DNS & Subdomain Enumeration

rxerium/bug-bounty-tools

A BASH Script to automate the installation of the most popular bug bounty tools

m3n0sd0n4ld/goofuzz

Bash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…

alientec1908/alientec-recon-tool

AlienTec-Recon-Tool

cyberintel-labs/insightsnexus

OSINT Graph Investigation Application

datasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

hueristiq/xsubfind3r

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

yogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

codingo/vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and…

s0md3v/dump

Stuff that doesn't deserves its own repository.

frishtik/osint-tools-mcp-server

MCP server exposing multiple OSINT tools for AI assistants like Claude

yuyudhn/tldhunt

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

in3tinct/taken

Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.

zzzteph/probable_subdomains

Subdomains analysis and generation tool. Reveal the hidden!