DNS & Subdomain Enumeration

razvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

projectdiscovery/awesome-search-queries

Community curated list of search queries for various products across multiple search engines.

darkrx1/rxscan

Rust CLI for bounded network reconnaissance: TCP/UDP port discovery, service identification, DNS/TLS/HTTP evidence collection, and public-source…

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

joda32/yowie

Finds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

thalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

projectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

lockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

gwen001/pentest-tools

A collection of custom security tools for quick needs.

s0md3v/photon

Incredibly fast crawler designed for OSINT.

pptx704/domainim

A fast and comprehensive tool for organizational network scanning

projectdiscovery/alterx

Fast and customizable subdomain wordlist generator using DSL

trickest/resolvers

The most exhaustive list of reliable DNS resolvers.

rix4uni/wordlist

Curated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…