Amass
Comprehensive network mapping and attack surface discovery tool.
Dig
Command-line tool for DNS queries and troubleshooting.
Dnsrecon
DNS enumeration tool for discovering records, zones, and subdomains.
Knockpy
Python-based tool for subdomain enumeration using wordlist techniques.
Recon-ng
Powerful reconnaissance framework with modular design for automated information gathering.
Sublist3r
Fast subdomain enumeration tool using OSINT techniques.
The Harvester
Tool for gathering emails, subdomains, IPs, and hostnames from different public sources.