#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended
whitelisthackers/wosindAn OSINT tool for collecting public information.
silverpoision/rock-onRock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
randomrobbiebf/subdomain-tkoDetects subdomain takeover vulnerabilities by analyzing DNS records and HTTP responses. Automatically identifies takeover-prone subdomains for…
smiegles/mass3Multi-threaded DNS-based enumeration tool for discovering AWS S3 buckets using pre-compiled wordlists and custom DNS resolvers, with optional Docker…
s0md3v/strikerStriker is an offensive information and vulnerability scanner.
sagehack/cloud-busterA Cloudflare resolver that works
janniskirschner/horn3tPowerful Visual Subdomain Enumeration at the Click of a Mouse
blark/aiodnsbrutePython 3.5+ DNS asynchronous brute force utility
0xbharath/domains-from-cspA script to extract domain names from Content Security Policy(CSP) headers
cyberblackhole/domain-to-webappBash script that enumerates subdomains via Subfinder, resolves IPs, and identifies live web applications hosted on a domain for reconnaissance and…
viperbluff/portwitnessTool for checking Whether a domain or its multiple sub-domains are up and running.
chrismaddalena/odinAutomated network asset, email, and social media profile discovery and cataloguing.
edoverflow/megplusAutomated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
giovanifss/dumbDumain Bruteforcer - a fast and flexible domain bruteforcer
ice3man543/suboverA Powerful Subdomain Takeover Tool
003random/003reconSome tools to automate recon - 003random
