Awesome-Asset-Discovery

rustbuster

: Files, directories and vhost buster written in Rust

: Bulk Domain/IP lookup tool

: Bulk domain to IP converter

Massdns

: A DNS resolver utility for bulk lookups

: Online Dig tool by Google

DataSploit (IP Address Modules)

: An OSINT Framework to perform various recon techniques

: Investigate domains and IP addresses

: Search ASN, IPv4/IPv6 or resource name

: Keyword to ASN lookup

: Multiple domain/IP tools

: Multiple information related to IPv6 address

: Command line utility usually used to find information about registered users/assignees of an Internet resource

: Whois service by Internet Corporation for Assigned Names and Numbers (ICANN)

Nslookup / : Command line utility usually used for querying the DNS records

: Internet Backbone and Colocation Provider ... Hurricane Electric IP Transit. Our Global Internet Backbone provides IP Transit with low latency, access to thousands of networks, and dual-stack

: RedHunt Labs' Recon API offers comprehensive domain intelligence and reconnaissance capabilities. With access to their extensive in-house database of over 6 billion records, including domains, subdomains, third-party SaaS, data leaks, and intelligent correlations, this API empowers you to enhance your Attack Surface Management and InfoSec workflows

SubFinder

: SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing

Amass

: A subdomain enumeration utility

Sublist3r

: Subdomains enumeration tool with multiple sources

Aiodnsbrute

: Asynchronous DNS brute force utility

LDNS

: A DNS library useful for DNS tool programming

: Nmap NSE Script for NSEC3 walking

Nsec3map

: A tool to NSEC and NSEC3 walking

: Domain certificate Search

Ct-exposer

: A tool to discovers sub-domains by searching Certificate Transparency logs

Certgraph

: A tool to crawl the graph of certificate Alternate Names

Appsecco - The art of subdomain enumeration

: The supplement material for the book "The art of sub-domain enumeration"

SSLScrape

: A scanning tool to scrape hostnames from SSL certificates

: Computational knowledge engine

: Forward DNS Data

: Reverse DNS Data

GoBuster

: Directory/File, DNS and VHost busting tool written in Go

Bluto

: Recon, Subdomain Bruting, Zone Transfers

: Email search for a domain

: Browser addon to find emails on Linkedin

: Chrome extension to extract emails from web pages

: Online tool to extract email addresses in text, web pages, data files etc

linkedin2username

: OSINT Tool: Generate username lists for companies on LinkedIn

: Enumerate valid usernames from Office 365 using ActiveSync

Zmap

: A fast network scanner designed for Internet-wide network surveys

Masscan

: An asynchronously TCP port scanner

ZMapv6

: A modified version of Zmap with IPv6 support

: A free and open source utility for network discovery. The most popular port scanner

: Online tool to check mail exchanger (MX) records

MicroBurst

: PowerShell based Azure security assessment scripts

Lyncsmash

: Tools to enumerate and attack self-hosted Lync/Skype for Business

Enumeration-as-a-Service

: Script for SaaS offering enumeration through DNS queries

ruler

: A tool to abuse Exchange services

: Github Advanced Search

: Bitbucket Search using Google

Gitrob

: Reconnaissance tool for GitHub organizations

: Search Gitlab projects

: Source Code Search Engine

: Web technology information profiler tool. Find out what a website is built with

CloudScraper

: A tool to spider websites for cloud resources (S3 Buckets, Azure Blobs, DigitalOcean Storage Space)

InSp3ctor

: AWS S3 Bucket/Object finder

: Search for Open Amazon s3 Buckets and their contents

Spaces-finder

: A tool to hunt for publicly accessible DigitalOcean Spaces

GCPBucketBrute

: A Google Storage buckets enumeration script

CloudStorageFinder

: Tools to find public data in cloud storage systems

: Information about companies (funding, acquisition, merger etc.) and the people behind them

: United Kingdom's registrar of companies

: List of company registries located around the world

: Open database of companies in the world

: RedHunt Labs’s Internet wide surveys to study and understand the security state of the Internet

: Rapid7’s internet-wide surveys data across different services and protocols

: Internet-Wide Scan Data Repository, hosted by the ZMap Team

: Free and open port scan data by packet.tel

LinkedInt

: A LinkedIn scraper for reconnaissance

: Company review and rating search

: Track user statistics for different platforms including YouTube and Twitter

: Social Media Search Engine

: Social existence checker

: A twitter bot which monitors multiple paste sites for password dumps and other sensitive information

: Automated tool to monitor pastebin for interesting information

Scavenger

: Paste sites crawler (bot) looking for leaked credentials

Pwnbin

: Python based Pastebin crawler for keywords

PwnedOrNot

: Tool to find passwords for compromised accounts

: Cached view of pages on the Internet from multiple sources

: Internet Archive

: Search engine for Internet-connected devices

: Another search engine for internet-connected devices

: Cyberspace Search Engine

Drop an email to