
urlfinder
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Concurrent virtual host scanner that brute-forces subdomains across multiple IPs on common web ports, filtering results by status codes and content…

A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform DNS…

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

This tool extract domains from IP address based in the information saved in virustotal.

a low(zero) cost threat intelligence&response tool against phishing domains

Find Microsoft Exchange instance for a given domain and identify the exact version

A modular recon tool for pentesting

The most exhaustive list of reliable DNS resolvers.

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…

Passive domain monitoring tool leveraging Certificate Transparency logs to discover and track newly issued domains for an organization, with Slack…

A new generation of tool for discovering subdomains( ip , cdn and so on)

Bash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

Offensive Security recon tool