779 Open source projects that are alternatives of or similar to Amass

In-depth Attack Surface Mapping and Asset Discovery

Python 3.5+ DNS asynchronous brute force utility

Maryam: Open-source Intelligence(OSINT) Framework

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

A MongoDB importer and API for Project Sonars DNS datasets

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

Automatic Service Enumeration Script

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

OneForAll是一款功能强大的子域收集工具

Enumerate information from NTLM authentication enabled web endpoints 🔎

Dumain Bruteforcer - a fast and flexible domain bruteforcer

yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage

无状态子域名爆破工具

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Next generation web scanner

Script will enumerate domain name using horizontal enumeration, reverse lookup. Each horziontal domain will then be vertically enumerated using Sublist3r.

Network footprint scanner platform. Discover domains and run your custom checks periodically.

Dedicated to JavaScript and its awesome community since 2015

Mass querying whois records

Extract subdomains from SSL certificates in HTTPS sites.

Handbook of information collection for penetration testing and src

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

A new generation of tool for discovering subdomains( ip , cdn and so on)

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Intelligence and Reconnaissance Package/Bundle installer.

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

bug bounty hunters starter notes

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

A DNS reconnaissance tool for locating non-contiguous IP space.

Hacking tools

Powerful Visual Subdomain Enumeration at the Click of a Mouse

Python module/library for retrieving WHOIS information of domains 💻❤

Fast Amazon S3 bucket enumeration tool for pentesters.

A permutation generation tool written in golang

DNS server with REST interface for records management built on Golang

基于 libcurl 的 IO 多路复用 HTTP 框架，适用于 iOS 平台，支持 HTTP/HTTPS/HTTP2/DNS(SNI)

bash scripting thing !

Your Google Recon is Now Automated

LDNS is a DNS library that facilitates DNS tool programming

Automatically updated, moderated and optimized lists for blocking ads, trackers, malware and other garbage

阿里云动态域名工具，支持docker和ipv6。

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

A collection of personal scripts used in hacking excercises.

A tool to update freenom's dns records

准确、CDN友好

DNS lookup cache for Go

OpenNetAdmin IP Address Management (IPAM) system

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

A DNS abstraction for PHP

DynDNS Updater for Gandi LiveDNS REST API

A collection of hacking / penetration testing resources to make you better!

Network Security Vulnerability Manage

OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development

Sqreen's Application Security Management for the Go language