In-depth Attack Surface Mapping and Asset Discovery

Dedicated to JavaScript and its awesome community since 2015

Fully automated offensive security framework for reconnaissance and vulnerability scanning

OneForAll是一款功能强大的子域收集工具

In-depth Attack Surface Mapping and Asset Discovery

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

Subdomain Takeover tool written in Go

A DNS reconnaissance tool for locating non-contiguous IP space.

Lion is a fast HTTP router for building modern scalable modular REST APIs in Go

无状态子域名爆破工具

🔓Subdomain enumeration and information gathering tool

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

A new generation of tool for discovering subdomains( ip , cdn and so on)

A Domain Name & Email Address Collection Tool

A Powerful Subdomain Takeover Tool

A Burp Suite Extender that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

JavaScript API to work easily with complex domain names, subdomains and well-known TLDs.

Handbook of information collection for penetration testing and src

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

Python 3.5+ DNS asynchronous brute force utility

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Extract subdomains from SSL certificates in HTTPS sites.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

[DEPRECATED] Library for extraction of domain parts e.g. TLD. Domain parser that uses Public Suffix List

Grab your own sweet-looking '.is-a.dev' subdomain

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

A MongoDB importer and API for Project Sonars DNS datasets

An example of multi-domain/subdomain app in Laravel.