WordList
rix4uni/wordlistCurated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…
dns-subdomain-enumerationfuzzinginformation-gathering+6
153
rix4uni/wordlistCurated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…
mmarting/unwafGo tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…
0xshe/fuck-cdnAutomated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…
divinelabio/argusThe Ultimate Information Gathering Toolkit
rthalley/dnspythonPython DNS toolkit supporting queries, zone transfers, dynamic updates, TSIG, EDNS0, DNSSEC, DNS-over-HTTPS, and DNS-over-QUIC with high- and…
clickswave/limeyardDeliberately vulnerable Docker lab with a routable DNS estate and machine-readable answer keys per target, scoring scanner precision, recall and…
voidsecsoftwares/voidsec-proxyMulti-module offensive security toolkit for SOCKS5 proxy chaining, port scanning, DNS enumeration, hash cracking, reverse shell generation,…
gmh5225/domain-enumeration-sicariusAnother tool for subdomain enumeration with some magics 🧙🏻♂️
wattocyber/vegadnsRust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.
azmisyahrul/prismsecSecure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
tomnomnom/httprobeTake a list of domains and probe for working HTTP and HTTPS servers
ethicalhackingplayground/dnsresolverA Lightning-Fast DNS Resolver written in Rust 🦀
caio-ishikawa/netscoutOSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.
k3ystr0k3r/dnsplitFast subdomain enumeration tool written in python.
rxerium/bug-bounty-toolsA BASH Script to automate the installation of the most popular bug bounty tools
medpaf/hawkNetwork, recon and offensive-security tool for Linux.
darryllane/bluto-oldRecon, Subdomain Bruting, Zone Transfers
jenderal92/massive-subdomain-enumeratorThis tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.