For a tool for performing dns reconnaissance, the strongest matches are ice3man543/subfinder (Subfinder is a passive subdomain enumeration tool that gathers), aboul3la/sublist3r (Sublist3r is a subdomain enumeration and passive reconnaissance tool) and techarohq/anubis (Anubis is a command-line reconnaissance framework built specifically for). darkoperator/dnsrecon and findomain/findomain round out the shortlist. Each is ranked by relevance to your query, popularity and recent activity.
Descoperă cele mai bune instrumente de recunoaștere DNS pentru testarea securității. Compară proiectele de top de pe GitHub după activitate și funcționalități.
Subfinder is a passive subdomain enumeration tool and DNS discovery utility designed to identify valid subdomains and hostnames associated with a specific organization or domain. It functions as a passive reconnaissance tool, gathering information about target domains by querying online databases without sending network traffic to the target infrastructure. The tool utilizes a pluggable provider architecture to separate discovery logic into independent modules, allowing for the integration of multiple passive-source APIs. It employs a concurrent-worker request model to execute network request
Subfinder is a passive subdomain enumeration tool that gathers DNS information from online databases without direct interaction, making it a specialized DNS reconnaissance tool—ideal for subdomain discovery but lacking active queries, zone transfer checks, or DNSSEC analysis.
Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by querying search engines and public intelligence sources. It functions as a security tool for identifying the digital footprint of a target domain. The project provides both passive enumeration through multi-source API aggregation and active discovery via a DNS brute force tool. It includes a TCP port scanner to identify active services and open ports on discovered subdomains, facilitating attack surface mapping. The tool can be used as a standalone utility or as a Python security
Sublist3r is a subdomain enumeration and passive reconnaissance tool that squarely fits the DNS reconnaissance category by discovering subdomains via search engines, APIs, and brute forcing, though it does not cover all requested features like zone transfer detection or DNSSEC analysis.
Anubis is a command-line security reconnaissance framework designed for subdomain enumeration and attack surface mapping. It functions as a utility for security professionals to identify, catalog, and visualize the external digital footprint of an organization by discovering all subdomains associated with a target domain. The tool distinguishes itself through a modular resolver pipeline that integrates passive reconnaissance from third-party security APIs and public certificate transparency logs. It combines this data with active discovery methods, including recursive DNS brute-forcing and al
Anubis is a command-line reconnaissance framework built specifically for subdomain enumeration and attack surface mapping, using both passive API sources and active DNS brute-forcing, which directly fits the DNS reconnaissance use case for security assessments.
DNS Enumeration Script
dnsrecon is a dedicated DNS enumeration script that directly serves your need for DNS reconnaissance by supporting subdomain enumeration, multiple record type queries, zone transfer detection, reverse lookups, and output flexibility, making it a comprehensive tool for security assessments.
Findomain is a subdomain discovery tool and DNS resolver used for mapping an organization's external attack surface. It functions as a DNS infrastructure analyzer that searches for registered subdomains associated with a root domain to uncover undocumented infrastructure and services. The project includes an attack surface monitor that tracks changes to subdomains over time, using differential state monitoring to identify newly created or deleted assets. It provides real-time alerting via webhooks when changes in the monitored domain surface are detected. The system performs high-speed DNS r
findomain is a dedicated DNS reconnaissance tool focused on fast subdomain discovery and attack surface mapping, making it a fitting choice for this search, though it may not cover every feature like zone transfer detection or DNSSEC analysis out of the box.
Subfinder is a passive subdomain enumeration tool and DNS asset discovery utility designed for mapping the external attack surface of a domain. It functions as a passive reconnaissance framework that identifies subdomains by querying curated third-party data sources and APIs without interacting directly with the target infrastructure. The tool utilizes a modular provider interface to integrate various passive sources and employs concurrent request orchestration to manage simultaneous network queries. It includes wildcard DNS filtering to identify and remove catch-all records, ensuring the res
Subfinder is a passive subdomain enumeration and DNS asset discovery tool that maps external attack surfaces by querying third-party sources, fitting the DNS reconnaissance intent with strong subdomain discovery and passive data collection, though it does not include active scanning, zone transfer detection, or DNSSEC analysis.
Subfinder is a security reconnaissance framework designed for subdomain enumeration and attack surface management. It functions as a discovery engine that identifies and maps internet-exposed infrastructure, cloud-hosted assets, and network ranges to maintain a comprehensive inventory of an organization's digital footprint. The project distinguishes itself through a modular, template-driven scanning engine that executes security checks against discovered assets. It leverages cloud-native asset discovery to query provider APIs and infrastructure metadata, while supporting distributed agent orc
Subfinder is purpose-built for subdomain enumeration and attack surface discovery, covering several DNS reconnaissance needs such as passive data collection and wordlist scanning, though it does not natively handle zone transfer detection or DNSSEC analysis.
项目地址:https://github.com/bit4woo/teemo
A Python tool tagged for subdomain enumeration, Teemo directly addresses a core aspect of DNS reconnaissance, though its broader feature coverage (zone transfers, reverse lookups, etc.) is not evident from the sparse description and tags.
query over api - http://www.hackertarget.com/ - http://ptrarchive.com/ - ...
This tool performs DNS subdomain enumeration by querying public APIs (hackertarget.com and ptrarchive.com), making it a DNS reconnaissance tool, but it is limited to that single technique and lacks the broader feature set like zone transfer detection, reverse DNS, or DNSSEC analysis.
` python brodomain.py baidu.com `
brodomain is a subdomain enumeration tool that performs DNS reconnaissance by scanning for subdomains, fitting the core need of the search even though it may not cover all listed features like zone transfer or DNSSEC analysis.
This software is a subdomain enumeration tool.
evilsocket/dnssearch is a focused subdomain enumeration tool that fits the DNS reconnaissance category, but it lacks the broader feature set like DNS record querying, zone transfer detection, or passive DNS collection that you may need.
ESD is a Python tool focused on subdomain brute-force scanning for security assessments, directly serving DNS reconnaissance through subdomain enumeration, though it may not cover all the listed features like zone transfer or DNSSEC analysis.
A tool to bruteforce dumains!
A straightforward brute-force subdomain enumeration tool that fits the DNS reconnaissance category for security assessments, though it focuses on subdomain discovery alone rather than the broader feature set like zone transfers or passive DNS.
| Repository | Stele | Limbaj | Licență | Ultimul push |
|---|---|---|---|---|
| ice3man543/subfinder | 13.9K | Go | MIT | |
| aboul3la/sublist3r | 11K | Python | GPL-2.0 | |
| techarohq/anubis | 17.1K | Go | mit | |
| darkoperator/dnsrecon | 3K | Python | GPL-2.0 | |
| findomain/findomain | 3.7K | Rust | gpl-3.0 | |
| subfinder/subfinder | 13.9K | Go | MIT | |
| projectdiscovery/subfinder | 13.1K | Go | mit | |
| bit4woo/teemo | 1K | Python | — | |
| chuhades/dnsbrute | 0 | — | — | — |
| code-scan/brodomain | 224 | HTML | — |