OSINT Toolbox vs Recon

From the developer of the award-winning Network Toolbox comes a new standard for open-source intelligence on Apple platforms. OSINT — Open-Source Intelligence — is the practice of gathering and analysing information from publicly available sources: domain registrations, DNS records, IP reputation databases, breach data, certificate logs, and more. OSINT Toolbox makes these capabilities available natively on iPhone, iPad, and Mac — with no accounts, no data collection, and no active probing of target systems. REPLACE A DOZEN BROWSER TABS WITH ONE APP Security researchers, journalists, IT professionals, and privacy-conscious investigators have long relied on a patchwork of web tools — each requiring a separate account, each handling your data differently, many operating opaquely. OSINT Toolbox consolidates the most important of these into a single, transparent, and consistent interface that works the same on every Apple device. INTELLIGENCE MODULES Enter any indicator — domain, IP address, email address, URL, file hash, ASN, phone number, username, or company name — and OSINT Toolbox automatically runs every relevant module in parallel. Results stream in live. Discovered entities can pivot automatically into new investigation threads. Built-in intelligence sources include: • DNS resolution and reverse DNS • RDAP and WHOIS registration data • Certificate transparency logs • VirusTotal, Shodan, AbuseIPDB, GreyNoise • HaveIBeenPwned, ThreatFox, MalwareBazaar • Gravatar, LinkedIn, social account presence • BGP routing, ASN info, IP geolocation • And more — with new modules added regularly Bring your own API keys for services that support it. Free modules work without any key at all. APPLE INTELLIGENCE BUILT IN OSINT Toolbox integrates Apple's on-device AI so you can describe an investigation in plain language — no need to know which modules to pick or how to format the input. Just type what you're looking for: "Check if cloudflare.com has been flagged for malware and show its DNS records and registration details" The app understands your intent, selects the right indicator type, and activates the relevant modules — entirely on-device, privately, with no data sent to any cloud service. The feature is optional and requires a device with Apple Intelligence enabled. INVESTIGATION UTILITIES A growing catalog of standalone utilities covers hashing, encoding, network calculations, DNS lookups, IP geolocation, certificate inspection, JWT decoding, CIDR calculation, URL analysis, mail header analysis, and more — all available offline, all on-device. PRIVACY BY DESIGN OSINT Toolbox is built on a strict principle: your investigation data belongs to you. • No account required • Passive only — never touches target infrastructure; queries public APIs and open data sources only • No analytics, no telemetry, no crash reporting to third parties • App Store privacy label: Data Not Collected • API keys stored exclusively in iCloud Keychain — never logged, never exported, never sent anywhere except the one service they authenticate against • All DNS queries routed through DNS-over-HTTPS • Indicator values never written to logs • No third-party SDKs or libraries of any kind NATIVE. EVERYWHERE. OSINT Toolbox is a Universal Purchase — buy once, use on all your iPhone, iPad, and Mac devices. Written entirely in Swift 6 with SwiftUI. No Electron shell. No web wrapper. No third-party frameworks. Just native Apple technology, done properly. Scan results, investigation notebooks, and settings sync automatically across all your devices via iCloud. API keys sync securely via iCloud Keychain.

RECON is a professional network scanner for iPhone with 24 tools — from LAN scan and traceroute to HTTP client, Shodan queries, and CVE intelligence. One-time purchase. No subscription, no ads, no telemetry. —— TOOLS —— CONNECTIVITY • Ping — ICMP with live RTT oscilloscope and loss tracking • Traceroute — hop-by-hop path discovery with reverse DNS and geographic arc map • MTR — continuous path-quality monitoring combining ping and traceroute DNS & DISCOVERY • DNS Lookup — query A, AAAA, MX, NS, TXT, CAA records against any resolver • Reverse DNS — instant IP-to-hostname PTR resolution • LAN Scan — discover every device on your subnet via ARP and mDNS • Ping Sweep — scan entire CIDR ranges for live hosts • Bonjour Browser — browse all mDNS service types on the local network SECURITY & INSPECTION • Port Scan — TCP scan 1–65535 with banner grabbing and service identification • TLS Inspect — full certificate chain analysis, cipher suite, TLS version • HTTP Headers — request/response header inspection with timing breakdown • CVE Lookup — search the National Vulnerability Database by keyword INTELLIGENCE • WHOIS / RDAP — domain and IP registry data with parsed contact fields • ASN / BGP — autonomous system lookup via Team Cymru DNS • Shodan — search internet-connected devices for open ports and vulnerabilities • Network Topology — force-directed graph of discovered LAN nodes with risk assessment • Subdomain Enum — brute-force subdomain discovery with DNS validation UTILITIES • HTTP Client — API tester with custom methods, headers, and body (like Postman) • WiFi Info — current connection details, signal strength, channel • IP Calculator — subnet math, CIDR notation, host ranges • Speed Test — iperf3 throughput measurement • Wake-on-LAN — send magic packets to wake sleeping devices • Cert Monitor — track TLS certificate expiry across your domains • SNMP — query SNMP agents for device info and metrics —— WHAT MAKES RECON DIFFERENT —— GEOGRAPHIC TRACEROUTE Trace any route and watch it draw across a world map. Each hop is geolocated and plotted with animated arcs. NETWORK TOPOLOGY After a LAN scan, RECON builds an interactive force-directed graph of your network. Tap any node to inspect it, then jump directly into a port scan. GUIDED CHECKS Five checks answer a question instead of handing you a tool: is my internet slow, am I exposed, what is new on my network, are there cameras here, is my traffic being tampered with. Each one reports what it could not check, never a bare "nothing found". THE WATCH Declare the products and devices you run. RECON checks them against NVD and CISA KEV in the background and tells you when something you own comes under active exploitation. CROSS-TOOL NAVIGATION Tools talk to each other. Discover a host → scan its ports → inspect TLS → look up WHOIS. One continuous workflow. —— BUILT FOR PROFESSIONALS —— • Network engineers diagnosing connectivity and routing • Security teams running reconnaissance and incident response • Sysadmins managing infrastructure from the field • Military and government NetOps requiring mobile capability —— DETAILS —— • One-time purchase — no subscription, no in-app purchases • No ads, no tracking, no telemetry • Works offline for local network tools • Requires iOS 17.0 or later • iPhone only