Deprecated

Pricing

from $100.00 / 1,000 recon scans

See alternative Actors

Go to Apify Store

Recon Toolkit — Subdomain Enumeration & Live Host Detection

Deprecated

See alternative Actors

Recon toolkit for bug bounty hunters. Enumerates subdomains (subfinder), probes live hosts, fingerprints technologies. Input: domain + depth. Output: JSON dataset of subdomains, live hosts, tech stack. Quick scan ~90s.

Pricing

from $100.00 / 1,000 recon scans

Rating

0.0

(0)

Developer

jordan ks

Actor stats

Bookmarked

Total users

Monthly active users

3 months ago

Last modified

JoKeSo1 Recon Toolkit

Automated security reconnaissance for bug bounty hunters and security researchers. Discovers subdomains, live hosts, tech stacks, and open ports for any target domain.

Supports quick (free), standard ($1), and deep ($2) scans with JSON, CSV, HTML, or Markdown output.

Sources: subfinder + crt.sh for subdomains, async HTTP probing for live hosts, 40+ tech signatures across 8 categories, 30 common ports.

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Andok

Video & Audio Toolkit: Probe, Cut, Convert, Extract Audio

andrew_babo/video-audio-toolkit

Cloud ffmpeg/ffprobe/yt-dlp toolkit: probe video metadata, extract 16 kHz mono audio for speech to text, build a 480p proxy, cut segments frame-accurately, download and remux MP4.

Andrew Babo

1.4K

Domain OSINT Recon

prooflio/domain-osint-recon

Aggregates WHOIS, DNS records, certificate-transparency subdomains and PTR records for a domain into one structured report.

Prooflio AI

5.0

(1)

SPA / JS API Mapper

jokeso/jokeso1-spa-api-mapper

Paste a URL. Extract API, GraphQL, and OpenAPI paths the frontend JavaScript actually calls. GET-only. Built for scrapers and recon.

jordan ks

Liveness Detection

vivid_astronaut/liveness-detection

BRAINIALL Team

Subdomain Finder — Certificate Transparency Subdomain Scanner

intelscrape/subdomain-finder

Subdomain Finder: discover every subdomain of a domain from public certificate transparency logs (crt.sh, Cert Spotter), with first/last seen dates, issuers, live DNS (IPs, CNAMEs, hosting provider) and dangling-CNAME and dev/staging flags. Bulk domains. No API key. Pay per subdomain.

IntelScrape

Marketcheck Intelligence Toolkit

clever_mandate/marketcheck-intelligence-toolkit

Get vehicle data, valuations, and market insights without building MarketCheck integrations. Decode VINs, search listings, get fair prices, and check recalls. Bring your own API key (500 free calls/month).

Tyler

Universal Dataset Processor

organizational_falafel_che/universal-dataset-processor

Merge, clean, transform, deduplicate, analyze, and convert JSON, CSV, and XLSX datasets.

Nick Swezey

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.