subdomain-discovery

A script for credentials-based attack surface enumeration and general reconnaissance of massive external networks

A permutation generation tool written in golang

A command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

Subdomain enumeration & reconnaissance framework for bug bounty and pentesting — 20+ tools & APIs, HTTP fingerprinting, port scanning, and subdomain takeover detection in one CLI.

High-performance network diagnostics & discovery platform. Features DNS-over-HTTPS (DoH), WHOIS/RDAP, GeoIP, subdomain discovery, and port scanning with live WebSocket streaming.

An subdomain enumerator for web URLs using the power of Goroutines.

Subdisco finder is a tool designed in java and uses Open-source intelligence (OSINT) in order to enumerate subdomains of websites

Generate SStables From CSV. The Data Conversion Workhorse behind https://ip.thc.org

Gain the edge in hidden subdomain discovery with Subtracker.

Enhanced Directory Listing Detection Using Wayback Machine. Modified from the FR13ND0x7F original by Kaotick Jay. This improved version overccomes flaws and limitations in the original by adding retry logic, and error handling. Added exponential backoff with jitter between retries to reduce request bursts. Improved error reporting.

Subdisco is a tool designed in java and uses OSINT in order to enumerate subdomains of websites.

Async security crawler for recon, bug bounty & attack surface discovery. Finds hidden endpoints, parameterized URLs, upload forms & subdomains.

SubOracle is an advanced subdomain intelligence and attack surface reconnaissance framework designed for security researchers and penetration testers. It helps identify digital assets, discover subdomains, analyze external footprints, and improve visibility of an organization's online infrastructure through structured reconnaissance workflow.

DNS.NF is a TanStack Start + Go DNS intelligence platform for DNS lookup, reverse DNS, reverse IP, subdomain discovery, DNSSEC, and a public DNS API.

Offensive Reconnaissance Framework for automated attack surface discovery.

A fast CLI and MCP server for inspecting domains — WHOIS/RDAP, DNS, SSL, ports, subdomains, and DNS propagation — with CSV/JSON export.

Subdomain Discovery Tool - Professional subdomain enumeration with multiple techniques

URLScan.io powered subdomain discovery tool for security researchers and penetration testers. Fast, efficient, and feature-rich reconnaissance utility.

Chrome Extension for finding subdomains of the current website using DNS over HTTPS.

Self-hosted subdomain discovery & reverse DNS toolkit. 10 free OSINT sources, DNS brute-force, zone transfers, wildcard detection, Antifilter integration. No API keys required.