WireTapper
h9zdev/wiretapperPassive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…
bluetooth-securitydns-subdomain-enumerationembedded-systems-security+9
2.4k
h9zdev/wiretapperPassive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
laramies/theharvesterE-mails, subdomains and names Harvester - OSINT
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
projectdiscovery/urlfinderA high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
projectdiscovery/subfinderFast passive subdomain enumeration tool.
trickest/resolversThe most exhaustive list of reliable DNS resolvers.
y0oshi/project-eyes-onProject Eyes On is a high-speed, multi-threaded surveillance tool by Y0oshi (@rde0) for locating open IP cameras worldwide. Unifies Google Dorking…
wattocyber/vegadnsRust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.
j3ssie/metabigorOSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…
hakluke/hakrevdnsSmall, fast tool for performing reverse DNS lookups en masse.
deadshot0x7/007-thebondThis Script will help you to gather information about your victim or friend.
edoardottt/scillaInformation Gathering tool - DNS / Subdomains / Ports / Directories enumeration
franccesco/getaltnameExtract subdomains from SSL certificates in HTTPS sites.
jenderal92/massive-subdomain-enumeratorThis tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.
joda32/certcrunchyJust a silly recon tool that uses data from SSL Certificates to find potential host names
boy-hack/ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
d3mondev/purednsHigh-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.