
xsubfind3r
Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)

Torito React2Shell Scanner & Exploit Tool (CVE-2025-55182 / 66478)

Automated exploitation framework for CVE-2025-55182 (Next.js RCE) with subdomain enumeration, vulnerability scanning, payload generation, and…

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

Python API wrapper and command-line client for the tools hosted on spyse.com.

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…

Get subdomain list and check whether they are active or not by each response code. Using API by c99.nl

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

Fast passive subdomain enumeration tool.

Nuclei Templates Collection

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

InfoHound is an OSINT to extract a large amount of data given a web domain name.

NetLogic is an advanced network analysis and cybersecurity toolkit for traffic inspection, packet analysis, and threat detection