#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended

Listing subdomains about a main domain

PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess…

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.


This script is intended to automate your reconnaissance process in an organized fashion

Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers.

Subdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…

A modular distributed penetration testing tool.

Automated phishing campaign toolset that spawns dedicated AWS EC2 instances with integrated PhishingFrenzy and BeEF, plus subdomain discovery and…

Multithreaded Python tool for brute-forcing hidden directories and subdomains on target web servers to aid in reconnaissance and information…

Recon, Subdomain Bruting, Zone Transfers

This script will try to find a domains subdomains by using google dorking. It will never connect to the site it is researching.

CVE-2014-0160 mass test against subdomains