#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended
yousseflahouifi/cloudpulseSSL certificate-based reconnaissance engine for discovering AWS cloud assets, including IPs, subdomains, and domains, with active port scanning for…
ecstatic-nobel/osweepDon't Just Search OSINT. Sweep It.
researchanddestroy/dorxngNext Generation DorX. Built by Dorks, for Dorks. 🤓
yousseflahouifi/moniorgPassive domain monitoring tool leveraging Certificate Transparency logs to discover and track newly issued domains for an organization, with Slack…
yuyudhn/tldhuntBash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…
osmankandemir/indicator-intelligenceCollects static files from target domains to discover related domains and IPv4 addresses for threat intelligence and IOC enrichment.
malwareman007/scanner-and-patcherA Web Vulnerability Scanner and Patcher
mr-rizwan-syed/chomteshCHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…
esc4icescesc/skanuvatyDangerously fast DNS/network/port scanner
projectdiscovery/uncoverQuickly discover exposed hosts on the internet using multiple search engines.
boy-hack/ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
abaykan/getsubdomainGet subdomain list and check whether they are active or not by each response code. Using API by c99.nl
hood3drob1n/bingooBinGoo! A Linux bash based Bing and Google Dorking Tool
j3ers3/searpy🥀 Search Engine Tookit，URL采集、Favicon哈希值查找真实IP、子域名查找
pixelbubble/domainalertingDaily alert when a new domain name is registered and contains your keywords
vmware-labs/attack-surface-frameworkTool to discover external and internal network attack surface
a3h1nt/dnsrrBash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.
d3mondev/purednsHigh-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.
