Tools

hash3lizer/subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

a3h1nt/dnsrr

Bash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.

micro-joan/dnsrecon-gui

Graphical DNS enumeration tool for Kali Linux that scans standard records (A, NS, SOA, MX) and visualizes results in mind maps for reconnaissance and…

rapiddns/rapiddns-cli

A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform DNS…

whitelisthackers/wosind

An OSINT tool for collecting public information.

wattocyber/vegadns

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

jenderal92/massive-subdomain-enumerator

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

typeerror/domained

Multi Tool Subdomain Enumeration

aeondave/tilt

Terminal Ip Lookup Tool

pikpikcu/nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs

evilsocket/xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

sandialabs/dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

m0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

guelfoweb/knockpy

Knock Subdomain Scan

infosec-au/altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

therook/subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

trickest/resolvers

The most exhaustive list of reliable DNS resolvers.