| [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers | ![](https://img.shields.io/github/stars/tomnomnom/httprobe) | ![](https://img.shields.io/github/languages/top/tomnomnom/httprobe) | ![](https://img.shields.io/github/repo-size/tomnomnom/httprobe)<br>![](https://img.shields.io/github/license/tomnomnom/httprobe) <br> ![](https://img.shields.io/github/forks/tomnomnom/httprobe) <br> ![](https://img.shields.io/github/watchers/tomnomnom/httprobe) |<br>| [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts | ![](https://img.shields.io/github/stars/tomnomnom/meg) | ![](https://img.shields.io/github/languages/top/tomnomnom/meg) | ![](https://img.shields.io/github/repo-size/tomnomnom/meg)<br>![](https://img.shields.io/github/license/tomnomnom/meg) <br> ![](https://img.shields.io/github/forks/tomnomnom/meg) <br> ![](https://img.shields.io/github/watchers/tomnomnom/meg) |<br>
| [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery | ![](https://img.shields.io/github/stars/OWASP/Amass) | ![](https://img.shields.io/github/languages/top/OWASP/Amass) | ![](https://img.shields.io/github/repo-size/OWASP/Amass)<br>![](https://img.shields.io/github/license/OWASP/Amass) <br> ![](https://img.shields.io/github/forks/OWASP/Amass) <br> ![](https://img.shields.io/github/watchers/OWASP/Amass) |<br>| [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain | ![](https://img.shields.io/github/stars/tomnomnom/assetfinder) | ![](https://img.shields.io/github/languages/top/tomnomnom/assetfinder) | ![](https://img.shields.io/github/repo-size/tomnomnom/assetfinder)<br>![](https://img.shields.io/github/license/tomnomnom/assetfinder) <br> ![](https://img.shields.io/github/forks/tomnomnom/assetfinder) <br> ![](https://img.shields.io/github/watchers/tomnomnom/assetfinder) |<br>| [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. | ![](https://img.shields.io/github/stars/Edu4rdSHL/findomain) | ![](https://img.shields.io/github/languages/top/Edu4rdSHL/findomain) | ![](https://img.shields.io/github/repo-size/Edu4rdSHL/findomain)<br>![](https://img.shields.io/github/license/Edu4rdSHL/findomain) <br> ![](https://img.shields.io/github/forks/Edu4rdSHL/findomain) <br> ![](https://img.shields.io/github/watchers/Edu4rdSHL/findomain) |<br>| [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. | ![](https://img.shields.io/github/stars/projectdiscovery/subfinder) | ![](https://img.shields.io/github/languages/top/projectdiscovery/subfinder) | ![](https://img.shields.io/github/repo-size/projectdiscovery/subfinder)<br>![](https://img.shields.io/github/license/projectdiscovery/subfinder) <br> ![](https://img.shields.io/github/forks/projectdiscovery/subfinder) <br> ![](https://img.shields.io/github/watchers/projectdiscovery/subfinder) |<br>
| [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. | ![](https://img.shields.io/github/stars/robertdavidgraham/masscan) | ![](https://img.shields.io/github/languages/top/robertdavidgraham/masscan) | ![](https://img.shields.io/github/repo-size/robertdavidgraham/masscan)<br>![](https://img.shields.io/github/license/robertdavidgraham/masscan) <br> ![](https://img.shields.io/github/forks/robertdavidgraham/masscan) <br> ![](https://img.shields.io/github/watchers/robertdavidgraham/masscan) |<br>| [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests | ![](https://img.shields.io/github/stars/projectdiscovery/naabu) | ![](https://img.shields.io/github/languages/top/projectdiscovery/naabu) | ![](https://img.shields.io/github/repo-size/projectdiscovery/naabu)<br>![](https://img.shields.io/github/license/projectdiscovery/naabu) <br> ![](https://img.shields.io/github/forks/projectdiscovery/naabu) <br> ![](https://img.shields.io/github/watchers/projectdiscovery/naabu) |<br>| [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. | ![](https://img.shields.io/github/stars/nmap/nmap) | ![](https://img.shields.io/github/languages/top/nmap/nmap) | ![](https://img.shields.io/github/repo-size/nmap/nmap)<br>![](https://img.shields.io/github/license/nmap/nmap) <br> ![](https://img.shields.io/github/forks/nmap/nmap) <br> ![](https://img.shields.io/github/watchers/nmap/nmap) |<br>
| [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. | ![](https://img.shields.io/github/stars/hahwul/s3reverse) | ![](https://img.shields.io/github/languages/top/hahwul/s3reverse) | ![](https://img.shields.io/github/repo-size/hahwul/s3reverse)<br>![](https://img.shields.io/github/license/hahwul/s3reverse) <br> ![](https://img.shields.io/github/forks/hahwul/s3reverse) <br> ![](https://img.shields.io/github/watchers/hahwul/s3reverse) |<br>
## Web Discovery
| Name | Description | Popularity | Language | Metadata |
| [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. | ![](https://img.shields.io/github/stars/s0md3v/Arjun) | ![](https://img.shields.io/github/languages/top/s0md3v/Arjun) | ![](https://img.shields.io/github/repo-size/s0md3v/Arjun)<br>![](https://img.shields.io/github/license/s0md3v/Arjun) <br> ![](https://img.shields.io/github/forks/s0md3v/Arjun) <br> ![](https://img.shields.io/github/watchers/s0md3v/Arjun) |<br>| [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. | ![](https://img.shields.io/github/stars/s0md3v/Photon) | ![](https://img.shields.io/github/languages/top/s0md3v/Photon) | ![](https://img.shields.io/github/repo-size/s0md3v/Photon)<br>![](https://img.shields.io/github/license/s0md3v/Photon) <br> ![](https://img.shields.io/github/forks/s0md3v/Photon) <br> ![](https://img.shields.io/github/watchers/s0md3v/Photon) |<br>| [ReconDog](https://github.com/s0md3v/ReconDog) | Reconnaissance Swiss Army Knife | ![](https://img.shields.io/github/stars/s0md3v/ReconDog) | ![](https://img.shields.io/github/languages/top/s0md3v/ReconDog) | ![](https://img.shields.io/github/repo-size/s0md3v/ReconDog)<br>![](https://img.shields.io/github/license/s0md3v/ReconDog) <br> ![](https://img.shields.io/github/forks/s0md3v/ReconDog) <br> ![](https://img.shields.io/github/watchers/s0md3v/ReconDog) |<br>| [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. | ![](https://img.shields.io/github/stars/projectdiscovery/dnsprobe) | ![](https://img.shields.io/github/languages/top/projectdiscovery/dnsprobe) | ![](https://img.shields.io/github/repo-size/projectdiscovery/dnsprobe)<br>![](https://img.shields.io/github/license/projectdiscovery/dnsprobe) <br> ![](https://img.shields.io/github/forks/projectdiscovery/dnsprobe) <br> ![](https://img.shields.io/github/watchers/projectdiscovery/dnsprobe) |<br>| [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go | ![](https://img.shields.io/github/stars/jaeles-project/gospider) | ![](https://img.shields.io/github/languages/top/jaeles-project/gospider) | ![](https://img.shields.io/github/repo-size/jaeles-project/gospider)<br>![](https://img.shields.io/github/license/jaeles-project/gospider) <br> ![](https://img.shields.io/github/forks/jaeles-project/gospider) <br> ![](https://img.shields.io/github/watchers/jaeles-project/gospider) |<br>| [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. | ![](https://img.shields.io/github/stars/projectdiscovery/shuffledns) | ![](https://img.shields.io/github/languages/top/projectdiscovery/shuffledns) | ![](https://img.shields.io/github/repo-size/projectdiscovery/shuffledns)<br>![](https://img.shields.io/github/license/projectdiscovery/shuffledns) <br> ![](https://img.shields.io/github/forks/projectdiscovery/shuffledns) <br> ![](https://img.shields.io/github/watchers/projectdiscovery/shuffledns) |<br>| [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain | ![](https://img.shields.io/github/stars/tomnomnom/waybackurls) | ![](https://img.shields.io/github/languages/top/tomnomnom/waybackurls) | ![](https://img.shields.io/github/repo-size/tomnomnom/waybackurls)<br>![](https://img.shields.io/github/license/tomnomnom/waybackurls) <br> ![](https://img.shields.io/github/forks/tomnomnom/waybackurls) <br> ![](https://img.shields.io/github/watchers/tomnomnom/waybackurls) |<br>
## Web Vulnerability Scanner
| Name | Description | Popularity | Language | Metadata |