puredns
d3mondev/purednsHigh-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.
dns-analysisdns-fuzzingdns-subdomain-enumeration+3
2.2k
d3mondev/purednsHigh-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.
mschwager/fierceA DNS reconnaissance tool for locating non-contiguous IP space.
stanislav-web/opendoorOWASP Web Recon & Directory Discovery Platform
projectdiscovery/shufflednsMassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…
m3n0sd0n4ld/goofuzzBash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…
boy-hack/ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
gal-nagli/shockwave-ossCurated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…
alephnullsk/dnsgenGenerates domain name permutations for subdomain enumeration and recon, supporting custom wordlists, cloud patterns, and fast mode for security…
0xdekster/reconnoteWeb Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…
ya551n3/bug-bounty-wordlistsCurated collection of wordlists for bug bounty hunting, covering directories, subdomains, parameters, usernames, passwords, and web fuzzing payloads.
bountystrike/bountystrike-shPoor (rich?) man's bug bounty pipeline https://dubell.io
bandit-haxunit/haxunitAutomated web domain reconnaissance and security assessment tool integrating subdomain enumeration, port scanning, vulnerability scanning, and…
pwnwriter/kanha🦚 A web-app pentesting suite written in rust .
dirsoooo/reconRecon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix…
storenth/lazyreconWicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.
olizimmermann/s3dnsPassive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…
bitthebyte/eagleMultithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities
who0xac/dnsintDNSint - A comprehensive DNS reconnaissance and OSINT toolkit for domain intelligence gathering and security analysis.