Tools

hash3lizer/subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

fricciolosa-red-team/evildork

Automated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

nmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

hueristiq/xsubfind3r

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

clouedoc/autosqli

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

projectdiscovery/urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

silverpoision/rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

y0oshi/project-eyes-on

Project Eyes On is a high-speed, multi-threaded surveillance tool by Y0oshi (@rde0) for locating open IP cameras worldwide. Unifies Google Dorking…

caio-ishikawa/netscout

OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

oj/gobuster

Directory/File, DNS and VHost busting tool written in Go

pptx704/domainim

A fast and comprehensive tool for organizational network scanning

spiderlabs/hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

franccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

aboul3la/sublist3r

Fast subdomains enumeration tool for penetration testers

hakluke/hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.