Subdomain Enumeration

anshumanbh/kubebot

A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform

olizimmermann/s3dns

Passive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…

storenth/lazyrecon

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

dawgyg/bugbounty_tools

Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and…

joshkar/x-recon

A utility for detecting webpage inputs and conducting XSS scans.

pwnwriter/kanha

🦚 A web-app pentesting suite written in rust .

jehadalqurashi/blackdir-framework

Web Application Vulnerability Scanner

skynet0x01/tugarecon

TugaRecon is an advanced subdomain reconnaissance and intelligence framework built for security researchers, penetration testers and OSINT…

bitthebyte/eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

karim852/kumo-domain-recon-tool

Domain OSINT and security reconnaissance framework running 26 parallel modules for DNS, ports, subdomains, leaked credentials, exposed endpoints,…

umutcamliyurt/subhunter

Fast subdomain takeover scanner that checks DNS CNAME records against known fingerprints to detect vulnerable subdomains. Built in Go with…

shiva108/waes

CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result

e1abrador/sub.monitor

Self-hosted passive subdomain continous monitoring tool.

janniskirschner/horn3t

Powerful Visual Subdomain Enumeration at the Click of a Mouse

caio-ishikawa/netscout

OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

iamnihal/warf

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…