theHarvester

python3 theHarvester.py -d trustwave.com -b all -g -s -v -r -n

Recon-ng

Install all modules

see https://medium.com/@bibinrajbs/using-recon-ng-in-kali-2020-cc76aa3a4a6d

https://medium.com/@kaorrosi/osint-research-with-recon-ng-727661a70ea4

Metabigor

Link: https://github.com/j3ssie/metabigor

Discovery IP of a company/organization - metabigor net

The difference between net and netd command is that netd will get the dynamic result from the third-party source while net command will get the static result from the database.

`# discovery IP of a company/organization echo "company" | metabigor net --org -o /tmp/result.txt

discovery IP of an ASN

echo "ASN1111" | metabigor net --asn -o /tmp/result.txt cat list_of_ASNs | metabigor net --asn -o /tmp/result.txt

echo "ASN1111" | metabigor netd --asn -o /tmp/result.txt`

Amass

The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

GitHub: https://github.com/OWASP/Amass

Search by organisation name:

`amass intel -org ‘Tesla``

Search by ASNs: