Awesome Asset Discovery
Section: ↑Domain / Subdomain Discovery · Subdomains enumeration tool with multiple sources
StaleScore 55
Entry
Sublist3r
Appears in 7 awesome lists
Sublist3r is a multi-threaded sub-domain enumeration tool for penetration testers by @aboul3la.
Open github.comaboul3la/sublist3r
Found in these lists
Awesome Bug Bounty Tools
Section: Subdomain Enumeration · Fast subdomains enumeration tool for penetration testers
FreshScore 89
SOCIAL MEDIA
Section: Reconnaissance & Enumeration · Fast subdomains enumeration tool.
FreshScore 86
Awesome Security
Section: Scanning / Pentesting · Fast subdomains enumeration tool for penetration testers
SlowScore 70
Awesome Termux Hacking
Section: General · Fast subdomains enumeration tool for penetration testers.
StaleScore 47
Awesome Web Security
Section: Reconnaissance · Sublist3r is a multi-threaded sub-domain enumeration tool for penetration testers by @aboul3la.
FreshScore 87
awesome-python
Section: Other · Fast subdomains enumeration tool for penetration testers
FreshScore 81
Often listed next to it
gobuster
Lean multipurpose brute force search/fuzzing tool for Web (and DNS) reconnaissance.
In 7 listsDetails
Amass
The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
In 7 listsDetails
Wolfram|Alpha
Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough algorithms, knowledgebase and AI technology.
In 7 listsDetails
Subfinder
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites.
In 6 listsDetails
bbot
Toolkit of 51 modules (for collecting domain/IP information - cookie_brute, wappalyzer, sslcert, leakix, urlscan, wayback (full list in the picture)
In 5 listsDetails
blechschmidt/massdns
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
In 5 listsDetails
Amass
The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic…
In 4 listsDetails
VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
In 3 lists