Reconnaissance covers gathering information through passive and active techniques like subdomain enumeration, asset discovery, and ASN/IP lookup tools.

Arjun is an HTTP parameter discovery suite to find valid web parameters and uncover hidden endpoints.

AutoRecon is a network reconnaissance tool that automates service enumeration and port scanning for multiple targets.

AzureHound is a BloodHound data collector for Microsoft Azure, enabling security professionals to map attack paths in Azure environments.