subdomains topic
mildew
Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs
DircoverRB
Passive subdomains and web directories recon using Bing.
resolver
Resolver allows performing DNS queries such as resolving a DNS name querying some records, DNS zone transferences and reverse IP lookups
metabigor
OSINT tools and more but without API key
bass
Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers to your "resolver.txt"
ICU
An Extended, Modulair, Host Discovery Framework
Anubis
Subdomain enumeration and information gathering tool
censys-subdomain-finder
⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
AnalyticsRelationships
Get related domains / subdomains by looking at Google Analytics IDs