
nmap
High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

Fast passive subdomain enumeration tool.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

A fast and comprehensive tool for organizational network scanning

A streamlined tool for discovering private TLDs for security research.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

E-mails, subdomains and names Harvester - OSINT

The most exhaustive list of reliable DNS resolvers.

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

Small, fast tool for performing reverse DNS lookups en masse.

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform DNS…

Knock Subdomain Scan

Directory/File, DNS and VHost busting tool written in Go

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

Generates permutations, alterations and mutations of subdomains and then resolves them