The Toolkit
Information Gathering
Reconnaissance is where the work begins. Before you probe a single vulnerability you want a map: which hosts are up, which ports and services they expose, which domains and subdomains belong to the target, and — for the human side — which email addresses, usernames, and accounts are floating around in the open. Almost every engagement opens with this phase, and the quality of everything downstream depends on how thorough you are here.
Oniomarchy’s Information Gathering category collects the tools that answer those questions, from raw port scanning to organization-wide OSINT. Everything in the list below is hand-picked, installed, and in the Security → Information Gathering menu.
| Tool | Source | What it’s for |
|---|---|---|
| nmap | official | The port and service scanner. The starting point for almost everything. |
| masscan | official | Internet-scale port scanning — asynchronous, extremely fast. |
| gobuster | official | Brute-forcing directories, DNS subdomains, and vhosts. |
| ffuf | AUR | Fast, flexible web fuzzer — content discovery and parameter fuzzing. |
| dirb | AUR | The classic recursive web content scanner. |
| maltego | AUR | Visual link analysis — graphing relationships between people, domains, and infrastructure. |
| theHarvester | AUR | Emails, subdomains, hosts, and names from public sources. |
| recon-ng | AUR | A full web-recon framework with a module marketplace. |
| sherlock | AUR | Hunt a username across hundreds of social networks. |
Several Webapps round this category out without installing anything — Shodan, Censys, Have I Been Pwned, urlscan.io, PimEyes, and the OSINT Framework all live one click away in the menu.
How to read these pages
Each tool below has its own page. On it you’ll find what the tool is for, the real help text it prints when you launch it from the menu (captured from the tool itself, not paraphrased), and a handful of worked examples to get you moving. The help is the tool’s own — the same output Oniomarchy shows you in the terminal when you pick it — so the page and the machine never disagree.