Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

OneForAll是一款功能强大的子域收集工具

Reconnaissance Swiss Army Knife

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

The Last Web Recon Tool You'll Need

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

Subdomain enumeration through various techniques

A MongoDB importer and API for Project Sonars DNS datasets

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

Powerful Visual Subdomain Enumeration at the Click of a Mouse

Hunt down the secrets from the WebArchives for Fun and Profit

dnsub一款好用的子域名扫描工具

Fast subdomains enumeration tool for penetration testers.

A tool to find subdomains or domains from passive sources.

Weaponizing Live CT logs for automated monitoring of assets

A docker image which will enumerate, sort, unique and resolve the results of various subdomains enumeration tools.

a shell script aim to automatically launch 50+ online web scanning tools in the Browsaer against a target domain in a 10 waves

Domain availbility checker

Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3

Hacks For Subdomain Enumeration

Subdomain Scanner Tools with word-lists

Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates being issued

Subdomain Enumeration and Scanner

SubR3con is a script written in python. It uses Sublist3r to enumerate all subdomains of specific target and then it checks for stauts code for possible subdomain takeover vulnerability. This works great with Subover.go