#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended

Published security research repository featuring academic papers on domain hijacking, 2FA bypass, and large-scale spoofing techniques, authored by…

Another Sub-Domain Enumeration Tools for normies written in python...

AlienTec-Recon-Tool

The modern, high-speed successor to nsec3walker. A specialized NSEC3 forensics engine built in Go for rapid zone harvesting and automated hash…


Another tool for subdomain enumeration with some magics 🧙🏻♂️

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

Get trails lib: Get all urls indexed of target

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

Bash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux tools (curl, dig, openssl, nmap, python3).

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Build interactive map of cameras from Shodan

Maryam: Open-source Intelligence(OSINT) Framework

Multi Tool Subdomain Enumeration

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

Network footprint scanner platform. Discover domains and run your custom checks periodically.

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.