moreGoOther license15K total2.2K forks+1,059 starsfrom 14,402 · score 6.97
4.michenriksen / gitrobArchivedReconnaissance tool for GitHub organizationssecurityosintgithub-apigolangGoMIT6.2K total837 forks+59 starsfrom 6,137 · score 4.09
5.michenriksen / aquatoneArchivedA Tool for Domain Flyoverssecurityosintgolangchrome-headlessreconnaissancechromiumGoMIT6K total900 forks+53 starsfrom 5,901 · score 3.99
6.evilsocket / xrayArchivedXRay is a tool for recon, mapping and OSINT gathering from public networks.osintsecuritynetworkshodanintelligencemappingGoGPL-3.02.3K total296 forks+45 starsfrom 2,291 · score 3.83