Browse and search our comprehensive collection of OSINT tools
Attack-surface mapping and DNS enumeration
Modular web reconnaissance framework
DNS history and domain intelligence platform
Automated OSINT reconnaissance framework
Collect emails and subdomains from public sources
a subdomain permutation tool that generates altered hostnames for DNS brute f
a command-line tool for finding domains and subdomains related to a target or
Passive DNS and subdomain reconnaissance
a DNS enumeration script for records, zone transfers, brute force, and cache
a resolver validation tool used to build reliable DNS resolver lists for reco
a DNS reconnaissance tool for locating non-contiguous IP space and related ho
a cross-platform subdomain enumerator using certificate transparency and publ
a permutation generator for creating candidate subdomains during discovery wo
a high-performance DNS stub resolver for large-scale host and subdomain valid
a passive subdomain discovery tool that queries many public data sources
Enumerate subdomains from public sources
a domain typo and homoglyph generator for finding spoofed or suspicious looka
a DNS enumeration tool for discovering name servers, MX records, subdomains,
a domain permutation tool for detecting typosquatting, phishing, and brand im
a DNS toolkit for resolving, filtering, and validating domain and subdomain r
a fast domain resolver and bruteforcing tool built around massdns for large r
a DNS brute forcing and resolution wrapper designed for large-scale subdomain
a TLS data collection tool for extracting certificates, SANs, and service enc