Reconnaissance, scanning and testing tools built by Joshua Prince — free to download, use and contribute to.
Practical, no-nonsense security tools born out of real engagements — every tool here is free, open-source, and actively maintained.
Python
Active
Minimal, powerful website recon
A lightweight Python-based reconnaissance tool that fingerprints a website's technology stack using the builtwith library. Point it at any URL and get a clean, colour-coded readout of what's running under the hood — PHP, WordPress, jQuery and more.
python joshrecon.py <url>
Python
Active
Fast, customizable XSS scanner
Joshxss automates the process of finding reflected Cross-Site Scripting vulnerabilities in URLs and parameters, using smart payload injection and response analysis to cut through the noise.
New releases get added right here — check back or star the GitHub repos to get notified.
If these tools don't quite cover your workflow, I also take on custom security tooling and automation as part of consulting engagements.
Get In Touch