sumlac

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

dirsearch

Web path scanner

domain

Setup script for Regon-ng

gitrob

Reconnaissance tool for GitHub organizations

gobuster

Directory/file & DNS busting tool written in Go

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance

relative-url-extractor

A small tool that extracts relative URLs from a file.

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

Sublist3r

Fast subdomains enumeration tool for penetration testers

teh_s3_bucketeers

truffleHog

Searches through git repositories for high entropy strings, digging deep into commit history