Intelligent context routing for AI coding assistants

The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbitrary binaries and scripts using any of our nine supported cl…

Subdomain Takeover tool written in Go

Take a list of domains/subdomains and probe for working http/https server.

Fast subdomains enumeration tool for penetration testers and bug bounty hunters

Gotta go fast

Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names

CT Log Scanner

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

AWS IP Ranges History Tracker Amazon - AWS provides a list of IP Addresses used by their various services through a published ip-ranges.json file. This Git repository tracks this file so that chang…

Find related domains of a given domain.

Automatically install some web hacking/bug bounty tools.

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

security.txt collection of most popular world-wide domains

Mass querying whois records

Fast Golang Tool To Get Cname For Domains and Subdomain

The most exhaustive list of reliable DNS resolvers.

List of Hourly Updated Fresh DNS resolvers

A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.

A simple reverse whois lookup tool which returns a list of domains owned by people or companies

World’s single largest Internet domains dataset

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Rust-based high performance domain permutation generator.

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful pyth…

Slack remote terminal

Build your own reconnaissance system with Osmedeus Next Generation

Remote command execution vulnerability scanner for Log4j.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal