Tools

giovanifss/dumb

Dumain Bruteforcer - a fast and flexible domain bruteforcer

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

datasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

guelfoweb/knockpy

Knock Subdomain Scan

edoardottt/scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

projectdiscovery/shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…

boy-hack/ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

yagamiilight/cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全…

viralmaniar/bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial…

dheerajmadhukar/karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

franccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

projectdiscovery/alterx

Fast and customizable subdomain wordlist generator using DSL

nhoya/gosint

OSINT Swiss Army Knife

blark/aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

cihanmehmet/sub.sh

Multiprocessing(Parallel)Subdomain Detect Script

flipkart-incubator/rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

bountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io