Tools

guelfoweb/knockpy

Knock Subdomain Scan

v4d1/dome

Fast Python-based subdomain enumeration tool combining passive OSINT and active brute-force scanning with DNS wildcard detection, port scanning, and…

aboul3la/sublist3r

Fast subdomains enumeration tool for penetration testers

thebinitghimire/nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

pptx704/domainim

A fast and comprehensive tool for organizational network scanning

projectdiscovery/subfinder-action

Fast and passive subdomain enumeration.

hakluke/hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

giovanifss/dumb

Dumain Bruteforcer - a fast and flexible domain bruteforcer

coroner/cryptolyzer

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

projectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

zmap/zdns

Fast DNS Lookup Library and CLI Tool

punk-security/dnsreaper

Fast subdomain takeover scanner with 50+ signatures, supporting cloud provider integrations (AWS, Azure, Cloudflare) and CI/CD pipeline mode for…

pwnesia/dnstake

Fast DNS takeover scanner that checks for missing hosted zones by querying nameservers and fingerprinting providers to identify vulnerable subdomains.

koenrh/s3enum

Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

0xsnowmn/cngo

Fast Golang Tool To Get Cname For Domains and Subdomain

projectdiscovery/dnsx-action

Fast and multi-purpose DNS toolkit allow to run multiple DNS queries.