# SpiderLabs/HostHunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Repository: https://github.com/SpiderLabs/HostHunter
Canonical: https://ross.abutalabs.com/products/hosthunter
Homepage: https://github.com/SpiderLabs/HostHunter
Language: Python
License: MIT
License Family: permissive
Topics: osint, recon, tool, hostnames, ip, reconnaissance, pentesting, bugbounty, virtual-hosts, security-tools, network-security, hacking-tool, open-source, hacking, scoping, penetration-testing, hosthunter, pentest, pentest-tool
Last push: 2023-03-30T14:14:12+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3030, "days_push": 1252, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1169, forks 194 (observed 2026-08-28T04:03:51.166139+00:00)

## What it is
HostHunter is a Python CLI recon tool that maps IPv4/IPv6 targets to virtual hostnames using OSINT and active reconnaissance techniques such as SSL certificate grabbing. It outputs results in CSV, TXT, or Nessus formats and can capture screenshots of discovered hosts.

## Use cases
- discover hostnames for a list of IP addresses
- map virtual hosts to IPs during a pentest
- enumerate attack surface for a bug bounty scope
- generate Nessus-compatible recon output
- grab SSL certificates to find vhost names
- screenshot web services on target IPs

## When to choose
- you have IP ranges and need to uncover hidden virtual hostnames
- you want OSINT plus active recon in one lightweight Python tool
- you need recon results in CSV, TXT, or Nessus format

## When to avoid
- you need a full vulnerability scanner rather than hostname recon
- you require a GUI or Windows-native support
- you need actively maintained tooling with frequent updates

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: osint, networking, security, web-scraping
- domain: security, penetration-testing, osint, networking
- platform: python, cli
- tags: recon, vhost-discovery, pentesting, bugbounty, hostname-enumeration, nessus-output, attack-surface, linux, macos

## Member repositories
- SpiderLabs/HostHunter (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:51.166139+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:28:40.198290+00:00, confidence not recorded.
  - readme: https://github.com/SpiderLabs/HostHunter (fetched 2026-08-28T04:03:51.166139+00:00, sha f3dc4bb74a81)
  - homepage: https://github.com/SpiderLabs/HostHunter (fetched 2026-08-29T12:34:36.520419+00:00, sha 9d8b6f6654be)
- Data as of 2026-08-30T08:39:29.467469+00:00.