#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended
trickest/inventoryAutomated attack surface inventory for 800+ public bug bounty programs, running scheduled subdomain enumeration, permutation, DNS and web server…
cipher387/osint_stuff_tool_collectionCurated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.
redhuntlabs/awesome-asset-discoveryCurated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…
hevnsnt/cvengineAI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
evilsocket/xrayXRay is a tool for recon, mapping and OSINT gathering from public networks.
4ra1n/super-xrayWeb漏洞扫描工具XRAY的GUI启动器
typeerror/domainedMulti Tool Subdomain Enumeration
r3curs1v3-pr0xy/vajraVajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…
eslam3kl/3klconAutomation Recon tool which works with Large & Medium scopes. It performs a lot of tasks and gets back all the results in separated files.
aancw/belatiThe Traditional Swiss Army Knife for OSINT
anon-exploiter/sitebrokerA cross-platform python based utility for information gathering and penetration testing automation!
pownjs/reconA powerful target reconnaissance framework powered by graph theory.
sethsec/celerystalkAn asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
harsh-bothra/bheemScope-based reconnaissance automation framework that orchestrates multiple open-source tools for subdomain enumeration, vulnerability scanning, and…
r3curs1v3-pr0xy/sub404A python tool to check subdomain takeover vulnerability
gsmith257-cyber/graphcrawlerGraphQL automated security testing toolkit
