#domains

harpoon
harpoon

CLI tool for open source and threat intelligence.

kerbrute
kerbrute

Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.

wtfis
wtfis

Passive hostname, domain and IP lookup tool for non-robots.

SynapsInt
SynapsInt

Consulting different intelligence services, search engines and datasets for OSINT.

WhoisXMLAPI
WhoisXMLAPI

Domain & IP data intelligence for greater enterprise security.

FavFreak
FavFreak

Making favicon.ico based recon great again.

OSINT-SPY
OSINT-SPY

Perform OSINT scan on email/domain/ip address/organization.

TLDHunt
TLDHunt

Domain availability checker.

DomLink
DomLink

Link a domain with registered organisation names and emails, to other domains.

dnstwist
dnstwist

Domain name permutation engine for detecting several types of attacks.

DNSMORPH
DNSMORPH

Domain name permutation engine written in Go.

OSINTui
OSINTui

OSINT from your favorite services in a friendly terminal user interface.

SDBF
SDBF

Smart DNS Brute Forcer.

NTLMRecon
NTLMRecon

Enumerate information from NTLM authentication enabled web endpoints.

catphish
catphish

Generate similar-looking domains for phishing attacks.

ADRecon
ADRecon

Gather information about the Active Directory and generates a report.

UserEnum
UserEnum

Domain user enumeration tool.

Rock-ON
Rock-ON

All in one recon tool that just get a single domain name and do all of the work alone.

RidRelay
RidRelay

Enumerate usernames on a domain where you have no creds by using SMB relay.

jackdaw
jackdaw

Gather gather gather.

Domain Hunter
Domain Hunter

Checks expired domains to determine good candidates for phishing and C2 domain names.

ShadowSpray
ShadowSpray

Spray shadow credentials across an entire domain.

dnstwist_
dnstwist_

A tool to monitor for potential spear phishing domains and send to Slack.

CloudFrunt
CloudFrunt

A tool for identifying misconfigured CloudFront domains.

ADRT
ADRT

Active Directory Report Tool.

gwdomains
gwdomains

Sub domain wild card filtering tool.

haktldextract
haktldextract

Extract domains/subdomains from URLs en masse.

SonarSearch
SonarSearch

A rapid API for the project Sonar dataset.

SecurityTrails
SecurityTrails

Data for Security companies, researchers and teams.

windapsearch
windapsearch

Enumerate users, groups and computers from a Windows domain through LDAP queries.

EDD
EDD

Ultimate domain enumeration tool.

domain_hunter
domain_hunter

Try to find all subdomains, similar-domains and related-domains of an organization.

TLD Scanner
TLD Scanner

Scan all possible TLD's for a given domain name.

espionage
espionage

Collects informations related to domains whois, history, dns records and more.

Spoofy
Spoofy

Checks if a list of domains can be spoofed based on SPF and DMARC records.

MSDorkDump
MSDorkDump

Google Dork File Finder.

dnsenum
dnsenum

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

SpiderFoot
SpiderFoot

Automates OSINT for threat intelligence and mapping your attack surface.

related-domains
related-domains

Find related domains of a given domain.