A tool for collecting subdomains of a website , finding alive subdomains & also sort out those subdomains.

Simple Subdomain fetcher using SecurityTrails API.

Certificate Explore - find subdomains using Certificate Transparency logs

Discover subdomains in Certificate Transparency logs using Google's Transparency Report

Rooter Subdomain Enumeration is a versatile and powerful Go script designed for discovering subdomains associated with a target domain. This tool empowers security professionals, penetration testers, and bug bounty hunters to conduct comprehensive reconnaissance and enhance their understanding of a target's attack surface.

SubHound is a bash script that performs automated subdomain reconnaissance. Just run the script and follow the instructions!

ListDomains is a subdomain enumeration tool, using passive techniques.

🔎 An OSINT tool to scan subdomains of any websites

Passive Recon - Subdomain Enumeration With Sub-Finder.

bruter.py tool is a command-line utility for replacing the string FUZZING in a URL with lines from a file. The resulting URLs can be written to an output file or to standard output.

subdomain enumeration via https://crt.sh/

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second修复内存溢出等bug

Sub-Domain Enumeration

A collection of valid subdomains enumerated from various tools like Amass, Sublist3r, Subfinder, Altdns and Knockpy (including results from crt.sh) for the top level domain of yahoo.com

A recursive subdomain enumeration script for crt.sh

Here is a shell script that can be used to check for subdomain takeover vulnerabilities using the "can-i-take-over-xyz" service

Subdomain Finder In GOlang

Awasome Subdomain Gathering / Scanner / Crawler