Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
DNS-Blocklists: For a better internet - keep the internet clean!
E-mails, subdomains and names Harvester - OSINT
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
Fast subdomains enumeration tool for penetration testers
The recursive internet scanner for hackers. 🧡
Six Degrees of Domain Admin
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
A fast sub domain brute tool for pentesters
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
Reconnaissance Swiss Army Knife
- recon
- information-gathering
- honeypot-detector
- subdomain-enumeration
Analyze the security of any domain by finding all the information possible. Made in python.
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
- ddd
- extension
- ddd-architecture
- clean-architecture
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Searches various online resources to try and get as much info about an IP/domain as possible.
go-fasttld is a high performance effective top level domains (eTLD) extraction module.
- compressed-trie
- idn
- idna
- ipv4
A Python DNS crawler to find identical domain names under different TLDs.
Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.
- domain-lookup
- golang
- ip-geolocation
- ip2location
Ruby gem for the IP2Location.io API. Look up geolocation and proxy information by IP address, and retrieve WHOIS data by domain. Integrate a hosted IP geolocation API into Ruby applications and backend workflows. Enrich IPv4 and IPv6 addresses with geographic and network details for analytics, localization and security checks.
- domain-lookup
- geolocation-api
- ip-geolocation
- ip2location