The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

tmux meg nmap bug-bounty nuclei masscan axiom massdns subfinder httprobe httpx gau hacking-vps gowitness ffuf shuffledns dnsx dnsgen

• Updated Sep 30, 2024
• Shell

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

bash framework scanner enumeration pentesting bugbounty kali-linux kali bugcrowd hackerone reconnaissance subdomain-scanner subfinder subdomain-enumeration sublist3r httprobe collected-subdomains subdomain-finder recon-subdomain

• Updated Jun 27, 2024
• Shell

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

security wordlist meg penetration-testing fuzzing recon nuclei bugbounty pentest wayback-machine appsec hacktoberfest dirsearch security-tools dirbuster axiom redteaming redteam subfinder ffuf

• Updated Apr 3, 2026

字幕查找器

finder subtitles shooter subtitle subfinder subtitle-finder

• Updated Feb 14, 2024
• Python

The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbitrary binaries and scripts using any of our nine supported cloud providers!

nmap bug-bounty pentesting nuclei bugbounty masscan axiom vulnerability-scanner subfinder amass gowitness ffuf s3scanner puredns distributed-scanning hacking-vpc

• Updated Sep 19, 2026
• Shell

🚀Komo, a comprehensive asset collection and vulnerability scanning tool. Komo 一个综合资产收集和漏洞扫描工具，集成了20余款工具，通过多种方式对子域进行获取，收集域名邮箱，进行存活探测，域名指纹识别，域名反查ip，ip端口扫描，web服务链接爬取并发送给xray，对web服务进行POC漏洞扫描，对主机进行主机漏洞扫描。

osint hacking rad poc infosec pentesting nuclei bugbounty xray information-gathering subfinder gospider amass ctfr oneforall httpx crawlergo ksubdomain naabu emailall

• Updated Jan 19, 2024
• Python

一键调用subfinder+ksubdomain+httpx 强强联合 从域名发现-->域名验证-->获取域名标题、状态码以及响应大小 最后保存结果,简化重复操作命令

information-retrieval subdomain pentest-tool subfinder subdomain-finder httpx ksubdomain

• Updated Feb 17, 2022
• Shell

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

bugbounty bugcrowd hackerone subfinder subdomain-enumeration

• Updated Jul 13, 2024
• Python

automated web assets enumeration & scanning [DEPRECATED]

zulip nuclei axiom subfinder aquatone jaeles kenzer freaker freakerdb s3hunter favinizer domlock certex ffuf shuffledns arpsyndicate

• Updated Mar 7, 2023
• Python

Automated bug bounty & recon framework — wraps Subfinder, Naabu, Httpx, Nuclei, Nmap, CVEMap, Gowitness, Katana & more behind a unified web UI

golang automation osint web-ui nmap penetration-testing bug-bounty recon nuclei security-tools vulnerability-scanner subfinder

• Updated Mar 26, 2026
• Go

smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter

tools hacking penetration-testing recon bugbounty pentest sqlmap pentest-scripts hackerone reconnaissance massdns redteam subfinder eyewitness httprobe httpx shuffledns dnsgen bug-bounty-automation feroxbuster

• Updated Apr 3, 2024
• Shell

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

php security rce php-security cve vulnerability-scanner subfinder crtsh cve-2026-109618 cve-2026-109619

• Updated Oct 21, 2026
• Python

A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.

dns subdomain enumeration penetration-testing bug-bounty pentesting bugbounty subdomains reverse-dns bash-scripting passive-dns reconnaissance subfinder amass asset-discovery subdomains-enumeration reverse-dns-lookup findomain hakrevdns xsubfind3r

• Updated Aug 2, 2022
• Shell

A docker image which will enumerate, sort, unique and resolve the results of various subdomains enumeration tools.

docker docker-image subdomains reconnaissance massdns subfinder amass subdomain-enumeration sublist3r oneforall assetfinder

• Updated Jul 19, 2024
• Shell

Advanced reconnaissance framework for bug bounty hunters - Automate subdomain enumeration, vulnerability scanning, and security reconnaissance with 30+ integrated tools.

zsh cybersecurity bug-bounty pentesting recon nuclei pentest kali-linux security-tools vulnerability-scanning reconnaissance subfinder amass subdomain-enumeration automated-scanning reconnaissance-tool

• Updated Apr 9, 2026
• Shell

Tool to automate recon

automation recon reconnaissance subfinder httprobe waybackurls cspshivam

• Updated Dec 28, 2021
• Shell

Free XP on bug bounty, vulnerability scanning by wrapping well maintained tools, to perform automated tests. Alongside AI agents for binary analysis, which includes connecting to external Android or emulator to perform dynamic analysis.

docker golang automation osint web-ui penetration-testing bug-bounty recon nuclei vulnerability-scanners vulnerability-scanner subfinder

• Updated May 21, 2026
• HTML

Automated way to extract juicy info with subfinder and waybackurls

bug-bounty bugbounty grep wayback-machine subfinder subdomain-enumeration waybackurls bug-bounty-tools

• Updated Aug 24, 2025
• Go

Inspect the stack behind any site.

osint self-hosted nuclei security-tools subfinder website-scanner httpx asset-inventory technology-detection site-intelligence

• Updated Nov 9, 2026
• TypeScript

subBruter is a tool designed to efficiently probe for alive subdomins from a provided wordlist.

bruteforce subdomain-scanner subfinder subdomain-enumeration

• Updated Jan 29, 2024
• Python