N4xD0rk

N4xD0rk Listing subdomains about a main domain using the technique called Hacking with search engines. Instalation You can download the latest version of N4xD0rk by cloning the GitHub repository: git clone https://github.com/n4xh4ck5/N4xD0rk.git Install the dependencies via pip: pip install -r...

Reconator

Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs 17 recon modules against it subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more. The dashboard shows per-module output as it lands. Stack Layer| Tec...

tugarecon

TugaRecon TugaRecon is an advanced reconnaissance and intelligence framework that goes beyond enumeration. It observes, interprets, remembers, and reacts — transforming subdomains into architectural intelligence. 🧭 Philosophy TugaRecon is inspired by Portuguese explorers. During the 15th and 16th...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

bugbounty_tools

bugbountytools Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and occassionally public released Contact: For questions, comments or request make a psot to my X account not in DM and I will do what I...

ksubdomain

KSubdomain: Ultra-Fast Stateless Subdomain Enumeration Tool 中文文档 | English KSubdomain is a stateless subdomain enumeration tool delivering unprecedented scanning speed with extremely low memory consumption. By directly operating network adapters via raw sockets — bypassing the OS kernel stack —...

EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

frontpage-server-extensions-vulnerability-scanner

Frontpage Server Extensions Vulnerability Scanner This Python script automates the process of scanning for the CVE-2000-0114 vulnerability in Microsoft Frontpage Server Extensions. It's designed to help security professionals and system administrators identify potentially vulnerable subdomains...

Garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. I made this tool to automate my recon and save my time. It really give me headache always type such command and then wait to complete one command and I type oth...

GPT_Vuln-analyzer

GPTVuln-analyzer GVA GVA is an AI-assisted reconnaissance and vulnerability-analysis toolkit. It runs the scan nmap, DNS, subdomains, JWT, PCAP, GeoIP, then hands the raw output to a large language model that returns a structured, pentester-oriented analysis. It ships with both a command-line...

theHarvester

About theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence OSINT gathering to help determine a domain's external threat landscape. The tool gathers names, emails,...

Sudomy

Sudomy Subdomain Enumeration & Analysis Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing advanced automated reconnaissance framework. This tool can also be used for OSINT Open-source intelligence activities. Features ! For recent time, Sudomy has these...

BlackWidow

ABOUT: BlackWidow is a python based web application spider to gather subdomains, URL's, dynamic parameters, email addresses and phone numbers from a target website. This project also includes Inject-X fuzzer to scan dynamic URL's for common OWASP vulnerabilities. DEMO VIDEO: BlackWidow Demo...

anubis

Anubis d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis is a subdomain...

urlfinder

URLFinder A high-speed tool for passively gathering URLs, optimized for efficient web asset discovery without active scanning. Features • Installation • Usage • Examples • Join Discord Overview URLFinder is a high-speed, passive URL discovery tool designed to simplify and accelerate web asset...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

Lepus

Lepus Lepus is a tool for enumerating subdomains, checking for subdomain takeovers and perform port scans - and boy, is it fast! Basic Usage lepus.py yahoo.com Summary Enumeration modes Subdomain Takeover Port Scan Installation Arguments Full command example Enumeration modes The enumeration mode...

Photon

Photon Incredibly fast crawler designed for OSINT. Photon Wiki • How To Use • Compatibility • Photon Library • Contribution • Roadmap Sponsored By Key Features Data Extraction Photon can extract the following data while crawling: URLs in-scope & out-of-scope URLs with parameters...