Subdomain Enumeration

cihanmehmet/sub.sh

Multiprocessing(Parallel)Subdomain Detect Script

flipkart-incubator/rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

gfek/lepus

Subdomain finder

bountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

003random/003recon

Some tools to automate recon - 003random

s0md3v/dump

Stuff that doesn't deserves its own repository.

0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

bandit-haxunit/haxunit

Automated web domain reconnaissance and security assessment tool integrating subdomain enumeration, port scanning, vulnerability scanning, and…

silverpoision/rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

fleetcaptain/turbolist3r

Subdomain enumeration tool with analysis features for discovered domains

solomonsklash/chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

bitthebyte/monitorizer

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

assetnote/ghostbuster

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

threatunknown/jsubfinder

Go-based tool that scans webpages and JavaScript files to discover hidden subdomains and secrets, with optional crawling and real-time proxy analysis…

powerexploit/ashok

Ashok is a OSINT Recon Tool , a.k.a 😍 Swiss Army knife .

mhmdiaa/second-order

Crawls web applications to detect second-order subdomain takeover vulnerabilities by collecting URLs and matching configurable rules for non-200…