DNS & Subdomain Enumeration

projectdiscovery/tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

h9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

zarcolio/sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

trickest/resolvers

Curated, continuously validated list of reliable DNS resolvers for DNS enumeration, reconnaissance, and bug bounty workflows.

yassineaboukir/sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…

dheerajmadhukar/karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

projectdiscovery/alterx

Fast and customizable subdomain wordlist generator using DSL

jhaddix/domain

Setup script for Regon-ng

esc4icescesc/skanuvaty

Dangerously fast DNS/network/port scanner

projectdiscovery/urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

evilsocket/dnssearch

A subdomain enumeration tool.

projectdiscovery/chaos-client

Go client to communicate with Chaos DB API.

christophetd/censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

1n3/goohak

Automatically Launch Google Hacking Queries Against A Target Domain

evilsocket/ditto

A tool for IDN homograph attacks and detection.

typeerror/domained

Multi Tool Subdomain Enumeration

yanxiu0614/subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)