SubEvil is an advanced open source intelligence framework (OSINT) for grouping subdomains.

Streamline Domain Enumeration with this Efficient Toolset

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

Automated script to run all modules for a specified list of domains, netblocks or company name

Yet another OSINT automator.

Obtain domains from certificate transparency logs

🥷 Subduer is a subdomain passive reconnaissance tool utilising Playwright and several online providers that gathers subdomains and generates wordlists and reports in multiple formats.

Domain enumeration is the URL extraction and scanning tool for Linux OS. It is a combination of multiple tools which provide information about the URL by scanning them with multiple enumeration tools and provide information as much as possible about the sub-domain, login pages, any vulnerable pages on the webiste etc.

This tool is used to perform reverse IP lookups— searching for all domains hosted on one IP address.

This repository contains Python tools for domain enumeration.

Target domain information exploits

Advanced OSINT & Multi-Engine Intelligence Dashboard

ArgusScope is a modular CLI tool for domain and subdomain enumeration, leveraging Python and MongoDB. Inspired by the all-seeing Argus, it offers pre-auth detection, passive and active discovery, and structured data storage. Ideal for penetration testers and red teamers in lab environments.

A simple MCP server that uses the viewdns.info api to do domain enumeration.

"AvdSidlister is a powerful Python-based subdomain enumeration tool by siddharth0kumar. Discover subdomains with ease, analyze results interactively, and export in HTML format. Streamline your cybersecurity efforts with this versatile tool."

Domain Grabber — A Python CLI tool to fetch unique root domains from Archive.org CDX API based on given domain extensions (e.g., .id, .co.id, .ac.id). Supports multiple extensions, progress tracking, retry with User-Agent rotation, and automatic result saving. Ideal for OSINT, domain research, and penetration testing reconnaissance.