
subjack
Concurrent DNS takeover scanner detecting CNAME, NS, AXFR, SPF, MX, SRV, and stale A record vulnerabilities across cloud providers, with multi-level…

Concurrent DNS takeover scanner detecting CNAME, NS, AXFR, SPF, MX, SRV, and stale A record vulnerabilities across cloud providers, with multi-level…

Nodesub is a command-line tool for finding subdomains in bug bounty programs

E-mails, subdomains and names Harvester - OSINT

Fast passive subdomain enumeration tool.

Fast subdomains enumeration tool for penetration testers

Generates permutations, alterations and mutations of subdomains and then resolves them

A DNS meta-query spider that enumerates DNS records, and subdomains.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

Bash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.

Rapidly enumerate subdomains and domains using rapiddns.io.

This script will try to find a domains subdomains by using google dorking. It will never connect to the site it is researching.

Recon-Scan: open‑source passive reconnaissance with AI‑powered security analysis. Zero‑touch, developer‑first, and privacy‑focused.

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

Knock Subdomain Scan

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.