Tools

findomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

projectdiscovery/urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

stanislav-web/opendoor

OWASP Web Recon & Directory Discovery Platform

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

thewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

capture0x/web-scanner

Python-based web domain scanner integrating Sublist3r, Dirble, Nmap, and WhatWeb for subdomain discovery, directory enumeration, network scanning,…

evyatarmeged/raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

joshkar/x-recon

A utility for detecting webpage inputs and conducting XSS scans.

yogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

netspi/ateam

Python reconnaissance tool for discovering Azure services and attributing tenant ownership via DNS validation, multi-service probing, and response…

bandit-haxunit/haxunit

Automated web domain reconnaissance and security assessment tool integrating subdomain enumeration, port scanning, vulnerability scanning, and…

gmh5225/aisa-scanner

AISA-Scanner is an AI-powered autonomous vulnerability scanner that maps CVEs to metasploit exploits, MITRE, CEH, and SANS, delivering intelligent,…

nocomp/cve-2025-29927-scanner

python script for evaluate if you are vulnerable or not to next.js CVE-2025-29927

bitthebyte/monitorizer

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

s0md3v/subgpt

Find subdomains with GPT, for free

skavngr/rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.

bywalks/darkangel

Automated white-hat vulnerability scanner that monitors HackerOne and Bugcrowd assets, performs subdomain enumeration, crawling, fingerprinting, and…

arpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]