domain-enumeration topic
LazyOSINT
Yet another OSINT automator.
SubEvil
SubEvil is an advanced open source intelligence framework (OSINT) for grouping subdomains.
auto-recon-ng
Automated script to run all modules for a specified list of domains, netblocks or company name
DomainDouche
OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.
Domain_recon
Streamline Domain Enumeration with this Efficient Toolset
PyADRecon
Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.
PyADRecon-ADWS
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.