Although Kali contains multiple tools to facilitate reconnaissance, many of the tools contain features that overlap, and importing data from one tool into another is usually a complex manual process. Most testers select a subset of tools and invoke them with a script.
Comprehensive tools focused on reconnaissance were originally command-line tools with a defined set of functions; one of the most commonly used was Deepmagic Information Gathering Tool (DMitry). DMitry could perform
whois lookups, retrieve netcraft.com information, search for subdomains and e-mail addresses, and perform TCP scans. Unfortunately, it was not extensible beyond these functions.
Recent advances have created comprehensive ...