SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
-
Updated
May 20, 2025 - Python
SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
A tool that helps you find the real IP addresses hiding behind Cloudflare by checking subdomains.
Rapidly enumerate subdomains and domains using rapiddns.io.
Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.
A tool for Oragnized ASM (Attack Surface Mapper). Subdomains enumeration, IPs scans, Vulnerability assesment...
a modern subdomains scanner
SubSeeker is a subdomain discovery tool that uses public SSL certificate logs from sources like crt.sh to find and resolve subdomains for a given domain. It identifies active subdomains by resolving their IP addresses and can output the results as text, URLs, or IP lists for masscan.
WAF bypass enumeration tool that based on history records discover unprotected IP address
Fast subdomain enumeration tool written in python.
Hybrid_Sub is a powerful, cross-platform subdomain enumeration framework built with Python and Go, designed for ethical hackers, red teamers, and bug bounty professionals—combining passive reconnaissance, active brute-force, wildcard DNS filtering, and API-driven plugin support into one fully automated and extensible toolkit.
Ultimate Automation using tools like puredns, httpx, dnsx, smap, aquatone, waybackurls, gf, massdns, subzy, waymore, assetfinder, subfinder, and amass. Runs in Docker.
Yet another passive subdomain enumeration tool
Zzfinder es una herramienta diseñada para la búsqueda de subdominios en una página web mediante el uso de una wordlist personalizada.
ListDomains is a subdomain enumeration tool, using passive techniques.
Fast and async subdomain finder using crt.sh – supports wildcard filtering, multiple domains, and clean output.
MERsA is a Simple Python tool designed to make it easy to discover subdomains of a given URL using subfinder, and then analyze their HTTP responses using httpx. It saves the results categorized by HTTP response codes into separate text files for easy analysis.
Subsort removes grep redundancies for subdomains in a list.
Awasome Subdomain Gathering / Scanner / Crawler
Passive Recon - Subdomain Enumeration With Sub-Finder.
autpen is a penetration testing automation tool is a comprehensive solution that includes various features, including efficient subdomain enumeration capabilities
Add a description, image, and links to the subdomains-enumeration topic page so that developers can more easily learn about it.
To associate your repository with the subdomains-enumeration topic, visit your repo's landing page and select "manage topics."