Archived
tilt
aeondave/tiltPassive IP and host reconnaissance tool for DNS lookups, reverse IP probing, WHOIS queries, and subdomain enumeration from the terminal.
dns-analysisdns-subdomain-enumerationinformation-gathering+4
aeondave/tiltPassive IP and host reconnaissance tool for DNS lookups, reverse IP probing, WHOIS queries, and subdomain enumeration from the terminal.
hakluke/hakrevdnsSmall, fast tool for performing reverse DNS lookups en masse.
ggusoft/inforfinderReverse IP domain lookup and web reconnaissance tool that enumerates domains hosted on an IP, detects CMS versions, web server details, and…
spyboy-productions/cloakquest3rOpen-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
fwaeytens/dnsenumMultithreaded DNS enumeration tool that discovers A, NS, MX records, performs AXFR queries, brute-forces subdomains, scrapes Google for extra names,…
a3h1nt/dnsrrBash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.
oj/gobusterDirectory/File, DNS and VHost busting tool written in Go
pptx704/domainimA fast and comprehensive tool for organizational network scanning
spiderlabs/hosthunterOSINT-driven hostname discovery tool that maps IP addresses to virtual hostnames using SSL certificates, HTTP headers, and service banners for attack…
franccesco/getaltnameExtract subdomains from SSL certificates in HTTPS sites.
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
projectdiscovery/subfinderFast passive subdomain enumeration tool.
aboul3la/sublist3rFast subdomains enumeration tool for penetration testers
six2dez/reconftwAutomated reconnaissance tool that performs subdomain enumeration, vulnerability scanning, OSINT, port scanning, and web analysis to map attack…
darkoperator/dnsreconDNS enumeration tool for querying record types, performing zone transfers, brute-forcing subdomains, and resolving PTR records across IP ranges…
guelfoweb/knockpyAsync subdomain enumeration tool combining passive reconnaissance and bruteforce with DNS resolution, HTTP/TLS validation, wildcard detection, and…
j3ssie/metabigorOSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…
codingo/reconnoitreA security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…