#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
soxoj/maigret🕵️♂️ Collect a dossier on a person by username from 6K websites
lockfale/osint-frameworkCurated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…
laramies/theharvesterE-mails, subdomains and names Harvester - OSINT
s0md3v/photonIncredibly fast crawler designed for OSINT.
projectdiscovery/subfinderFast passive subdomain enumeration tool.
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
owasp-amass/amassIn-depth attack surface mapping and asset discovery
oj/gobusterDirectory/File, DNS and VHost busting tool written in Go
aboul3la/sublist3rFast subdomains enumeration tool for penetration testers
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
yogeshojha/renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…
lc/gauFetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
divinelabio/argusThe Ultimate Information Gathering Toolkit
gwen001/pentest-toolsA collection of custom security tools for quick needs.
darkoperator/dnsreconDNS Enumeration Script
apurvsinghgautam/dark-web-osint-toolsOSINT Tools for the Dark Web
