Topics / #subdomain-enumeration

Subdomain-enumeration projects on GitHub

Reconnaissance tools for discovering subdomains of a target domain.

As of , the most-starred Subdomain-enumeration projects on GitHub are theHarvester (18K stars), subfinder (14.6K stars) and gobuster (14.2K stars). GitHub.Locker tracks 6 Subdomain-enumeration repositories with 78.7K stars combined. The fastest-growing on October 18 was theHarvester, with +7 stars in a day.

6Projects
78.7KStars in total
+20Stars in a day
Browse in the catalog →github.com/topics/subdomain-enumeration ↗

Hot right now

Most stars gained in a day · Oct 18

+7

theHarvester

laramies/theHarvester · ★ 18K

An open-source OSINT tool that gathers emails, subdomains and names about a domain or organization from public sources: search engines, certificate transparency logs, DNS datasets, code repositories and threat-intel platforms, normalizing hostnames, emails, IPs, URLs, ASNs, people and breach names.

+6

gobuster

OJ/gobuster · ★ 14.2K

Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

+3

subfinder

projectdiscovery/subfinder · ★ 14.6K

Subfinder is a fast passive subdomain enumeration tool that returns valid subdomains for a website by querying passive online sources, built for penetration testers and bug bounty hunters.

+3

OneForAll

shmilylty/OneForAll · ★ 10.1K

OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

The all-time top

6 projects · by stars

  1. #1 · laramies/theHarvester

    theHarvester

    An open-source OSINT tool that gathers emails, subdomains and names about a domain or organization from public sources: search engines, certificate transparency logs, DNS datasets, code repositories and threat-intel platforms, normalizing hostnames, emails, IPs, URLs, ASNs, people and breach names.

    18K
  2. #2 · projectdiscovery/subfinder

    subfinder

    Subfinder is a fast passive subdomain enumeration tool that returns valid subdomains for a website by querying passive online sources, built for penetration testers and bug bounty hunters.

    14.6K
  3. #3 · OJ/gobuster

    gobuster

    Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

    14.2K
  1. 4

    Sublist3r

    11.1Kaboul3la/Sublist3r · Python

    Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.

  2. 5

    bbot

    10.7Kblacklanternsecurity/bbot · Python

    BBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.

  3. 6

    OneForAll

    10.1Kshmilylty/OneForAll · Python

    OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

Often tagged together