
awesome-search-queries
Community curated list of search queries for various products across multiple search engines.

Community curated list of search queries for various products across multiple search engines.

🕵️♂️ Collect a dossier on a person by username from 3000+ sites

Automated reconnaissance framework with 17+ modules for subdomain enumeration, directory brute-forcing, JS/link mining, WAF fingerprinting, and…

E-mails, subdomains and names Harvester - OSINT

Fast multi-purpose DNS toolkit for querying A, AAAA, CNAME, MX, TXT, and other records with custom resolvers, wildcard filtering, brute-force…

Portable DNS resolver with ad blocking, local .numa domains, developer overrides, and ODoH privacy. Supports recursive resolution, DNSSEC, DoT/DoH…

Fast passive subdomain enumeration tool.

Curated, continuously validated list of reliable DNS resolvers for DNS enumeration, reconnaissance, and bug bounty workflows.

Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

Daily updated SSL certificate dataset for AWS EC2 and GCP IP ranges, enabling subdomain enumeration, origin IP discovery, and cloud asset…

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

DNS enumeration tool for querying record types, performing zone transfers, brute-forcing subdomains, and resolving PTR records across IP ranges…

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

Curated collection of OSINT tools for dark web investigation, including search engines, onion link scanners, crawlers, and threat intelligence…

Incredibly fast crawler designed for OSINT.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Quickly discover exposed hosts on the internet using multiple search engines.