DNS & Subdomain Enumeration

ax-i-om/bitcrook

Centralized OSINT investigation platform with CLI and GUI, integrating email breach checks, domain lookups, phone search, and API key support for…

fricciolosa-red-team/evildork

Automated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…

leobeosab/sharingan

Offensive Security recon tool

nullt3r/rapiddns

Rapidly enumerate subdomains and domains using rapiddns.io.

pry0cc/subgen

A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!

pptx704/domainim

A fast and comprehensive tool for organizational network scanning

a3h1nt/subcert

Passive subdomain enumeration tool that extracts valid subdomains from certificate transparency logs using Python, ideal for reconnaissance and bug…

in3tinct/taken

Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.

hueristiq/xsubfind3r

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

zeropwn/dnsdmpstr

Unofficial API & Client for dnsdumpster.com and hackertarget.com

ethicalhackingplayground/dnsresolver

A Lightning-Fast DNS Resolver written in Rust 🦀

siv-nick/whocord

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

joda32/certcrunchy

Just a silly recon tool that uses data from SSL Certificates to find potential host names

knowledge-wisdom-understanding/recon

Enumerate a target Based off of Nmap Results

osmankandemir/indicator-intelligence

Collects static files from target domains to discover related domains and IPv4 addresses for threat intelligence and IOC enrichment.

redhuntlabs/antisquat

AI-powered typosquatting and phishing domain detector using NLP and ChatGPT to generate domain permutations and extract contact information from…