Passive reconnaissance, without touching the target.
The OSINT Recon Tool is reconnaissance software designed and built by Exploit Security, and used on our own engagements. It gathers publicly available intelligence on a domain DNS, subdomains, certificates, stack hints, emails, masked leak hits and Shodan exposure with zero intrusive actions.
What is does
DNS (A, MX, TXT, NS, SOA)
Subdomains (CT logs + brute)
TLS certs and SANs
Stack hints
Hunter-style emails
Masked leak hits
Shodan ports
What it does not do
-
No port scan from your box, no cred stuffing
-
No login required for a basic run
-
Passive only
-
Unauthorised use on third-party assets is on the operator
How to run it
01
Open osint.exploitsecurity.io or click ‘Get Started’
02
Enter a domain you own or are authorised to assess
03
Read DNS / certs / exposure
04
Do not treat leak hits as a password list
Unauthorised use on third-party assets is on the operator. Run it against a domain you own or are explicitly authorised to assess.