![](/assets/headers/header-logo.png)

![](https://img.shields.io/badge/Tools%20%26%20Resources%20Available-72-757575?style=for-the-badge)

### Azure

* [Greyhat Warfare](https://buckets.grayhatwarfare.com/) - Search scanned archived AWS buckets.
* [OpenBuckets](https://openbuckets.io/) - Search public or misconfigured Azure buckets and its contents.  

### Content Discovery/Fuzzers

* [content-discovery](https://github.com/eauxfolles/content-discovery) - Tool to support with "Content Discovery" during mapping of a web applications/sites. ![last-commit](https://img.shields.io/github/last-commit/eauxfolles/content-discovery?style=flat)
* [dirble](https://github.com/nccgroup/dirble) - Fast directory scanning and scraping tool. ![last-commit](https://img.shields.io/github/last-commit/nccgroup/dirble?style=flat)
* [DirBuster](https://github.com/KajanM/DirBuster) - a multi threaded java application designed to brute force directories and files names on web/application servers. ![last-commit](https://img.shields.io/github/last-commit/KajanM/DirBuster?style=flat)
* [DirHunt](https://github.com/Nekmo/dirhunt) - Find web directories without bruteforce. ![last-commit](https://img.shields.io/github/last-commit/Nekmo/dirhunt?style=flat)
* [dirsearch](https://github.com/maurosoria/dirsearch) - Web path scanner. ![last-commit](https://img.shields.io/github/last-commit/maurosoria/dirsearch?style=flat)
* [Feroxbuster](https://github.com/epi052/feroxbuster) - A fast, simple, recursive content discovery tool written in Rust. 
* [ffuf](https://github.com/ffuf/ffuf) - Fast web fuzzer written in Go. ![last-commit](https://img.shields.io/github/last-commit/ffuf/ffuf?style=flat)
* [fuzzagotchi](https://github.com/hideckies/fuzzagotchi) - Automatic web fuzzer. ![last-commit](https://img.shields.io/github/last-commit/hideckies/fuzzagotchi?style=flat)
* [GoBuster](https://github.com/OJ/gobuster) - Directory/File, DNS and VHost busting tool written in Go. ![last-commit](https://img.shields.io/github/last-commit/OJ/gobuster?style=flat)
* [Hakrawler](https://github.com/hakluke/hakrawler) - Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application. ![last-commit](https://img.shields.io/github/last-commit/hakluke/hakrawler?style=flat)
* [HTTPLoot](https://github.com/redhuntlabs/httploot) - An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages. ![last-commit](https://img.shields.io/github/last-commit/redhuntlabs/httploot?style=flat)
* [IISRecon](https://github.com/0xRTH/IISRecon) - IIS shortname scanner + bruteforce. ![last-commit](https://img.shields.io/github/last-commit/0xRTH/IISRecon?style=flat)
* [Kiterunner](https://github.com/assetnote/kiterunner) - Contextual Content Discovery Tool. ![last-commit](https://img.shields.io/github/last-commit/assetnote/kiterunner?style=flat)
* [LinkFinder](https://github.com/GerbenJavado/LinkFinder) - A python script that finds endpoints in JavaScript files. ![last-commit](https://img.shields.io/github/last-commit/GerbenJavado/LinkFinder?style=flat)
* [ParamSpider](https://github.com/devanshbatham/ParamSpider) - Mining parameters from dark corners of Web Archives. ![last-commit](https://img.shields.io/github/last-commit/devanshbatham/ParamSpider?style=flat)
* [Raccoon](https://github.com/evyatarmeged/Raccoon) - A high performance offensive security tool for reconnaissance and vulnerability scanning. ![last-commit](https://img.shields.io/github/last-commit/evyatarmeged/Raccoon?style=flat)
* [RecurseBuster](https://github.com/C-Sto/recursebuster) - Rapid content discovery tool for recursively querying webservers. ![last-commit](https://img.shields.io/github/last-commit/C-Sto/recursebuster?style=flat)
* [Scilla](https://github.com/edoardottt/scilla) - Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration. ![last-commit](https://img.shields.io/github/last-commit/edoardottt/scilla?style=flat)
* [UnChain](https://github.com/redcode-labs/UnChain) - A tool to find redirection chains in multiple URLs. ![last-commit](https://img.shields.io/github/last-commit/redcode-labs/UnChain?style=flat)
* [xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder) - A python tool used to discover endpoints for a given target. ![last-commit](https://img.shields.io/github/last-commit/xnl-h4ck3r/xnLinkFinder?style=flat)
* [x8](https://github.com/Sh1Yo/x8) - Hidden parameters discovery suite written in Rust. ![last-commit](https://img.shields.io/github/last-commit/Sh1Yo/x8?style=flat)

### DNS

* [aiodnsbrute](https://github.com/blark/aiodnsbrute) - Python 3.5+ DNS asynchronous brute force utility. ![last-commit](https://img.shields.io/github/last-commit/blark/aiodnsbrute?style=flat)
* [dnsdumpter](https://dnsdumpster.com/) - dns recon & research, find & lookup dns records. 
* [dnssearch](https://github.com/evilsocket/dnssearch) - A subdomain enumeration tool. ![last-commit](https://img.shields.io/github/last-commit/evilsocket/dnssearch?style=flat)
* [dnsX](https://github.com/projectdiscovery/dnsx) - Fast and multi-purpose DNS toolkit allow to run multiple DNS queries. ![last-commit](https://img.shields.io/github/last-commit/projectdiscovery/dnsx?style=flat)
* [Fastsub](https://github.com/codingo/fastsub) - A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers. ![last-commit](https://img.shields.io/github/last-commit/codingo/fastsub?style=flat)
* [Fierce](https://github.com/mschwager/fierce) - A DNS reconnaissance tool for locating non-contiguous IP space. ![last-commit](https://img.shields.io/github/last-commit/mschwager/fierce?style=flat)
* [MassDNS](https://github.com/blechschmidt/massdns) - A high-performance DNS stub resolver for bulk lookups and reconnaissance. ![last-commit](https://img.shields.io/github/last-commit/blechschmidt/massdns?style=flat)
* [Raccoon](https://github.com/evyatarmeged/Raccoon) - A high performance offensive security tool for reconnaissance and vulnerability scanning. ![last-commit](https://img.shields.io/github/last-commit/evyatarmeged/Raccoon?style=flat)
* [SubBrute](https://github.com/TheRook/subbrute) - A DNS meta-query spider that enumerates DNS records, and subdomains. ![last-commit](https://img.shields.io/github/last-commit/TheRook/subbrute?style=flat)

### Domain/IP

* [Altdns](https://github.com/infosec-au/altdns) - Generates permutations, alterations and mutations of subdomains and then resolves them. ![last-commit](https://img.shields.io/github/last-commit/infosec-au/altdns?style=flat)
* [Amass](https://github.com/OWASP/Amass) - In-depth Attack Surface Mapping and Asset Discovery. ![last-commit](https://img.shields.io/github/last-commit/OWASP/Amass?style=flat)
* [Assetfinder](https://github.com/tomnomnom/assetfinder) - Find domains and subdomains potentially related to a given domain. ![last-commit](https://img.shields.io/github/last-commit/tomnomnom/assetfinder?style=flat)
* [Chaos-Client](https://github.com/projectdiscovery/chaos-client) - Go client to communicate with Chaos DNS API. ![last-commit](https://img.shields.io/github/last-commit/projectdiscovery/chaos-client?style=flat)
* [crt.name](https://crt.name/) - Search the subdomain index. 
* [crt.sh](https://crt.sh/) - Certificate search on domains. 
* [ctfr](https://github.com/UnaPibaGeek/ctfr) - Abusing Certificate Transparency logs for getting HTTPS websites subdomains. ![last-commit](https://img.shields.io/github/last-commit/UnaPibaGeek/ctfr?style=flat)
* [Discover](https://github.com/leebaird/discover) - Custom bash scripts to automate various pentesting tasks including recon. ![last-commit](https://img.shields.io/github/last-commit/leebaird/discover?style=flat)
* [findomain](https://github.com/Findomain/Findomain) - The complete solution for domain recognition. ![last-commit](https://img.shields.io/github/last-commit/Findomain/Findomain?style=flat)
* [httpx](https://github.com/projectdiscovery/httpx) - A fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. ![last-commit](https://img.shields.io/github/last-commit/projectdiscovery/httpx?style=flat)
* [IPScout](https://github.com/jonhadfield/ipscout) - Host information and threat aggregator for network administrators and security analysts. ![last-commit](https://img.shields.io/github/last-commit/jonhadfield/ipscout?style=flat)
* [Knock](https://github.com/guelfoweb/knock) - Knock Subdomain Scan. ![last-commit](https://img.shields.io/github/last-commit/guelfoweb/knock?style=flat)
* [OneForAll](https://github.com/shmilylty/OneForAll) - A powerful subdomain integration tool. ![last-commit](https://img.shields.io/github/last-commit/shmilylty/OneForAll?style=flat)
* [Raccoon](https://github.com/evyatarmeged/Raccoon) - A high performance offensive security tool for reconnaissance and vulnerability scanning. ![last-commit](https://img.shields.io/github/last-commit/evyatarmeged/Raccoon?style=flat)
* [Robtex](https://www.robtex.com/) - Robtex is used for various kinds of research of IP numbers, Domain names, etc. 
* [Scilla](https://github.com/edoardottt/scilla) - Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration. ![last-commit](https://img.shields.io/github/last-commit/edoardottt/scilla?style=flat)
* [sigurlfind3r](https://github.com/signedsecurity/sigurlfind3r) - A reconnaissance tool, it fetches URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine. ![last-commit](https://img.shields.io/github/last-commit/signedsecurity/sigurlfind3r?style=flat)
* [subfinder](https://github.com/projectdiscovery/subfinder) - Fast passive subdomian enumeration tool. ![last-commit](https://img.shields.io/github/last-commit/projectdiscovery/subfinder?style=flat)
* [sublist3r](https://github.com/aboul3la/Sublist3r) - Fast subdomains enumeration tool for penetration testers. ![last-commit](https://img.shields.io/github/last-commit/aboul3la/Sublist3r?style=flat)
* [Turbolist3r](https://github.com/fleetcaptain/Turbolist3r) - Subdomain enumeration tool with analysis features for discovered domains. ![last-commit](https://img.shields.io/github/last-commit/fleetcaptain/Turbolist3r?style=flat)
* [Websitewatcher](https://github.com/firefart/websitewatcher) - Monitor webist domain for changes. ![last-commit](https://img.shields.io/github/last-commit/firefart/websitewatcher?style=flat)

### Dorking

* [Dorkbot](https://github.com/utiso/dorkbot) - Command line dorking tool. ![last-commit](https://img.shields.io/github/last-commit/utiso/dorkbot?style=flat)

### Frameworks

* [aut0rec0n](https://github.com/hideckies/aut0rec0n) -  An automatic reconnaissance command-line tool for DNS, port scanning, and subdomains. ![last-commit](https://img.shields.io/github/last-commit/hideckies/aut0rec0n?style=flat)
* [FinalRecon](https://github.com/thewhiteh4t/FinalRecon) - All In One Web Recon. ![last-commit](https://img.shields.io/github/last-commit/thewhiteh4t/FinalRecon?style=flat)
* [Osmedeus](https://github.com/j3ssie/Osmedeus) - Fully automated offensive security framework for reconnaissance and vulnerability scanning. ![last-commit](https://img.shields.io/github/last-commit/kbandla/dpkt?style=flat)
* [ReconDog](https://github.com/s0md3v/ReconDog) - Reconnaissance Swiss Army Knife. ![last-commit](https://img.shields.io/github/last-commit/s0md3v/ReconDog?style=flat)
* [sn1per](https://github.com/1N3/Sn1per) - Discover the attack surface and prioritize risks with our continuous Attack Surface Management. ![last-commit](https://img.shields.io/github/last-commit/1N3/Sn1per?style=flat)

### Search Engines

* [Censys](https://censys.io/) - Highly-indexed Internet-wide scan data at scale. 
* [Google Dataset](https://datasetsearch.research.google.com/) - Indexed datasets. 
* [Mamont](https://www.mmnt.ru/int/) - Open FTP Indexer. 
* [OCCRP Aleph](https://data.occrp.org/) - Global archive of research material. 
* [OnionScan](https://github.com/s-rah/onionscan) - TOR scanner. ![last-commit](https://img.shields.io/github/last-commit/s-rah/onionscan?style=flat)
* [Shodan](https://shodan.io) - The security search engine. Search everything IoT. 
* [Wayback Machine](https://archive.org/web/web.php) - Internet archive of saved web pages. 
* [OpenBuckets](https://openbuckets.io/) - Search public or misconfigured buckets and its contents from all cloud providers (AWS, GCP, IBM, Linode etc).

### Wordlists

* [API Endpoints & Objects](https://gist.github.com/yassineaboukir/8e12adefbd505ef704674ad6ad48743d) - A list of 3203 common API endpoints and objects designed for fuzzing.
* [Funny Fuzzing Wordlist](https://github.com/koaj/ffw-content-discovery) - Funny Fuzzing Wordlist. ![last-commit](https://img.shields.io/github/last-commit/koaj/ffw-content-discovery?style=flat)
* [Fuzz.txt](https://github.com/Bo0oM/fuzz.txt) - Directory & File List. ![last-commit](https://img.shields.io/github/last-commit/Bo0oM/fuzz.txt?style=flat)
* [SecLists](https://github.com/danielmiessler/SecLists) - A collection of multiple types of lists used during security assessments, collected in one place. ![last-commit](https://img.shields.io/github/last-commit/danielmiessler/SecLists?style=flat)
* [Secrets in Environment Variables](https://github.com/Puliczek/awesome-list-of-secrets-in-environment-variables) - Awesome list of secrets in environment variables. ![last-commit](https://img.shields.io/github/last-commit/Puliczek/awesome-list-of-secrets-in-environment-variables?style=flat)