Tools

gfek/lepus

Subdomain finder

k3ystr0k3r/dnsplit

Fast subdomain enumeration tool written in python.

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

xcapri/subdosec

Fast, accurate subdomain takeover scanner with zero false positives. Detects vulnerable subdomains, collects metadata (IP, CNAME, title, status…

yogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

projectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

projectdiscovery/shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…

thebinitghimire/nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

projectdiscovery/subfinder-action

Fast and passive subdomain enumeration.

projectdiscovery/dnsx-action

Fast and multi-purpose DNS toolkit allow to run multiple DNS queries.

elmasy-com/columbus-server

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

giovanifss/dumb

Dumain Bruteforcer - a fast and flexible domain bruteforcer

vmfunc/sif

the blazing-fast pentesting suite.

wattocyber/bug-bounty-library

Curated bug-bounty methodology library with runbooks, recon/fuzz playbooks, checklists, and CLI helpers for target scoping, cert enumeration, and…

blacklanternsecurity/bbot

The recursive internet scanner for hackers. 🧡

projectdiscovery/alterx

Fast and customizable subdomain wordlist generator using DSL

umutcamliyurt/subhunter

Fast subdomain takeover scanner that checks DNS CNAME records against known fingerprints to detect vulnerable subdomains. Built in Go with…