Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

Discover and enumerate all subdomains associated with a website, including those not publicly advertised. Use this tool to conduct thorough security assessments, validate your organization's digital footprint, or enhance your reconnaissance capabilities for penetration testing and bug bounty hunting.

A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.

Rapidly enumerate subdomains and domains using rapiddns.io.

recon from myerspective

subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains. It fetches subdomains from various sources [crtsh, hackertargetapi, anubis, alienvault, rappiddns, urlscan ] , saves them to a SQLite database, and can notify updates via Discord.

Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.

A tool for Oragnized ASM (Attack Surface Mapper). Subdomains enumeration, IPs scans, Vulnerability assesment...

Subdomain enumeration statistics and wordlists from bugbounty scopes.

a multithreaded fast tool to preform active subdomain enumeration

Script that performs a scan of a specific domain, using the following tools: Subfinder, assetfinder, amass and httpx. The result is merged into one file.

zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status codes and content length to detect changes and notifies the user when any modifications occur. Easily keep track of your domains' health and security with zwatcher.

a modern subdomains scanner

This is automation tool which utilize 2 sub -domain finder and then sort out working sub-domain and finally scan for sub-doamin TAKEOVER.

Continuous Recon Continuous Hacking

This is a Simple Bash Script for Automating gathering the Passive Subdomian Enumeration with various Tools.

A tool get level of subdomain from 1....n

SubSeeker is a subdomain discovery tool that uses public SSL certificate logs from sources like crt.sh to find and resolve subdomains for a given domain. It identifies active subdomains by resolving their IP addresses and can output the results as text, URLs, or IP lists for masscan.