CloudFlair
christophetd/cloudflair🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
reconnaissancedns-subdomain-enumerationinformation-gathering+3
3.0k
Tools for discovering subdomains and DNS records associated with target domains.
christophetd/cloudflair🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
infosec-au/altdnsGenerates permutations, alterations and mutations of subdomains and then resolves them
blechschmidt/massdnsA high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
lucksi/mr.holmesModular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…
datasploit/datasploitAn #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…
therook/subbruteA DNS meta-query spider that enumerates DNS records, and subdomains.
unapibageek/ctfrAbusing Certificate Transparency logs for getting HTTPS websites subdomains.
zarcolio/sitedorksSearch Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
trickest/resolversCurated, continuously validated list of reliable DNS resolvers for DNS enumeration, reconnaissance, and bug bounty workflows.
gwen001/pentest-toolsA collection of custom security tools for quick needs.
spyboy-productions/cloakquest3rOpen-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
tomnomnom/assetfinderFind domains and subdomains related to a given domain
thalesgroup-cert/watcherAI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…
j3ssie/metabigorOSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…
trimstray/htrace.shMy simple Swiss Army knife for http/https troubleshooting and profiling.
codingo/reconnoitreA security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…
projectdiscovery/tlsxFast and configurable TLS grabber focused on TLS based data collection.
razvandimescu/numaPortable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides