Assetfinder

Fast passive subdomain enumeration tool. Uses multiple sources including certificate transparency logs.

In-depth attack surface mapping and asset discovery. DNS enumeration, network mapping, OSINT data sources.

Fast multi-purpose DNS toolkit. Retries, wildcard filtering, and multiple resolver support.

Subdomain enumeration tool using wordlist and DNS resolution. Supports VirusTotal and zone transfers.

Subdomain takeover tool. Checks if CNAME records point to deprovisioned cloud services.

Subdomain discovery through alterations and permutations. Generates mutated wordlists from known subdomains.