Browse and search our comprehensive collection of OSINT tools
Attack-surface mapping and DNS enumeration
Modular web reconnaissance framework
DNS history and domain intelligence platform
Automated OSINT reconnaissance framework
Collect emails and subdomains from public sources
Subdomain permutation generator by ProjectDiscovery
a subdomain permutation tool that generates altered hostnames for DNS brute f
a command-line tool for finding domains and subdomains related to a target or
Recon CLI chaining LinkedIn, Shodan, screenshots
Recursive multi-source recon scanner
Mobile-app security search engine surfacing APK secrets, keys and subdomains
Query BeVigil API for hosts, subdomains and S3 buckets from apps and domains
Search Certificate Transparency logs by domain for subdomains
Certificate Transparency monitoring service
Curated bug-bounty subdomain dataset
Find the origin IP of a Cloudflare-protected domain
Cloud-provider asset enumerator
Fast subdomain enumeration from CT logs and DNS, API-first
Domain reconnaissance and DNS lookup tool
Passive DNS and subdomain reconnaissance
Reverse-DNS and SSL pivoting platform
Subdomain takeover detection scanner
a DNS enumeration script for records, zone transfers, brute force, and cache
a resolver validation tool used to build reliable DNS resolver lists for reco
67 tools found
