Subdomain Enumeration

trickest/cloud

Monitoring the Cloud Landscape

owasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

yeee3642/edu-recon

Authorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

edoardottt/scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

borntoberoot/networkmanager

A powerful open-source tool for managing networks and troubleshooting network problems!

projectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

olizimmermann/s3dns

Passive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…

findomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

nmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

trickest/wordlists

Real-world infosec wordlists, updated regularly

trickest/resolvers

The most exhaustive list of reliable DNS resolvers.

shuvonsec/claude-bug-bounty

AI-powered bug bounty hunting toolkit that works with or without subscription.

sw33tlie/bbscope

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!