#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended
hackinglz/saas_enumCommand-line tool for discovering SaaS platforms a company uses via DNS enumeration
nahamsec/hostilesubbruteforcerSubdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…
nullt3r/rapiddnsRapidly enumerate subdomains and domains using rapiddns.io.
ggusoft/inforfinderInforfinder is a tool to collect information of any domains pointing at some server (ip, domain, range, file). Is able to detect all domains pointing…
projectdiscovery/subfinder-actionFast and passive subdomain enumeration.
pentestcore/cloudflare-bypassCloudflare Bypass tools | PentestCore
sc4rfurry/chaoskobraAnother Sub-Domain Enumeration Tools for normies written in python...
trimstray/htrace.shMy simple Swiss Army knife for http/https troubleshooting and profiling.
spiderlabs/hosthunterHostHunter a recon tool for discovering hostnames using OSINT techniques.
dheerajmadhukar/karma_v2⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
franccesco/getaltnameExtract subdomains from SSL certificates in HTTPS sites.
hackplayers/iptodomainThis tool extract domains from IP address based in the information saved in virustotal.
bountystrike/bountystrike-shPoor (rich?) man's bug bounty pipeline https://dubell.io
josue87/analyticsrelationshipsGet related domains / subdomains by looking at Google Analytics IDs
nccgroup/typofinderA finder of domain typos showing country of IP address
stealth/fernmelderasync mass DNS resolver
micro-joan/dnsrecon-guiGraphical DNS enumeration tool for Kali Linux that scans standard records (A, NS, SOA, MX) and visualizes results in mind maps for reconnaissance and…
xpl0ited1/submonitorSubdomain monitor with reporting capabilities to Slack, Discord and Telegram
