Tools

danielmiessler/seclists

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

findomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

razvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

aflplusplus/aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules,…

ffuf/ffuf

Fast web fuzzer written in Go

jtpereyda/boofuzz

A fork and successor of the Sulley Fuzzing Framework

homas/ioc2rpz

ioc2rpz is a place where threat intelligence meets DNS.

blechschmidt/massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

cyberdev.hacker/nsec3-x

The modern, high-speed successor to nsec3walker. A specialized NSEC3 forensics engine built in Go for rapid zone harvesting and automated hash…

owasp-amass/amass

In-depth attack surface mapping and asset discovery

projectdiscovery/shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…

infosec-au/altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

goethe-universitat-cybersecurity/nsec3-encloser-attack

This project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868.

fuzzdb-project/fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.