Fscan

Nmap, the Network Mapper, is a network-discovery and port-scanning tool for identifying devices, open ports, operating systems, and services. It can scan targets such as a home-lab network and includes Zenmap as a graphical front end. The project provides source code and binary installers for Windows, macOS, and Linux, and is released under a custom license based on but incompatible with GPLv2; commercial redistribution licensing is also available.

User Scanner is an open-source command-line and Python library OSINT suite for investigating email addresses and usernames across hundreds of platform modules. It checks account registrations and scrapes profile metadata such as avatars, biographies, follower counts, user IDs, seller statuses, and other account attributes. The tool supports cross-scan pivoting: initial results can yield handles, profile links, aliases, or exposed email addresses that are used as inputs for subsequent scans. It also provides username permutation generation, Hudson Rock infostealer-breach lookups, parallel HTTP scanning with TLS fingerprint impersonation, proxy rotation and validation, category or module targeting, bulk-file input, and PDF, JSON, and CSV exports. It can be installed from PyPI or run through Nix. An optional Model Context Protocol server exposes username scanning, email scanning, and module-discovery tools to compatible AI clients. The project describes itself as intended for educational use, authorized security research, and defensive OSINT investigations.

reconYa is a self-hosted network reconnaissance and asset-discovery tool built in Go. It discovers IPv4 devices through ICMP sweeps, TCP probes, and ARP, while passively detecting IPv6 devices through neighbor discovery and interface monitoring. It identifies MAC addresses, vendors, hostnames, operating systems, and device types, and runs background top-port scans with service detection and banner grabbing. A server-rendered web console provides a topology map, host list, live event log, and acknowledgeable alerts for new devices, risky or new open ports, unreachable hosts, duplicate MAC addresses, and unidentified hosts. Multiple networks and CIDR ranges can be managed independently, with external lookups disabled by default. Prebuilt binaries are available for Linux and macOS, and the project can also be built from source with Go.

geiger is a read-only command-line scanner from Atomburst that inventories AI agents, harnesses, MCP servers, plugins, skills, hooks, browser extensions, desktop AI applications, and related IDE configurations on a machine. It reads known configuration files and directories, identifies each finding's origin and evidence path, and labels capabilities such as code execution, secret storage, broad filesystem access, broad web access, and network access. Credential-shaped values are reported by key name, file, and secret type without exposing value contents; the scanner performs no telemetry and writes only an explicitly requested report file. It can emit terminal, HTML, or versioned JSON reports, scan specified project or home directories, enforce a strict exit status for findings that can execute code or hold secrets, and compare JSON snapshots to identify newly appeared, removed, or escalated findings. It runs through npx with Node.js 18 or newer, has no runtime dependencies or account requirement, and is licensed under MIT. The project notes that it reads configuration rather than runtime behavior, covers known locations, and does not determine whether a package is malicious.

Firecrawl is an open-source web context API and hosted service for AI agents and applications. It searches the web, scrapes individual pages, crawls websites, maps site URLs, and batch-processes large URL sets, returning content as clean Markdown, HTML, screenshots, structured JSON, and other extracted data. It handles JavaScript-heavy pages, rotating proxies, orchestration, rate limits, and blocked content, and can parse web-hosted PDFs and DOCX files. Its interaction endpoint lets users or agents click, scroll, write, wait, and press on a page before extracting content; its agent endpoint gathers web data from a natural-language request without requiring URLs. Firecrawl provides Python and Node.js SDKs, cURL and CLI interfaces, and an MCP connection for AI agents and applications.