SecLists
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…
ctfcurated-resourcesdns-fuzzing+11
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
projectdiscovery/dnsxFast multi-purpose DNS toolkit for querying A, AAAA, CNAME, MX, TXT, and other records with custom resolvers, wildcard filtering, brute-force…
razvandimescu/numaPortable DNS resolver with ad blocking, local .numa domains, developer overrides, and ODoH privacy. Supports recursive resolution, DNSSEC, DoT/DoH…
projectdiscovery/subfinderFast passive subdomain enumeration tool.
aflplusplus/aflplusplusThe fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules,…
ffuf/ffufHigh-performance web fuzzer for content discovery, virtual host enumeration, and parameter fuzzing. Supports recursive scanning, multi-wordlist…
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
jtpereyda/boofuzzA fork and successor of the Sulley Fuzzing Framework
findomain/findomainThe fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…
homas/ioc2rpzDNS server that converts threat intelligence feeds into Response Policy Zones (RPZ) for automated DNS-layer blocking of malware, C2 domains, and…
shadowy-pycoder/go-http-proxy-to-socksCLI MITM proxy that converts SOCKS4/SOCKS5 into HTTP/HTTPS/HTTP2/HTTP3 proxy with transparent TCP/UDP redirection, ARP/NDP/DNS spoofing, traffic…
google/honggfuzzSecurity oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
lgandx/responderLLMNR, NBT-NS, and MDNS poisoner with 17+ rogue authentication servers for capturing NetNTLM hashes, cleartext credentials, and Kerberos AS-REP…
blechschmidt/massdnsA high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
cyberdev.hacker/nsec3-xThe modern, high-speed successor to nsec3walker. A specialized NSEC3 forensics engine built in Go for rapid zone harvesting and automated hash…
owasp-amass/amassIn-depth attack surface mapping and asset discovery
boy-hack/ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second