DNS & Subdomain Enumeration

hash3lizer/subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

dheerajmadhukar/karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

lc/gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gokulapap/reconator

Automated Recon for Pentesting & Bug Bounty

m3n0sd0n4ld/goofuzz

Bash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…

liamg/scout

🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs

blark/aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

tegal1337/recheck

Deep scan domain and find all possible domain to takeover

mhaskar/exchangefinder

Find Microsoft Exchange instance for a given domain and identify the exact version

micro-joan/dnsrecon-gui

Graphical DNS enumeration tool for Kali Linux that scans standard records (A, NS, SOA, MX) and visualizes results in mind maps for reconnaissance and…

xpl0ited1/submonitor

Subdomain monitor with reporting capabilities to Slack, Discord and Telegram

jul10l1r4/getrails

Get trails lib: Get all urls indexed of target

sc4rfurry/chaoskobra

Another Sub-Domain Enumeration Tools for normies written in python...

morpheuslord/gpt_vuln-analyzer

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports…

c0rv4x/project-black

Pentest/BugBounty progress control with scanning modules

nerrorsec/google-dorker

Automate dorking while doing bug bounty or other stuffs.

ax-i-om/bitcrook

Centralized OSINT investigation platform with CLI and GUI, integrating email breach checks, domain lookups, phone search, and API key support for…