#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended
siv-nick/whocordScans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…
s0md3v/photonIncredibly fast crawler designed for OSINT.
olivsec/loboguaraCyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…
nu11secur1ty/complete-google-dorksCurated collection of Google dork queries for advanced search engine reconnaissance, uncovering exposed databases, configuration files, admin panels,…
clickswave/limeyardDeliberately vulnerable Docker lab with a routable DNS estate and machine-readable answer keys per target, scoring scanner precision, recall and…
utkusen/jeopardizea low(zero) cost threat intelligence&response tool against phishing domains
projectdiscovery/retryablednsRetryable DNS client in Go
yousseflahouifi/cloudpulseSSL certificate-based reconnaissance engine for discovering AWS cloud assets, including IPs, subdomains, and domains, with active port scanning for…
zeropwn/dnsdmpstrUnofficial API & Client for dnsdumpster.com and hackertarget.com
rthalley/dnspythonPython DNS toolkit supporting queries, zone transfers, dynamic updates, TSIG, EDNS0, DNSSEC, DNS-over-HTTPS, and DNS-over-QUIC with high- and…
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
darryllane/bluto-oldRecon, Subdomain Bruting, Zone Transfers
projectdiscovery/urlfinderA high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
liamg/scout🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs
ecstatic-nobel/osweepDon't Just Search OSINT. Sweep It.
osmankandemir/indicator-intelligenceCollects static files from target domains to discover related domains and IPv4 addresses for threat intelligence and IOC enrichment.
abaykan/getsubdomainGet subdomain list and check whether they are active or not by each response code. Using API by c99.nl
j3ers3/searpy🥀 Search Engine Tookit，URL采集、Favicon哈希值查找真实IP、子域名查找
