DNS & Subdomain Enumeration

sc4rfurry/chaoskobra

Another Sub-Domain Enumeration Tools for normies written in python...

jenderal92/massive-subdomain-enumerator

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

jul10l1r4/getrails

Get trails lib: Get all urls indexed of target

evilsocket/xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

woj-ciech/kamerka

Build interactive map of cameras from Shodan

saeeddhqan/maryam

Maryam: Open-source Intelligence(OSINT) Framework

typeerror/domained

Multi Tool Subdomain Enumeration

r3curs1v3-pr0xy/vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

0x0fb0/pulsar

Network footprint scanner platform. Discover domains and run your custom checks periodically.

sethsec/celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

domain-protect/domain-protect

OWASP Domain Protect - prevent subdomain takeover

s0md3v/subgpt

Find subdomains with GPT, for free

clouedoc/autosqli

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

zzzteph/probable_subdomains

Subdomains analysis and generation tool. Reveal the hidden!

josue87/metafinder

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata