#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

Exploiting misconfigured firebase databases

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata

Multi Tool Subdomain Enumeration

a low(zero) cost threat intelligence&response tool against phishing domains

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Maryam: Open-source Intelligence(OSINT) Framework

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Build interactive map of cameras from Shodan