DNS & Subdomain Enumeration

spyboy-productions/cloakquest3r

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

h9zdev/wiretapper

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

razvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

tomnomnom/httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

trimstray/htrace.sh

My simple Swiss Army knife for http/https troubleshooting and profiling.

edoardottt/scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

j3ssie/metabigor

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

projectdiscovery/tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

codingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

d3mondev/puredns

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

v3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

h9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

jhaddix/domain

Setup script for Regon-ng

alisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

trimstray/sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.