DomainFrontDiscover
peewpw/domainfrontdiscoverScripts and results for finding domain frontable CloudFront domains
reconnaissancedns-subdomain-enumerationinformation-gathering+3
53
Tools for discovering subdomains and DNS records associated with target domains.
peewpw/domainfrontdiscoverScripts and results for finding domain frontable CloudFront domains
codingo/vhostscanA virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and…
datasploit/datasploitAn #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…
infosec-au/altdnsGenerates permutations, alterations and mutations of subdomains and then resolves them
unapibageek/ctfrAbusing Certificate Transparency logs for getting HTTPS websites subdomains.
nahamsec/hostilesubbruteforcer
mindpointgroup/cloudfruntA tool for identifying misconfigured CloudFront domains
flipkart-incubator/rtaRed team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
trimstray/sandmapNmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
trimstray/htrace.shMy simple Swiss Army knife for http/https troubleshooting and profiling.
joda32/certcrunchyJust a silly recon tool that uses data from SSL Certificates to find potential host names
christophetd/censys-subdomain-finder⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
davidpepper/fierce-domain-scannerFierce.pl Domain Scanner
zeropwn/dnsdmpstrUnofficial API & Client for dnsdumpster.com and hackertarget.com
spiderlabs/hosthunterHostHunter a recon tool for discovering hostnames using OSINT techniques.
am0nt31r0/osint-searchUseful for digital forensics investigations or initial black-box pentest footprinting.