Skip to content
THREATWIRE

Open Source Tools · Category

OSINT and attack surface discovery

Tools that map an organisation's external footprint from public sources: domains, subdomains, hosts, emails and exposed services.

Alternatives toMaltego

6 tools

  • masscan

    Asynchronous TCP port scanner for large ranges

    Internet-scale port scanner that sends SYN packets asynchronously with its own TCP/IP stack, designed to scan very large address ranges quickly.

    Stars
    26k
    Forks
    3.2k
    Last commit
    14 days ago
    AGPL-3.0-onlyOpen sourceNetwork scanning and analysis

  • SpiderFoot

    OSINT automation for footprinting

    OSINT automation tool with a web UI and more than 200 modules that gather data on IPs, domains, emails, names and more from public sources.

    Stars
    24k
    Forks
    3.8k
    Last commit
    2 years ago
    MITOpen sourceOSINT and attack surface discovery
    Alternative toMaltego

  • theHarvester

    Gather emails, names and subdomains from public sources

    Python OSINT tool that collects emails, names, subdomains, IPs and URLs about a domain from search engines and public data sources.

    Stars
    18k
    Forks
    2.7k
    Last commit
    1 day ago
    GPL-2.0-onlyOpen sourceOSINT and attack surface discovery
    Alternative toMaltego

  • ffuf

    Fast web fuzzer for content and parameter discovery

    Fast web fuzzer written in Go, used to discover hidden files, directories, virtual hosts and parameters by replacing a FUZZ keyword with wordlist entries.

    Stars
    17k
    Forks
    1.6k
    Last commit
    23 days ago
    MITOpen sourceWeb application testing
    Alternative toBurp Suite Professional

  • OWASP Amass

    Attack surface mapping and asset discovery

    OWASP project for in-depth attack surface mapping: discovers domains, subdomains, IP ranges and related assets using DNS and many public data sources.

    Stars
    15k
    Forks
    2.2k
    Last commit
    6 months ago
    Apache-2.0Open sourceOSINT and attack surface discovery
    Alternative toMaltego

  • Subfinder

    Fast passive subdomain enumeration

    ProjectDiscovery's subdomain discovery tool that queries passive online sources, built for speed and easy chaining with other tools.

    Stars
    15k
    Forks
    1.6k
    Last commit
    today
    MITOpen sourceOSINT and attack surface discovery
    Alternative toMaltego