subdigger
Fast multi-threaded subdomain discovery — certificate transparency, wordlists, OSINT APIs and bruteforce.
Tooling
live
Subdomain enumeration that pulls from several directions at once: certificate transparency logs, wordlists, OSINT APIs and intelligent bruteforce, with async DNS resolution so the network is the only limit. Results come out enriched with GeoIP in CSV or JSON. Attack surface you did not know about is still your attack surface — see also our Dangling DNS project for what happens when those records rot. Written in C, MIT licensed.
subdomain-enumeration
dns
certificate-transparency
recon
bug-bounty
c