> ## Documentation Index
> Fetch the complete documentation index at: https://trickest.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Recon Tools

> Explore a collection of powerful and efficient tools in the Recon category to enhance your productivity and security.

export const ToolCard = ({cardTitle, description, iframeUrl, href, category}) => <a href={href} style={{
  textDecoration: 'none'
}}>
    <div style={{
  background: 'linear-gradient(145deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.02) 100%)',
  borderRadius: '16px',
  overflow: 'hidden',
  transition: 'transform 0.4s cubic-bezier(0.215,0.61,0.355,1), box-shadow 0.3s ease',
  height: '35rem',
  display: 'flex',
  marginBottom: '16px',
  flexDirection: 'column',
  border: '1px solid rgba(255, 255, 255, 0.1)',
  boxShadow: '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)',
  backdropFilter: 'blur(8px)',
  perspective: '1000px'
}} onMouseOver={e => {
  e.currentTarget.style.boxShadow = '0 8px 32px -2px rgba(0, 0, 0, 0.4)';
  e.currentTarget.style.transform = 'translateY(-4px) scale(1.02)';
}} onMouseOut={e => {
  e.currentTarget.style.boxShadow = '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)';
  e.currentTarget.style.transform = 'translateY(0) scale(1)';
}}>
      <div style={{
  width: '100%',
  height: '300px',
  borderBottom: '1px solid rgba(255, 255, 255, 0.1)',
  position: 'relative'
}}>
        <div style={{
  position: 'absolute',
  top: 0,
  left: 0,
  right: 0,
  bottom: 0,
  background: 'linear-gradient(45deg, rgba(0, 163, 255, 0.1) 0%, rgba(0, 101, 255, 0.05) 100%)'
}} />
        <iframe src={iframeUrl} style={{
  width: '100%',
  height: '100%',
  border: 'none',
  position: 'relative',
  zIndex: 1,
  background: 'transparent'
}} scrolling="no" />
      </div>

      <div style={{
  padding: '1.5rem',
  display: 'flex',
  flexDirection: 'column',
  height: 'calc(100% - 300px)',
  gap: '8px'
}}>
        <h2 style={{
  color: '#ffffff',
  fontSize: '1.4rem',
  margin: 0,
  fontWeight: '600',
  lineHeight: '1.3',
  height: '1.8rem',
  overflow: 'hidden',
  textOverflow: 'ellipsis',
  display: '-webkit-box',
  WebkitLineClamp: 1,
  WebkitBoxOrient: 'vertical'
}}>
          {cardTitle}
        </h2>

        <p style={{
  color: 'rgba(163, 179, 188, 0.8)',
  fontSize: '1rem',
  margin: 0,
  lineHeight: '1.5',
  flex: '1 1 auto',
  overflowY: 'auto',
  paddingRight: '8px'
}}>
          {description}
        </p>
      </div>
    </div>
  </a>;

<CardGroup cols={2}>
  <ToolCard cardTitle="aiodnsbrute" description="A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. It's fast. Benchmarks on small VPS hosts put around 100k DNS resolutions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probably best to avoid using Google's resolvers if you're purely interested in speed. Trickest currently supports only json output for aiodnsbrute." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/9fb4d551-4217-4e70-9999-2e4854ce9cfe.json" href="/docs/library/recon/tools/aiodnsbrute" category="Recon" />

  <ToolCard cardTitle="amass" description="The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/44be711b-af29-4f65-a089-6be645469058.json" href="/docs/library/recon/tools/amass" category="Recon" />

  <ToolCard cardTitle="amass-intel" description="The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c9f18a92-bdd2-4bb2-831d-eef319187ecf.json" href="/docs/library/recon/tools/amass-intel" category="Recon" />

  <ToolCard cardTitle="amass-json" description="The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques. This version produces JSON output" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6a80942a-aec2-4130-89e9-20ff253e2f51.json" href="/docs/library/recon/tools/amass-json" category="Recon" />

  <ToolCard cardTitle="analyticsrelationships" description="Get related domains / subdomains by looking at Google Analytics IDs" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/abc471c8-3dd1-4268-8773-1ae0365a9383.json" href="/docs/library/recon/tools/analyticsrelationships" category="Recon" />

  <ToolCard cardTitle="assetfinder" description="Find domains and subdomains potentially related to a given domain." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/8d0c18c9-fc96-4e41-a06b-eb214bea4a95.json" href="/docs/library/recon/tools/assetfinder" category="Recon" />

  <ToolCard cardTitle="bbot" description="OSINT automation for hackers" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/a967689a-c2a3-45c5-8665-a029c2cb1a09.json" href="/docs/library/recon/tools/bbot" category="Recon" />

  <ToolCard cardTitle="bigip-scanner" description="Determine the running software version of a remote F5 BIG-IP management interface" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/407455f5-7fa9-445d-bc7b-cd339ede295b.json" href="/docs/library/recon/tools/bigip-scanner" category="Recon" />

  <ToolCard cardTitle="ccpy" description="Extracting URLs of a specific target based on the results of commoncrawl.org." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/92457d0a-fdcd-4e2a-973d-ef464cdaca27.json" href="/docs/library/recon/tools/ccpy" category="Recon" />

  <ToolCard cardTitle="cdncheck" description="A utility to detect various technology for a given IP address." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/be4fb8df-1428-4bd5-8529-28534bf5d2fd.json" href="/docs/library/recon/tools/cdncheck" category="Recon" />

  <ToolCard cardTitle="cero" description="Scrape domain names from SSL certificates of arbitrary hosts" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/8245c257-b587-4977-9d1a-2230150488e3.json" href="/docs/library/recon/tools/cero" category="Recon" />

  <ToolCard cardTitle="certsh-subdomains" description="Connect to the crt.sh database and get the subdomains of a domain" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/70360715-68d5-4ac9-8801-c64e84be2048.json" href="/docs/library/recon/tools/certsh-subdomains" category="Recon" />

  <ToolCard cardTitle="chaos-client" description="Go client to communicate with Chaos DB API." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f3efdc46-3d32-4ca9-abf1-3fdb2a92c9f6.json" href="/docs/library/recon/tools/chaos-client" category="Recon" />

  <ToolCard cardTitle="chronos" description="Extract pieces of info from a web page's Wayback Machine history" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/bb7a8ea2-10c8-49ef-9c41-32a84d36410d.json" href="/docs/library/recon/tools/chronos" category="Recon" />

  <ToolCard cardTitle="cloud-enum" description="Multi-cloud enumeration utility" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c3059e36-2ec1-4a40-84ca-99f0b521b04c.json" href="/docs/library/recon/tools/cloud-enum" category="Recon" />

  <ToolCard cardTitle="crosslinked" description="LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/62dd0240-86fd-4c2b-a59d-a6e014e4c36e.json" href="/docs/library/recon/tools/crosslinked" category="Recon" />

  <ToolCard cardTitle="csprecon" description="Discover new target domains using Content Security Policy" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/88a08353-e173-4c89-b25b-80c54c347ffb.json" href="/docs/library/recon/tools/csprecon" category="Recon" />

  <ToolCard cardTitle="dnsrecon" description="Author description - DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a security assessment and network troubleshooting. This tool provides the ability to perform: Check all NS Records for Zone Transfers; Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT); Perform common SRV Record Enumeration; Top Level Domain (TLD) Expansion; Check for Wildcard Resolution; Brute Force subdomain and host A and AAAA records given a domain and a wordlist; Perform a PTR Record lookup for a given IP Range or CIDR; Check a DNS Server Cached records for A, AAAA and CNAME Records provided a list of host records in a text file to check." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/290b61f4-9edc-4418-a005-74942ecf526f.json" href="/docs/library/recon/tools/dnsrecon" category="Recon" />

  <ToolCard cardTitle="dnsx" description="dnsx is a fast and multi-purpose DNS toolkit allow to run multiple probers using retryabledns library, that allows you to perform multiple DNS queries of your choice with a list of user supplied resolvers." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f7065154-7a1e-4a9e-a7f8-2289e0383cd6.json" href="/docs/library/recon/tools/dnsx" category="Recon" />

  <ToolCard cardTitle="dorky" description="A tool to automate dorking of GitHub/GitLab" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e9151eb7-7ed1-4e21-99db-7bb4cb961ab9.json" href="/docs/library/recon/tools/dorky" category="Recon" />

  <ToolCard cardTitle="favfreak" description="FavFreak takes a list of urls from stdin, fetches favicon.ico , calculate tha hash value and matches the calculated favicon hashes with the favicon hashes present in the fingerprint dictionary" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/db124168-2728-4718-a712-4d6a65385cfa.json" href="/docs/library/recon/tools/favfreak" category="Recon" />

  <ToolCard cardTitle="findomain" description="The complete solution for domain recognition. Supports screenshotting, port scan, HTTP check, data import from other tools, subdomain monitoring." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6c938174-439b-451e-9d05-2b053bd02529.json" href="/docs/library/recon/tools/findomain" category="Recon" />

  <ToolCard cardTitle="gh-scraper" description="Process GitHub Archive URLs and generate unique repositories and users CSV files" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f6cde501-75c4-4909-8f70-ad27d7f4d697.json" href="/docs/library/recon/tools/gh-scraper" category="Recon" />

  <ToolCard cardTitle="github-subdomains" description="Find subdomains on GitHub" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/4e268ca9-b76a-4907-afef-e5095e0be4a4.json" href="/docs/library/recon/tools/github-subdomains" category="Recon" />

  <ToolCard cardTitle="goaltdns" description="GoAltdns is a permutation generation tool that can take a list of subdomains, permute them using a wordlist, insert indexes, numbers, dashes and increase your chance of finding that estoeric subdomain that no-one found during bug-bounty or pentest." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/b02eb222-4f98-4055-b0fa-85b3420664a0.json" href="/docs/library/recon/tools/goaltdns" category="Recon" />

  <ToolCard cardTitle="gobuster-dns" description="A tool used to brute-force DNS subodmains(with wildcard support)" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/1e00e61a-26a2-4515-a57d-dfbcc1524457.json" href="/docs/library/recon/tools/gobuster-dns" category="Recon" />

  <ToolCard cardTitle="gotator" description="Gotator is a tool to generate DNS wordlists through permutations." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/2417eabd-a2b2-47bc-bcc8-3547ac689b33.json" href="/docs/library/recon/tools/gotator" category="Recon" />

  <ToolCard cardTitle="hakrevdns" description="Small, fast, simple tool for performing reverse DNS lookups en masse. You feed it IP addresses, it returns hostnames. This can be a useful way of finding domains and subdomains belonging to a company from their IP addresses." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d04d80e9-a4fd-4389-b914-c57ac86d6743.json" href="/docs/library/recon/tools/hakrevdns" category="Recon" />

  <ToolCard cardTitle="haktrails" description="Golang client for querying SecurityTrails API data" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/5c73d3cd-c0b3-4276-abe5-5e3b85c461d8.json" href="/docs/library/recon/tools/haktrails" category="Recon" />

  <ToolCard cardTitle="hosthunter" description="A tool to efficiently discover and extract hostnames providing a large set of target IP addresses. HostHunter utilises simple OSINT techniques to map IP addresses with virtual hostnames. It generates a CSV or TXT file containing the results of the reconnaissance." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/80b1a813-7491-4583-8353-be66406b6331.json" href="/docs/library/recon/tools/hosthunter" category="Recon" />

  <ToolCard cardTitle="jldc-subdomains" description="Get subdomains from jldc.me." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c8c8e035-8ef9-4297-973e-d6de32f4a4c3.json" href="/docs/library/recon/tools/jldc-subdomains" category="Recon" />

  <ToolCard cardTitle="massdns" description="MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per second using publicly available resolvers." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/36daffe3-d5b0-4b31-92e1-c22e25747f2c.json" href="/docs/library/recon/tools/massdns" category="Recon" />

  <ToolCard cardTitle="mksub" description="Make subdomains using a wordlistRead a wordlist file (lowercase, remove [^a-zA-Z0-9-_.]+), filter unique words and generate subdomains." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/de35c1d1-60fd-4db0-9390-8a63ca126045.json" href="/docs/library/recon/tools/mksub" category="Recon" />

  <ToolCard cardTitle="nrich" description="Analyze a list of IP addresses and see which ones have open ports/vulnerabilities through Shodan" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/3a29105e-0744-4d71-88a4-5e5232c9b8c7.json" href="/docs/library/recon/tools/nrich" category="Recon" />

  <ToolCard cardTitle="oneforall" description="Multi-featured subdomain recon tool" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/b4f71eba-b29a-49aa-8f09-0d9b46f3f65b.json" href="/docs/library/recon/tools/oneforall" category="Recon" />

  <ToolCard cardTitle="puredns" description="Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/be9935e6-a952-40c9-aaed-82dbdfa339f0.json" href="/docs/library/recon/tools/puredns" category="Recon" />

  <ToolCard cardTitle="second-order" description="Crawler and second-order subdomain takeover scanner" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/0c36e14e-bb3d-4b42-8485-7499480151a3.json" href="/docs/library/recon/tools/second-order" category="Recon" />

  <ToolCard cardTitle="securitytrails-subdomains" description="Get subdomains for root domain from SecurityTrails." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/ca5dccba-a406-4962-a5e9-9368d4085dcd.json" href="/docs/library/recon/tools/securitytrails-subdomains" category="Recon" />

  <ToolCard cardTitle="shuffledns" description="shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/58ec8d9c-bc1a-4edc-9e41-fdade0ea4431.json" href="/docs/library/recon/tools/shuffledns" category="Recon" />

  <ToolCard cardTitle="spiderfoot" description="OSINT for threat intelligence and attack surface mapping" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/2e884d78-c61f-4535-9fc0-3db8897f4917.json" href="/docs/library/recon/tools/spiderfoot" category="Recon" />

  <ToolCard cardTitle="subbrute" description="SubBrute is a community driven project with the goal of creating the fastest, and most accurate subdomain enumeration tool. Some of the magic behind SubBrute is that it uses open resolvers as a kind of proxy to circumvent DNS rate-limiting (https://www.us-cert.gov/ncas/alerts/TA13-088A). This design also provides a layer of anonymity, as SubBrute does not send traffic directly to the target's name servers." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/3297df47-bc77-4932-8a11-91496e4f8648.json" href="/docs/library/recon/tools/subbrute" category="Recon" />

  <ToolCard cardTitle="subdomainizer" description="SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascripts present in the given URL." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/a7525adf-b834-4a61-96fd-ced4fe9e64e8.json" href="/docs/library/recon/tools/subdomainizer" category="Recon" />

  <ToolCard cardTitle="subfinder" description="Subfinder is a subdomain discovery tool that discovers valid subdomains for websites by using passive online sources. It has a simple modular architecture and is optimized for speed. Subfinder is built for doing one thing only - passive subdomain enumeration, and it does that very well." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c8637986-e6e8-47b1-9fa4-fc1f96a22199.json" href="/docs/library/recon/tools/subfinder" category="Recon" />

  <ToolCard cardTitle="sublist3r" description="Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/ce957736-f3c6-4e21-8790-26fb8546f6d0.json" href="/docs/library/recon/tools/sublist3r" category="Recon" />

  <ToolCard cardTitle="sudomy" description="Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/64bd596e-1bc2-4b4f-a8b6-17281407c566.json" href="/docs/library/recon/tools/sudomy" category="Recon" />

  <ToolCard cardTitle="theharvester" description="E-mails, subdomains and names enumeration tool" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/cb5853f0-37a3-433f-a32e-3b4ba4bf2b88.json" href="/docs/library/recon/tools/theharvester" category="Recon" />

  <ToolCard cardTitle="tlsx" description="Fast and configurable TLS grabber focused on TLS based data collection." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e8279e7a-6cb8-4a01-ad62-72d0f423930d.json" href="/docs/library/recon/tools/tlsx" category="Recon" />

  <ToolCard cardTitle="vita" description="Vita is a tool to gather subdomains from passive sources." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/be87c986-9209-4c74-89d8-73405f2f7ae7.json" href="/docs/library/recon/tools/vita" category="Recon" />

  <ToolCard cardTitle="waymore" description="Find way more from the Wayback Machine" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e7771f35-8b36-46a4-a680-dcc15b92f257.json" href="/docs/library/recon/tools/waymore" category="Recon" />

  <ToolCard cardTitle="whatweb" description="WhatWeb identifies websites. WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e9f36ef6-9545-42d0-b591-0579ab4d276b.json" href="/docs/library/recon/tools/whatweb" category="Recon" />

  <ToolCard cardTitle="whoisninja" description="Reverse WHOIS lookup script" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6c5725cb-ac7d-4d13-a6b8-ea3f8e81cd59.json" href="/docs/library/recon/tools/whoisninja" category="Recon" />

  <ToolCard cardTitle="whois-with-ripe" description="Get whois data through ripe.net" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c903cb4c-ac9c-4fda-afca-535d239364cd.json" href="/docs/library/recon/tools/whois-with-ripe" category="Recon" />

  <ToolCard cardTitle="xsubfind3r" description="xsubfind3r is designed to efficiently identify known subdomains of given domains by tapping into a multitude of curated online passive sources." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/b79d7f2f-265d-40a4-aedd-b9818bb0bf39.json" href="/docs/library/recon/tools/xsubfind3r" category="Recon" />

  <ToolCard cardTitle="zdns" description="Fast CLI DNS Lookup Tool" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/a8ee95b5-a838-4c1d-915b-7c2e60d4c9fb.json" href="/docs/library/recon/tools/zdns" category="Recon" />

  <ToolCard cardTitle="zgrab2-http" description="Fast Go Application Scanner" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d6eb5003-619c-4c4c-8951-ca3aeabd38be.json" href="/docs/library/recon/tools/zgrab2-http" category="Recon" />

  <ToolCard cardTitle="zgrab2-http-simple" description="Fast Go Application Scanner, parsed to print out title status and content length" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/912466e4-dedc-4105-95d0-f5ecaf9be589.json" href="/docs/library/recon/tools/zgrab2-http-simple" category="Recon" />

  <ToolCard cardTitle="zgrab2-jarm" description="Fast Go Application Scanner" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/56d39666-0ee1-4000-a884-e3988c9f52ae.json" href="/docs/library/recon/tools/zgrab2-jarm" category="Recon" />

  <ToolCard cardTitle="zgrab2-multiple" description="Fast Go Application Scanner" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/83f513a0-0c87-4bcb-b9db-e42434570c8c.json" href="/docs/library/recon/tools/zgrab2-multiple" category="Recon" />

  <ToolCard cardTitle="zgrab2-tls" description="Fast Go Application Scanner" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/1badcca6-fad5-4340-9d21-b94c390b6263.json" href="/docs/library/recon/tools/zgrab2-tls" category="Recon" />
</CardGroup>