#1Tools for discovering subdomains and DNS records associated with target domains.
Kitploit recommended
yassineaboukir/sublertSublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…
projectdiscovery/alterxFast and customizable subdomain wordlist generator using DSL
mschwager/fierceA DNS reconnaissance tool for locating non-contiguous IP space.
viralmaniar/bigbountyreconBigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial…
sharadkumar97/osint-spyPerforms OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…
projectdiscovery/shufflednsMassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…
dheerajmadhukar/karma_v2⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
franccesco/getaltnameExtract subdomains from SSL certificates in HTTPS sites.
evilsocket/dnssearchA subdomain enumeration tool.
m3n0sd0n4ld/goofuzzBash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…
codingo/vhostscanA virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and…
1n3/goohakAutomatically Launch Google Hacking Queries Against A Target Domain
projectdiscovery/urlfinderA high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
spiderlabs/hosthunterHostHunter a recon tool for discovering hostnames using OSINT techniques.
dwisiswant0/go-dorkThe fastest dork scanner written in Go.
ring0lab/catphishCATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.
morpheuslord/gpt_vuln-analyzerUses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports…
boy-hack/ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
