DNS & Subdomain Enumeration

m3n0sd0n4ld/goofuzz

Bash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…

1n3/goohak

Automatically Launch Google Hacking Queries Against A Target Domain

ring0lab/catphish

CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.

spiderlabs/hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

yagamiilight/cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全…

dwisiswant0/go-dork

The fastest dork scanner written in Go.

pielco11/fav-up

Shodan-powered tool to discover real IP addresses behind Cloudflare by hashing favicon icons using MurmurHash3, enabling origin server identification…

frizb/vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active…

evilsocket/ditto

A tool for IDN homograph attacks and detection.

franccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

chiasmod0n/chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves…

gokulapap/reconator

Automated Recon for Pentesting & Bug Bounty

fwaeytens/dnsenum

dnsenum is a perl script that enumerates DNS information

projectdiscovery/alterx

Fast and customizable subdomain wordlist generator using DSL

esc4icescesc/skanuvaty

Dangerously fast DNS/network/port scanner

yanxiu0614/subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)