Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/bit4woo/teemo
A Domain Name & Email Address Collection Tool
collection domain domain-api domain-discovery domain-name email email-collector information information-collection related-domain search-engine similar-domain sub-domain-enumeration subdomain subdomains teemo
Last synced: 06 Jul 2024
https://github.com/OWASP/Amass
In-depth attack surface mapping and asset discovery
attack-surfaces dns enumeration go golang information-gathering maltego network-security osint osint-reconnaissance owasp recon subdomain
Last synced: 26 Jun 2024
https://github.com/ARPSyndicate/puncia
The Panthera(P.)uncia of Cybersecurity - Official CLI utility for Subdomain Center & Exploit Observer.
arpsyndicate exploit subdomain
Last synced: 26 Jun 2024
https://github.com/k8gege/Aggressor
Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp
aggressor-scripts brute-force cobalt-strike k8cscan ladon osscan portscan scanner subdomain webscan
Last synced: 26 Jun 2024
https://github.com/boy-hack/ksubdomain
Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
bugbounty hacker-tools subdomain
Last synced: 26 Jun 2024
https://github.com/trickest/dsieve
Filter and enrich a list of subdomains by level
bugbounty enumeration infosec infosectools penetration-testing penetration-testing-tools pentesting pentesting-tools security subdomain subdomain-enumeration subdomain-finder subdomain-scanner
Last synced: 25 Jun 2024
https://github.com/Josue87/gotator
Gotator is a tool to generate DNS wordlists through permutations.
bug-bounty bugbounty reconnaissance security-tools subdomain
Last synced: 25 Jun 2024
https://github.com/r3curs1v3-pr0xy/sub404
A python tool to check subdomain takeover vulnerability
bug-bounty bugbounty bugbounty-tool pentesting sub404 subdomain subdomain-takeover takeover-subdomain vulnerability-scanner
Last synced: 25 Jun 2024
https://github.com/projectdiscovery/dnsprobe
DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.
bugbounty dns dns-utils dnsprobe retryabledns security subdomain
Last synced: 25 Jun 2024
https://github.com/j3ssie/metabigor
OSINT tools and more but without API key
asn bug-bounty bugbounty bugbounty-tools bugbountytips infosec ip-osint ip-range osint pentesting recon reconnaissance security security-tools subdomain subdomains
Last synced: 14 Jun 2024
https://github.com/v4d1/Dome
Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.
bugbounty enumeration hacking-tool osint penetration-testing pentesting recon reconnaissance redteam redteam-tools subdomain subdomain-brute subdomain-enumeration subdomain-finder subdomain-scanner
Last synced: 14 Jun 2024
https://github.com/dhn/udon
A simple tool that helps to find assets/domains based on the Google Analytics ID.
bugbounty domain osint recon reconnaissance subdomain
Last synced: 14 Jun 2024
https://github.com/Ice3man543/SubOver
A Powerful Subdomain Takeover Tool
bug-bounty bugbounty hostile hostile-subdomain-takeover pentesting subdomain subdomain-takeover subdomains takeover takeover-subdomain
Last synced: 14 Jun 2024
https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration
This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
bugcrowd censys certificate-transparency crtsh dns dnssec domains enumeration levelup nsec nsec3 osint pentesting subdomain
Last synced: 14 Jun 2024
https://github.com/pwnesia/dnstake
DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover
dns go golang nameserver subdomain takeover vulnerability
Last synced: 11 Jun 2024
https://github.com/is-a-dev/register
Grab your own sweet-looking '.is-a.dev' subdomain.
dev developer foss free free-for-dev free-for-developers github-pages subdomain website
Last synced: 11 Jun 2024
https://github.com/aakhilv/runs-on.tech
Free 'runs-on.tech' subdomains for personal sites, open-source projects, and more.
cloudflare cname custom custom-domain custom-subdomain dns domain free free-domain free-subdomain github netlify pages repl site subdomain tech vercel website
Last synced: 11 Jun 2024
https://github.com/shmilylty/OneForAll
OneForAll是一款功能强大的子域收集工具
altname bugbounty content-security-policy crossdomainxml information-gathering nsec oneforall osint pentest-tool python recon subdomain subdomain-bruteforcing subdomain-collection subdomain-crawler subdomain-enumeration subdomain-scanner subdomain-takeover subdomian-find zone-transfers
Last synced: 08 Jun 2024
https://github.com/foozzi/discoshell
a simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others
alterx amass discoshell discovery massdns puredns subdomain subfinder wildcard
Last synced: 08 Jun 2024
https://github.com/s0md3v/SubGPT
Find subdomains with GPT, for free
recon scanner scanning subdomain
Last synced: 08 Jun 2024
https://github.com/d3mondev/puredns
Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.
bugbounty dns dns-bruteforcer dns-lookup dns-resolution dns-resolver hacking massdns recon subdomain subdomain-bruteforcing
Last synced: 07 Jun 2024
https://github.com/Fadavvi/Sub-Drill
A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.
bug-bounty bugbounty recon reconnaissance red-team red-teaming subdomain subdomain-brute subdomain-bruteforcing subdomain-enumeration subdomain-finder web-recon web-reconnaissance
Last synced: 06 Jun 2024
https://github.com/rix4uni/SubDog
subdog is a subdomain enumeration tools, this tool collect number of different sources to create a list of root subdomains
recon reconnaissance subdomain subdomain-enumeration wayback-machine
Last synced: 05 Jun 2024
https://github.com/it-jhack/subsort
Subsort removes grep redundancies for subdomains in a list.
bugbounty dns fdns osint project-sonar python reconnaissance subdomain subdomain-sorter subdomain-takeover subdomains subdomains-discovery subdomains-enumeration
Last synced: 05 Jun 2024
https://github.com/HJ23/Raptor
Passive subdomain enumeration tool with http-probe.
bug-bounties bug-bountry bug-hunter bugbounty cybersecurity enumeration hacking http-probe osint osint-python osint-tool probe probe-requests python python3 subdomain subdomain-enumeration subdomain-scanner subdomains subdomains-monitoring
Last synced: 05 Jun 2024
https://github.com/mrlew1s/SubdomainTakeover
Small python or powershell script to look for potential subdomain takeover vulnerabilities via vulnerable Alias.
bugbounty offensive offensive-security pentest-scripts pentest-tool powershell python3 security security-tools subdomain subdomain-takeover takeover takeover-subdomain vulnerabilities vulnerability vulnerability-detection vulnerability-scanners
Last synced: 05 Jun 2024
https://github.com/CnHack3r/Awesome-hacking-tools
黑客工具收集仓库，包含主流和非主流漏洞利用工具，subdomain、备案查询工具、CVE仓库、Hacking Tools、Exploits、免杀工具、weblogic漏洞利用工具、Red Team、Cobalt Strike、C免杀、bypassAV、内网渗透工具、漏洞利用、工具插件、burpsuite插件；
burpsuite-extension bypassav cobalt-strike cve subdomain weblogic-exploit
Last synced: 05 Jun 2024
https://github.com/thom4parisot/tld.js
JavaScript API to work easily with complex domain names, subdomains and well-known TLDs.
browser hostname javascript nodejs public-suffix-list subdomain tld tldextract uri validation-library
Last synced: 03 Jun 2024
https://github.com/six2dez/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
bug-bounty bugbounty dns fuzzing hacking nuclei osint penetration-testing pentest pentest-tool pentesting recon reconnaissance scanner security security-tools subdomain vulnerabilities
Last synced: 02 Jun 2024
https://github.com/knownsec/ksubdomain
无状态子域名爆破工具
enumeration hacking-tool pentesting security-tools subdomain
Last synced: 31 May 2024
https://github.com/haccer/subjack
Subdomain Takeover tool written in Go
bug-bounty bugbounty go golang hostile infosec pentesting security subdomain subdomain-takeover takeover
Last synced: 27 May 2024
https://github.com/robotshell/magicRecon
MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.
bash-script bug bugbounty bugbounty-tool bugbountytricks infosec nuclei scanner sql-injection subdomain subdomains-enumeration tool vulnerability-scanners xss-vulnerability
Last synced: 26 May 2024
https://github.com/nmmapper/dnsdumpster
A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups
detection dns-fingerprinting dns-reconnaissance dnsdumpster network nmmapper reconnaissance scanner scanners subdomain subdomain-finder web-application-firewall
Last synced: 26 May 2024
https://github.com/ExpLangcn/FuYao-Go
自动化进行目标资产探测和安全漏洞扫描｜适用于赏金活动、SRC活动、大规模使用、大范围使用|通过使用被动在线资源来发现网站的有效子域｜通过强大且灵活的模板，模拟各种安全漏洞检查！Automate target asset detection and security vulnerability scanning | Suitable for bounty campaigns, SRC campaigns, mass usage, mass usage | Discover valid subdomains of websites by using passive online resources | Simulate various Security Vulnerability Check
poc scanner subdomain vulnerability-scanners
Last synced: 19 May 2024
https://github.com/ph4ntonn/Behold3r
👻Behold3r -- 收集指定网站的子域名，并可监控指定网站的子域名更新情况，发送变更报告至指定邮箱
cybersecurity information pentest-tool pentesting python redis redteam security-tools subdomain subdomain-scanner
Last synced: 12 May 2024
https://github.com/MPaandeey/dlevel
A tool get level of subdomain from 1....n
bugbounty infosec subdomain subdomainlist subdomains subdomains-enumeration tool tools
Last synced: 12 May 2024
https://github.com/lord3ver/gctsubdomains
Discover subdomains in Certificate Transparency logs using Google's Transparency Report
bugbounty go osint penetration-testing pentest recon subdomain subdomain-enumeration
Last synced: 12 May 2024
https://github.com/js-org/js.org
Dedicated to JavaScript and its awesome community since 2015
community custom-domains dns domain free github-pages javascript subdomain
Last synced: 10 May 2024
https://github.com/Qftm/Information_Collection_Handbook
Handbook of information collection for penetration testing and src
application assets bypass cdn dns domain exploit-database fingerprint-identification google-hacking information ip pentesting ports sensitive-info social-engineering src subdomain tools
Last synced: 10 May 2024
https://github.com/jonluca/Anubis
Subdomain enumeration and information gathering tool
anubis anubis-db dnsdumpster hackertarget information-gathering information-security kali netcraft network network-security subdomain subdomains
Last synced: 09 May 2024
https://github.com/owasp-amass/amass
In-depth attack surface mapping and asset discovery
attack-surfaces dns enumeration go golang information-gathering maltego network-security osint osint-reconnaissance owasp recon subdomain
Last synced: 07 May 2024
https://github.com/p7e4/dnsearch
using rapid7 open dns data search subdomain and reverse ip
Last synced: 07 May 2024
https://github.com/trickest/mksub
Generate tens of thousands of subdomain combinations in a matter of seconds
bugbounty bugbountytips enumeration infosec infosectools penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security security-tools subdomain subdomain-enumeration subdomain-finder subdomain-scanner
Last synced: 07 May 2024
https://github.com/Cgboal/SonarSearch
A rapid API for the Project Sonar dataset
bugbounty dns enumeration osint osint-tool penetration-testing penetration-testing-tools rapid7 sonar-api subdomain subdomain-enumeration
Last synced: 03 May 2024
https://github.com/jsonmaur/namor
A subdomain-safe name generator
dictionary elixir hosting name-generator subdomain
Last synced: 01 May 2024
https://github.com/z3dc0ps/0x0p1n3r
0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover
bugbounty enumeration enumerations subdomain subdomain-enumeration subdomain-scanner vulnerability
Last synced: 01 May 2024
https://github.com/inspiringz/nim-dnp
Nim 版 domainNamePredictor：一个简单的现代化公司域名使用规律预测及生成工具
domain-name-generator domain-name-predictor nim-lang subdomain
Last synced: 01 May 2024
https://github.com/jimen0/fdns
Concurrent Rapid7 FDNS dataset parser
dataset enumeration fdns go golang recon subdomain
Last synced: 01 May 2024
https://github.com/si9int/Acamar
A Python3 based single-file subdomain enumerator
bugbounty pentesting subdomain
Last synced: 27 Apr 2024
https://github.com/JastinXyz/withcoding.me
Free subdomain for everyone.
cname cname-subdomain free free-subdomain subdomain
Last synced: 27 Apr 2024
https://github.com/franccesco/getaltname
Extract subdomains from SSL certificates in HTTPS sites.
certificates discovery dns extract-subdomains https information-retrieval infosec pentest pentest-scripts pentest-tool pentesting ssl ssl-certificate ssl-certificates subdomain tool
Last synced: 26 Apr 2024
https://github.com/starnightcyber/subDomains
互联网公司子域名收集
company-domains domain-collection domains subdomain subdomainlist
Last synced: 24 Apr 2024
https://github.com/3nock/OTE
OSINT Template Engine
attack-surface cplusplus cybersecurity footprinting gui hacking information-gathering infosec intelligence-gathering osint qt qt5 recon reconnaissance security-tools subdomain
Last synced: 19 Apr 2024
https://github.com/sethsec/celerystalk
An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
celery enumeration gobuster nessus nikto nmap scanning screenshot spider subdomain virtual-hosts vulnerability-assessment vulnerability-scanners
Last synced: 18 Apr 2024
https://github.com/We5ter/GSDF
A domain searcher named GoogleSSLdomainFinder - 基于谷歌SSL透明证书的子域名查询工具
Last synced: 15 Apr 2024
https://github.com/insightglacier/Dictionary-Of-Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
bruteforce bugbounty bugbountytips bughunting-methodology database dictionary dns fingerprint fuzzing iot-security password payloads pentest pentesting rce regex-pattern spring-boot subdomain websecurity wifi
Last synced: 12 Apr 2024
https://github.com/RASSec/A_Scan_Framework
Network Security Vulnerability Manage
domain manager subdomain tasklist
Last synced: 12 Apr 2024
https://github.com/monkeym4ster/find-subdomains
Abusing Certificate Transparency logs for getting HTTPS websites subdomains. （通过 HTTPS 证书透明日志，以 **非字典爆破** 的方式获取网站子域名。）
axfr axfrdns subdomain subdomains
Last synced: 12 Apr 2024
https://github.com/radenvodka/massc
Subdomain Scanner Tools with word-lists
subdomain subdomain-brute subdomain-enumeration subdomain-scanner
Last synced: 12 Apr 2024
https://github.com/gwen001/vhost-brute
A PHP tool to brute force vhost configured on a server.
bugbounty pentesting php security-tools subdomain vhost
Last synced: 09 Apr 2024
https://github.com/m3n0sd0n4ld/GooFuzz
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
bash-script bugbounty discovery fuzzing google-dorks hacking information-disclosure infosec osint penetration-testing pentesting recon reconnaissance red-team subdomain
Last synced: 09 Apr 2024
https://github.com/bit4woo/domain_hunter
A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件
burp-extensions burp-plugin burpsuite-extender certificate certification domain-discovery domain-hunter domains https-certificate organization-domain related-domain similar-domain sitemap spider subdomain subject-alternative-name subject-name subjectaltname
Last synced: 07 Apr 2024
https://github.com/mschwager/fierce
A DNS reconnaissance tool for locating non-contiguous IP space.
discovered-domains dns domain fierce name-server reconnaissance subdomain zone-transfers
Last synced: 05 Apr 2024
https://github.com/edoverflow/can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
bugbounty infosec list security subdomain subdomain-takeovers
Last synced: 05 Apr 2024
https://github.com/layershifter/TLDExtract
[DEPRECATED] Library for extraction of domain parts e.g. TLD. Domain parser that uses Public Suffix List
domain-parser php php-library public-suffix-list subdomain tld tldextract
Last synced: 03 Apr 2024
https://github.com/PushpenderIndia/subdover
Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3
cname-check hostile-subdomain-takeover largest-fingerprint-collection multithreaded pushpenderindia python3 subdomain subdomain-enumeration subdomain-takeover subdover vulnerability-scanner
Last synced: 02 Apr 2024
https://github.com/ScathachGrip/merahputih.moe
Are you weeb developer looking for free webspace to host your project? Get free subdomain merahputih.moe UwU
anime-girls cloudflare custom-domains dns indonesia subdomain
Last synced: 02 Apr 2024
https://github.com/is-probably-gay/is-probably-gay
Self-service is-probably.gay subdomain registration
domain domains free-domain free-domains free-subdomain gay subdomain subdomains
Last synced: 02 Apr 2024
https://github.com/blark/aiodnsbrute
Python 3.5+ DNS asynchronous brute force utility
async brute-force bruteforcing dns enumeration osint osint-resources pentesting python recon red-team resolver security security-tools subdomain subdomain-takeover subdomin-enumeration
Last synced: 28 Mar 2024
https://github.com/blechschmidt/massdns
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
bulk-dns dns dns-bruteforcer dns-client dns-lookup dns-resolution dns-resolver massdns reconnaissance subbrute subdomain
Last synced: 28 Mar 2024
https://github.com/anirudhbiyani/findmytakeover
find dangling domains in a multi cloud environment
aws azure cloud dns gcp security security-tools subdomain subdomain-takeover
Last synced: 26 Mar 2024
https://github.com/laravel-validation-rules/subdomain
Validate a subdomain for your saas application
laravel php subdomain validation
Last synced: 24 Mar 2024
https://github.com/thenurhabib/subnum
Crawl all subdomains and check for subdomain takeover vulnerability.
hacking-tool linux subdomain subdomain-enumeration subdomain-scanner subdomain-takeover termux
Last synced: 17 Mar 2024
https://github.com/tobychui/zoraxy
General purpose (reverse) proxy and forwarding tool for networking noobs. Now written in Go!
arozos bridge cluster-gateway golang homelab http-proxy port-forward proxy redirect reverse-proxy server subdomain tcp-proxy virtual-directory websocket-proxy zoraxy
Last synced: 17 Mar 2024
https://github.com/open-domains/register
Free subdomains for personal sites, open-source projects, and more.
cloudflare dns domain domains free free-domain free-domains free-for-dev free-for-developers github-pages subdomain subdomains website
Last synced: 17 Mar 2024
https://github.com/free-domains/register
Free subdomains for personal sites, open-source projects, and more.
cloudflare developer-freebie dns domain domains foss free free-domain free-domains free-for-dev free-for-developers free-to-use ssl subdomain subdomains
Last synced: 17 Mar 2024
https://github.com/proj-at/subdomains
🌎 Get your own proj.sbs subdomains, free for open-source developers. (by Proj.at)
developer developer-tools free-domain github-pages subdomain website
Last synced: 16 Mar 2024
https://github.com/tarampampam/free-domains
🌐 Grab your own subdomain (for personal sites, open-source projects, and more) for free
cloudflare cname custom-domain custom-subdomain dns domain free free-domain free-subdomain github github-pages pages site subdomain
Last synced: 16 Mar 2024
https://github.com/k8gege/k8cscan
K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动
cobalt-strike crack exploit ftp getshell hacking ipc mssql mysql netscan oracle password pentest poc portscan scanner security smb subdomain wmi
Last synced: 16 Mar 2024