In-depth attack surface mapping and asset discovery

go dns golang osint owasp subdomain enumeration recon maltego network-security information-gathering osint-reconnaissance attack-surfaces

• Updated Nov 12, 2026
• Go

Grab your own sweet-looking '.is-a.dev' subdomain.

dns github-pages website oss foss domain dev cloudflare subdomain developer free free-domain vercel free-for-developers free-for-dev

• Updated Nov 11, 2026
• JavaScript

OneForAll是一款功能强大的子域收集工具

python osint subdomain content-security-policy recon bugbounty information-gathering pentest-tool zone-transfers subdomain-scanner nsec subdomain-takeover subdomain-enumeration subdomain-bruteforcing subdomain-crawler subdomain-collection subdomian-find oneforall altname crossdomainxml

• Updated Nov 2, 2026
• Python

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

dns security osint scanner hacking subdomain penetration-testing bug-bounty pentesting recon nuclei vulnerabilities bugbounty pentest security-tools reconnaissance pentest-tool subdomain-enumeration bugbounty-tool

• Updated Nov 2, 2026
• Shell

Dedicated to JavaScript and its awesome community since 2015

javascript dns community github-pages domain subdomain free custom-domains

• Updated Nov 11, 2026
• JavaScript

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

security list subdomain infosec bugbounty subdomain-takeovers

• Updated Feb 8, 2025
• Python

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!

golang web-server server proxy http-proxy reverse-proxy tcp-proxy subdomain websocket-proxy redirect homelab virtual-directory port-forward cluster-gateway zoraxy stream-proxy

• Updated Nov 4, 2026
• HTML

Knock Subdomain Scan

security subdomain penetration-testing bugbounty subdomain-scanner subdomain-enumeration knockpy

• Updated Feb 19, 2026
• Python

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

dns subdomain dns-client dns-resolution dns-bruteforcer dns-resolver dns-lookup reconnaissance subbrute massdns bulk-dns

• Updated Sep 27, 2026
• C

Free subdomains for personal sites, open-source projects, and more.

dns github-pages website domain domains cloudflare subdomain free subdomains free-domain free-for-developers free-for-dev free-domains

• Updated Jul 31, 2026
• JavaScript

无状态子域名爆破工具

subdomain enumeration pentesting hacking-tool security-tools

• Updated Mar 16, 2022
• Go

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

dns hacking subdomain recon bugbounty dns-resolution dns-bruteforcer dns-resolver dns-lookup massdns subdomain-bruteforcing

• Updated Feb 23, 2026
• Go

DNS Takeover tool written in Go

go golang security subdomain bug-bounty infosec pentesting bugbounty takeover hostile subdomain-takeover

• Updated Oct 21, 2026
• Go

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dns database spring-boot dictionary fingerprint wifi password bruteforce subdomain rce fuzzing pentesting regex-pattern bugbounty pentest payloads iot-security websecurity bugbountytips bughunting-methodology

• Updated Jul 21, 2023
• Shell

OSINT power without API key hassle

security osint subdomain bug-bounty infosec pentesting asn recon bugbounty ip-range subdomains security-tools reconnaissance bugbountytips ip-osint bugbounty-tools

• Updated Aug 8, 2026
• Go

A DNS reconnaissance tool for locating non-contiguous IP space.

dns domain subdomain reconnaissance name-server zone-transfers discovered-domains fierce

• Updated Aug 28, 2024
• Python

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

osint hacking discovery subdomain penetration-testing fuzzing infosec pentesting recon bugbounty bash-script red-team google-dorks reconnaissance information-disclosure

• Updated Dec 21, 2025
• Shell

Subdomain enumeration tool

network subdomain information-security subdomains kali network-security information-gathering dnsdumpster anubis hackertarget netcraft anubis-db

• Updated Oct 26, 2026
• Python

K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

mysql security exploit ftp scanner ipc smb oracle hacking password subdomain wmi poc mssql pentest crack portscan cobalt-strike getshell netscan

• Updated Dec 25, 2019
• Python

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

subdomain bugbounty hacker-tools

• Updated Mar 27, 2026
• Go