Subdomain Open Source Projects

In-depth attack surface mapping and asset discovery

Fast passive subdomain enumeration tool.

Grab your own sweet-looking '.is-a.dev' subdomain.

OneForAll是一款功能强大的子域收集工具

An easy-to-read, quick reference for PHP best practices, accepted coding standards, and links to authoritative tutorials around the Web

Official git repo for iodine dns tunnel

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

A curated list of various bug bounty tools

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Dedicated to JavaScript and its awesome community since 2015

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

Web Attack Cheat Sheet

微信小程序-餐饮点餐外卖-开箱即用

Knock Subdomain Scan

Curriculum for RailsBridge workshops

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

server for localtunnel.me

Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.

Database multi-tenancy for Rack (and Rails) applications

Free subdomains for personal sites, open-source projects, and more.

Generates permutations, alterations and mutations of subdomains and then resolves them

无状态子域名爆破工具

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

DNS Takeover tool written in Go

Hacker news-inspired forum app built with TypeScript using DDD practices from solidbook.io.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

This script is intended to automate your reconnaissance process in an organized fashion

Accurately separates a URL’s subdomain, domain, and public suffix, using the Public Suffix List (PSL).

A DNS reconnaissance tool for locating non-contiguous IP space.

DNS Exfiltration tool for stealthily sending files over DNS requests.

Easy multi-tenancy for Rails in a shared database setup.

OSINT tools and more but without API key

Subdomain takeover vulnerability checker

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

Install and manage a high performance WordPress stack with a few keystrokes

join public router. quickly.

Subdomain enumeration tool

K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

Exoframe is a self-hosted tool that allows simple one-command deployments using Docker

Docker Swarm mode rocks! Ideas, tools and recipes. Get a production-ready, distributed, HTTPS served, cluster in minutes, not weeks.

Generates combination of domain names from the provided input.

Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

A Domain Name & Email Address Collection Tool

:globe_with_meridians: Variable VVV - a VVV Site Creation Wizard.‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ :x: This project is no longer maintained. Please update your copy of VVV , which has most of the vv features built in.

A Powerful Subdomain Takeover Tool

Setup script for Regon-ng

A subdomain enumeration tool.

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

Handbook of information collection for penetration testing and src

🌐 Grab your own subdomain (for personal sites, open-source projects, and more) for free

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

A tool that can help detect and takeover subdomains with dead DNS records

Open Source Node.js Hosting Platform