In-depth attack surface mapping and asset discovery

OneForAll是一款功能强大的子域收集工具

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Dedicated to JavaScript and its awesome community since 2015

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Grab your own sweet-looking '.is-a.dev' subdomain.

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!

无状态子域名爆破工具

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Subdomain Takeover tool written in Go

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

A DNS reconnaissance tool for locating non-contiguous IP space.

Free subdomains for personal sites, open-source projects, and more.

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

OSINT tools and more but without API key

Subdomain enumeration and information gathering tool

Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp

A Domain Name & Email Address Collection Tool