#go #dns #enumeration #maltego #network_security #osint #osint_reconnaissance #owasp #recon #subdomain

https://github.com/OWASP/Amass

#go #dns #golang #nameserver #subdomain #takeover #vulnerability

https://github.com/pwnesia/dnstake

#python #dns #fuzzing #subdomain_enumeration

https://github.com/elceef/subzuf

#python #attack_surface #automation #automation_framework #cli #command_line_tool #hacking #information_gathering #neo4j #osint #osint_framework #osint_tool #pip #pypi #python_framework #python_library #recon #reconnaissance #scanner #subdomain_enumeration

https://github.com/blacklanternsecurity/bbot

#go #attack_surface #cve_scanner #dast #hacktoberfest #nuclei_engine #security #security_scanner #subdomain_takeover #vulnerability_assessment #vulnerability_detection #vulnerability_scanner

Nuclei is a powerful vulnerability scanner that uses simple YAML-based templates to detect vulnerabilities. Here are the key benefits You can create and customize your own vulnerability detection scenarios using YAML templates, which helps in mimicking real-world conditions and reducing false positives.
- **High Performance** Thousands of security professionals contribute to the template library, ensuring you have access to the latest vulnerability detections.
- **Integration Capabilities** It supports multiple protocols such as TCP, DNS, HTTP, SSL, WHOIS, JavaScript, and more.
- **Cloud Upload**: You can upload scan results to the ProjectDiscovery cloud platform for further analysis and remediation.

Overall, Nuclei provides a flexible, high-performance, and community-driven solution for vulnerability scanning.

https://github.com/projectdiscovery/nuclei

#go #attack_surfaces #dns #enumeration #go #golang #information_gathering #maltego #network_security #osint #osint_reconnaissance #owasp #recon #subdomain

OWASP Amass is a tool that helps you find and map all the parts of a company's online presence, like websites, servers, and other internet-connected assets. It uses various techniques such as checking APIs, certificates, DNS records, and web archives to gather this information. This tool is useful because it gives you a complete picture of your company's attack surface, helping you identify potential security risks and protect your assets better. You can install it easily using prebuilt packages, Docker, or by compiling it from source code. The community supports it actively, and there are many resources available to help you get started and troubleshoot any issues.

https://github.com/owasp-amass/amass

#javascript #cloudflare #dev #developer #dns #domain #foss #free #free_domain #free_for_dev #free_for_developers #github_pages #oss #subdomain #website

With **is-a.dev**, you can get a cool `.is-a.dev` domain for your personal website. Here’s how: fork the GitHub repository, add a file with your domain name, and submit a pull request. After it's approved, you'll have your new domain within 24 hours. Join the Discord server for updates and support. This service is free, but you can donate $2 to bypass some rules and get a special role in the Discord server. It's supported by Cloudflare, making it reliable and easy to use.

https://github.com/is-a-dev/register

#python #blueteam #discovery #emails #information_gathering #osint #python #recon #reconnaissance #redteam #subdomain_enumeration

theHarvester is a free, easy-to-use tool that helps you gather public information about a domain, such as emails, subdomains, IPs, and URLs, from many online sources like search engines and databases. It is useful during security testing to understand a company’s external exposure and find potential vulnerabilities. You can run it with Python and it supports features like DNS brute forcing and taking screenshots of found subdomains. Using theHarvester helps you quickly collect valuable data for cybersecurity assessments, making your research more efficient and thorough.

https://github.com/laramies/theHarvester

#javascript #cloudflare #dns #domain #domains #free #free_domain #free_domains #free_for_dev #free_for_developers #github_pages #subdomain #subdomains #website

You can get free subdomains for personal or open-source projects from Open Domains by registering through their GitHub repository. They offer several domain options with strong security features like SSL, HTTPS, and DNSSEC, ensuring your site is safe and reliable. You submit a pull request with your subdomain details, and after approval, your domain is ready to use, usually within minutes. This service is great if you want a free, easy-to-set-up web address for your project without buying a domain, saving you money and effort while maintaining good security and performance. Donations help keep the service running.

https://github.com/open-domains/register