
unwaf
Go tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…

Go tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

Tool to discover external and internal network attack surface

Unofficial API & Client for dnsdumpster.com and hackertarget.com

Terminal Ip Lookup Tool

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

A DNS reconnaissance tool for locating non-contiguous IP space.

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

The most exhaustive list of reliable DNS resolvers.

Project Eyes On is a high-speed, multi-threaded surveillance tool by Y0oshi (@rde0) for locating open IP cameras worldwide. Unifies Google Dorking…

Useful for digital forensics investigations or initial black-box pentest footprinting.

A new generation of tool for discovering subdomains( ip , cdn and so on)

Fierce.pl Domain Scanner

Concurrent virtual host scanner that brute-forces subdomains across multiple IPs on common web ports, filtering results by status codes and content…

dnsenum is a perl script that enumerates DNS information

Inforfinder is a tool to collect information of any domains pointing at some server (ip, domain, range, file). Is able to detect all domains pointing…

OSINT Graph Investigation Application

HostHunter a recon tool for discovering hostnames using OSINT techniques.