DNS & Subdomain Enumeration

maverickaayush/onus

Locally-hosted, air-gapped VAPT platform that runs 8 parallel scanning modules, deterministically scores findings with CVSS v3.1, and generates PDF…

findomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

thalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

edoardottt/scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

franccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

h9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

lgandx/responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

jenderal92/subfindr

Python 2.7

jenderal92/reverse-ip

python 2.7

jenderal92/massive-subdomain-enumerator

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

joda32/certcrunchy

Just a silly recon tool that uses data from SSL Certificates to find potential host names

projectdiscovery/retryabledns

Retryable DNS client in Go

siv-nick/whocord

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

gokulapap/reconator

Automated Recon for Pentesting & Bug Bounty