Information Gathering

OWASP Amass for in-depth subdomain enumeration and attack surface mapping.

Parrot OS anonymity suite that routes traffic through Tor with one command.

Industry-standard network scanner for port discovery, service detection, and OS fingerprinting. Core recon tool for every engagement.

Passive subdomain discovery tool. Fast and reliable for bug bounty recon.

Graph-based OSINT and link analysis for mapping people, domains, and infrastructure relationships.

Internet-scale port scanner — extremely fast asynchronous TCP scanning.

Securely share files over Tor. Commonly bundled with privacy-focused Parrot setups.

Modular recon framework with a Metasploit-like interface for OSINT workflows.

Metadata-resistant instant messaging over Tor, available in Parrot privacy stacks.

OSINT tool to gather emails, subdomains, hosts, and employee names from public sources.

Privacy browser for research over Tor. Pre-integrated in Parrot privacy workflows.