DNS & Subdomain Enumeration

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

m0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

g0ldencybersec/easyeasm

Zero-dollar attack surface management tool

yousseflahouifi/cloudpulse

SSL certificate-based reconnaissance engine for discovering AWS cloud assets, including IPs, subdomains, and domains, with active port scanning for…

nccgroup/typofinder

A finder of domain typos showing country of IP address

xssdoctor/vhostawesome

Concurrent virtual host scanner that brute-forces subdomains across multiple IPs on common web ports, filtering results by status codes and content…

knowledge-wisdom-understanding/recon

Enumerate a target Based off of Nmap Results

pixelbubble/domainalerting

Daily alert when a new domain name is registered and contains your keywords

researchanddestroy/dorxng

Next Generation DorX. Built by Dorks, for Dorks. 🤓

flipkart-incubator/rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

fricciolosa-red-team/evildork

Automated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…

v3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

hash3lizer/subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

j3ers3/searpy

🥀 Search Engine Tookit，URL采集、Favicon哈希值查找真实IP、子域名查找

bountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

tegal1337/recheck

Deep scan domain and find all possible domain to takeover