Subdomain Enumeration

tuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

zeropwn/spyse.py

Python API wrapper and command-line client for the tools hosted on spyse.com.

aboul3la/sublist3r

Fast subdomains enumeration tool for penetration testers

esecuritylab/kostebek

Automated reconnaissance tool that discovers organization domains by querying trademark databases via Google, Bing, Yahoo, and trademark registries.

c0rv4x/project-black

Pentest/BugBounty progress control with scanning modules

govindpalakkal/evilrip

It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash

pikpikcu/nuubi

Nuubi Tools (Information-ghatering|Scanner|Recon.)

billyv4/id-entify

Search for information related to domain: Emails - IP addresses - Sub-Domains - Information on WEB technology - Type of Firewall - NS and MX records.

dariusztytko/vhosts-sieve

Searching for virtual hosts among non-resolvable domains

solomonsklash/chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

tomnomnom/assetfinder

Find domains and subdomains related to a given domain

pry0cc/subgen

A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!

0xams/citrixvulncheck

a script to look for CVE-2019-19781 Vulnerability within a domain and it's subdomains

nahamsec/lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

yagamiilight/cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全…

al0ne/vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。