DNS & Subdomain Enumeration

fricciolosa-red-team/evildork

Automated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…

thebinitghimire/nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

yogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

owasp-amass/amass

In-depth attack surface mapping and asset discovery

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

tomnomnom/assetfinder

Find domains and subdomains related to a given domain

gwen001/pentest-tools

A collection of custom security tools for quick needs.

codingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

0x0fb0/pulsar

Network footprint scanner platform. Discover domains and run your custom checks periodically.

s0md3v/subgpt

Find subdomains with GPT, for free

pikpikcu/nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs

elmasy-com/columbus-server

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

domain-protect/domain-protect

OWASP Domain Protect - prevent subdomain takeover

zzzteph/probable_subdomains

Subdomains analysis and generation tool. Reveal the hidden!