mirror of
https://github.com/lockfale/OSINT-Framework.git
synced 2026-08-21 13:22:24 +02:00
Merge pull request #608 from lockfale/feature/THE-127-enrich-domain-names
Enrich 25 Domain Name tools batch 1/6 with OSINT metadata (THE-127)
This commit is contained in:
s0lray
+451
-31
@@ -947,92 +947,362 @@
|
||||
{
|
||||
"name": "Domain Dossier",
|
||||
"type": "url",
|
||||
"url": "https://centralops.net/co/DomainDossier.aspx"
|
||||
"url": "https://centralops.net/co/DomainDossier.aspx",
|
||||
"description": "Free web-based tool that aggregates WHOIS, DNS, and network information for domains and IP addresses into a single consolidated report.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Quick domain and IP reconnaissance with DNS and WHOIS data",
|
||||
"input": "Domain name or IP address",
|
||||
"output": "WHOIS records, DNS records, IP information, registration details",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries public WHOIS and DNS records; does not contact the target domain directly.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "domainIQ",
|
||||
"type": "url",
|
||||
"url": "https://www.domainiq.com/"
|
||||
"url": "https://www.domainiq.com/",
|
||||
"description": "Comprehensive domain intelligence platform offering reverse lookups, ownership history, and related domain discovery. Trusted by government agencies, domain investors, and legal firms.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "Domain ownership history, reverse analytics lookup, competitor domain research",
|
||||
"input": "Domain name",
|
||||
"output": "Domain owner information, historical ownership, similar domains, analytics data, reverse MX/IP/DNS lookups",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries aggregated domain data; does not probe the target directly.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "DomainTools Whois",
|
||||
"type": "url",
|
||||
"url": "https://whois.domaintools.com/"
|
||||
"url": "https://whois.domaintools.com/",
|
||||
"description": "Enterprise-grade WHOIS API with decades of historical domain data and rapid query response. The industry leader for threat intelligence and domain tracking.",
|
||||
"status": "live",
|
||||
"pricing": "paid",
|
||||
"bestFor": "Historical WHOIS research, threat actor tracking, enterprise domain intelligence",
|
||||
"input": "Domain name or IP address",
|
||||
"output": "Current and historical WHOIS records, registrant details, hosting history",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries cached WHOIS data; no direct contact with target infrastructure.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "SWITCH Internet Domains Whois (.ch)",
|
||||
"type": "url",
|
||||
"url": "https://www.nic.ch/whois/"
|
||||
"url": "https://www.nic.ch/whois/",
|
||||
"description": "Official Swiss domain registry WHOIS lookup service operated by SWITCH for .ch and .li country-code domains. Public registry with all owner contact details visible.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": ".ch and .li domain ownership research, Swiss Internet infrastructure lookup",
|
||||
"input": ".ch or .li domain name",
|
||||
"output": "Registrant contact details, creation/expiry dates, nameservers, registration status",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries the official SWITCH registry database; does not probe the target.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Whoisology",
|
||||
"type": "url",
|
||||
"url": "https://whoisology.com/#advanced"
|
||||
"url": "https://whoisology.com/#advanced",
|
||||
"description": "Searchable archive of billions of current and historical domain WHOIS records with cross-referencing capabilities. Designed for InfoSec, legal, and research professionals.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "Historical domain ownership, reverse WHOIS lookups, domain connection tracking",
|
||||
"input": "Domain name, email, registrant name",
|
||||
"output": "Historical WHOIS records, ownership changes, registrant information across domains",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Accesses archived WHOIS data; no direct probing of target domains.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Whois ARIN",
|
||||
"type": "url",
|
||||
"url": "https://whois.arin.net/ui/advanced.jsp"
|
||||
"url": "https://whois.arin.net/ui/advanced.jsp",
|
||||
"description": "Official American Registry for Internet Numbers WHOIS and RDAP lookup service for IPv4, IPv6, ASNs, and organizations in the North American region.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "IP address and ASN registration data, North American internet resource tracking",
|
||||
"input": "IP address, ASN, organization name, contact information",
|
||||
"output": "IP ownership, organization details, Points of Contact (POCs), ASN information",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries official ARIN database; does not contact targets or perform active scanning.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "DNSstuff",
|
||||
"type": "url",
|
||||
"url": "https://www.dnsstuff.com/freetools"
|
||||
"url": "https://www.dnsstuff.com/freetools",
|
||||
"description": "Suite of free DNS and network tools providing lookups, DNS checks, and WHOIS information for domain reconnaissance.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Quick DNS and WHOIS lookups, network diagnostics",
|
||||
"input": "Domain name, IP address",
|
||||
"output": "DNS records, WHOIS data, DNS propagation checks, nameserver information",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries public DNS and WHOIS servers; does not probe target infrastructure.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Robtex (R)",
|
||||
"type": "url",
|
||||
"url": "https://robtex.com/"
|
||||
"url": "https://robtex.com/",
|
||||
"description": "Comprehensive free DNS lookup and network intelligence tool with decade-spanning database containing billions of documents of internet data. Useful for forensics and threat actor tracking.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "DNS reconnaissance, IP and domain relationship mapping, historical internet data lookup",
|
||||
"input": "Domain name, IP address, hostname, autonomous system",
|
||||
"output": "DNS records, IP information, SEO data, reputation scores, historical relationships",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Searches historical and cached DNS data; does not perform active probing.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Domaincrawler.com",
|
||||
"type": "url",
|
||||
"url": "https://domaincrawler.com/"
|
||||
"url": "https://domaincrawler.com/",
|
||||
"description": "Enterprise-grade domain database covering 1.4+ billion registered and unregistered domains with 80+ billion historical records since 2008. Used by brand protection and OSINT professionals.",
|
||||
"status": "live",
|
||||
"pricing": "paid",
|
||||
"bestFor": "Large-scale domain research, brand protection monitoring, zone file analysis, market intelligence",
|
||||
"input": "Domain name, DNS data, technology stack filters",
|
||||
"output": "Domain metadata, DNS configuration, SSL certificates, technology stack, ownership connections, historical data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries aggregated domain database updated every 7 days; no active scanning of targets.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "MarkMonitor Whois Search",
|
||||
"type": "url",
|
||||
"url": "https://domains.markmonitor.com/whois/"
|
||||
"url": "https://domains.markmonitor.com/whois/",
|
||||
"description": "ICANN-accredited registrar and brand protection company offering WHOIS lookup and domain management services. Exclusively serves corporate clients including major global brands.",
|
||||
"status": "live",
|
||||
"pricing": "paid",
|
||||
"bestFor": "Corporate domain portfolio management, brand protection, trademark monitoring",
|
||||
"input": "Domain name",
|
||||
"output": "WHOIS records, registration data, brand portfolio information",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Accesses standard WHOIS records through registered domain lookups; no direct target probing.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "easyWhois",
|
||||
"type": "url",
|
||||
"url": "https://www.easywhois.com/"
|
||||
"url": "https://www.easywhois.com/",
|
||||
"description": "Free domain WHOIS lookup and DNS tools service. Now operated under the DomainHelp platform, providing domain registration information and DNS lookups.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Quick domain WHOIS lookups and DNS checks",
|
||||
"input": "Domain name",
|
||||
"output": "WHOIS records, DNS information, registrant details, nameservers",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries public WHOIS and DNS data; does not contact the target domain.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Website Informer",
|
||||
"type": "url",
|
||||
"url": "https://website.informer.com/"
|
||||
"url": "https://website.informer.com/",
|
||||
"description": "Free domain and website information aggregator providing visitor statistics, safety status, Alexa rankings, ownership data, and technical details about websites.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Website profiling, ownership verification, traffic estimation, technical stack discovery",
|
||||
"input": "Domain name or URL",
|
||||
"output": "Visitor statistics, safety ratings, domain owner information, technology stack, Alexa rank, historical snapshots",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Aggregates public website data and statistics; does not contact the target infrastructure.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Who.is",
|
||||
"type": "url",
|
||||
"url": "https://who.is/"
|
||||
"url": "https://who.is/",
|
||||
"description": "Comprehensive WHOIS and RDAP lookup service with large database of domain registration, DNS records, and IP information. Provides both current and historical data.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Domain registration research, WHOIS lookups, RDAP queries, IP tracking",
|
||||
"input": "Domain name or IP address",
|
||||
"output": "WHOIS records, RDAP data, DNS records, nameservers, registrant information",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries public WHOIS and RDAP databases; does not perform active scanning.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Whois AMPed",
|
||||
"type": "url",
|
||||
"url": "https://whoisamped.com/"
|
||||
"url": "https://whoisamped.com/",
|
||||
"description": "Mobile-optimized WHOIS lookup service accessible via web interface for domain registration information and WHOIS queries.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Mobile-friendly WHOIS lookups, quick domain information retrieval",
|
||||
"input": "Domain name",
|
||||
"output": "WHOIS records, domain registration information, registrant details",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Accesses public WHOIS data; no target probing or direct contact.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "ViewDNS.info",
|
||||
"type": "url",
|
||||
"url": "https://viewdns.info/"
|
||||
"url": "https://viewdns.info/",
|
||||
"description": "Comprehensive DNS lookup and WHOIS service providing detailed DNS records, reverse IP lookups, reverse WHOIS searches, and API access for automated queries.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "DNS reconnaissance, reverse IP and reverse WHOIS lookups, historical DNS tracking",
|
||||
"input": "Domain name, IP address, registrant name/email, nameserver",
|
||||
"output": "DNS records, WHOIS information, reverse lookups, IP hosting, historical DNS changes",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries public DNS and WHOIS data; does not perform active probing of targets.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Daily DNS Changes",
|
||||
"type": "url",
|
||||
"url": "https://dailychanges.domaintools.com/"
|
||||
"url": "https://dailychanges.domaintools.com/",
|
||||
"description": "DomainTools service monitoring DNS record changes across domains, detecting newly registered subdomains and tracking DNS infrastructure modifications.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "DNS change detection, subdomain discovery, infrastructure monitoring",
|
||||
"input": "Domain name",
|
||||
"output": "New DNS records, nameserver changes, subdomain discoveries, historical DNS changes",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Monitors public DNS records for changes; no active scanning or direct contact.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "IP2WHOIS",
|
||||
"type": "url",
|
||||
"url": "https://www.ip2whois.com"
|
||||
"url": "https://www.ip2whois.com",
|
||||
"description": "Free WHOIS lookup service for domain names and IP addresses, providing registration details, registrant information, location data, and API access.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Domain and IP WHOIS lookups, registrant research",
|
||||
"input": "Domain name or IP address",
|
||||
"output": "WHOIS records, registrant details, location information, registration dates",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries public WHOIS databases; does not contact the target.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Netlas.io",
|
||||
"type": "url",
|
||||
"url": "https://app.netlas.io/whois_domains/"
|
||||
"url": "https://app.netlas.io/whois_domains/",
|
||||
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
|
||||
"input": "Domain name, IP address, ASN, DNS records",
|
||||
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -1043,22 +1313,82 @@
|
||||
{
|
||||
"name": "SynapsInt",
|
||||
"type": "url",
|
||||
"url": "https://synapsint.com"
|
||||
"url": "https://synapsint.com",
|
||||
"description": "Unified web-based OSINT research platform supporting domain, IP, SSL, analytics, email, phone, and social media lookups with subdomain enumeration.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Unified OSINT research, subdomain discovery, multi-vector intelligence gathering",
|
||||
"input": "Domain, IP, email, phone, username, CVE ID",
|
||||
"output": "Subdomains, DNS records, WHOIS data, open ports, vulnerabilities, social media accounts, historical data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Aggregates publicly available information from multiple sources; no direct target contact.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Aquatone (T)",
|
||||
"type": "url",
|
||||
"url": "https://github.com/michenriksen/aquatone"
|
||||
"url": "https://github.com/michenriksen/aquatone",
|
||||
"description": "Go-based tool for domain reconnaissance that automates subdomain discovery, HTTP service scanning, screenshot capture, and visual HTML report generation for attack surface analysis.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Visual subdomain reconnaissance, HTTP service discovery, attack surface mapping",
|
||||
"input": "Domain name",
|
||||
"output": "Discovered subdomains, open ports, HTTP screenshots, consolidated reconnaissance report",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Makes HTTP requests to discovered hosts to capture screenshots and fingerprint services; supports integration with passive enumeration tools.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "FindSubDomains",
|
||||
"type": "url",
|
||||
"url": "https://findsubdomains.com/"
|
||||
"url": "https://findsubdomains.com/",
|
||||
"description": "Free web-based automated subdomain discovery tool with filtering and analysis capabilities, showing organization names, relationships, and top subdomain statistics.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Automated subdomain enumeration, organization name filtering, subdomain statistics",
|
||||
"input": "Domain name or keyword",
|
||||
"output": "Discovered subdomains, organization associations, popularity metrics, filtering options",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Uses passive DNS and search-based methods for subdomain discovery; no active probing.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Google Subdomains (D)",
|
||||
"type": "url",
|
||||
"url": "https://www.google.com/?gws_rd=ssl#q=site:%3Cdomain.com%3E"
|
||||
"url": "https://www.google.com/?gws_rd=ssl#q=site:%3Cdomain.com%3E",
|
||||
"description": "Google Dork technique using the 'site:' operator to enumerate subdomains of a target domain via Google's search index.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Indexed subdomain discovery, publicly visible subdomain enumeration",
|
||||
"input": "Domain name (as Google Dork syntax: site:domain.com)",
|
||||
"output": "Indexed subdomains and pages from Google search results",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Uses Google's search index; no direct contact with the target domain.",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": false,
|
||||
"editUrl": true,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Recon-ng (T)",
|
||||
@@ -1083,12 +1413,42 @@
|
||||
{
|
||||
"name": "XRay",
|
||||
"type": "url",
|
||||
"url": "https://github.com/evilsocket/xray"
|
||||
"url": "https://github.com/evilsocket/xray",
|
||||
"description": "Go-based network reconnaissance tool that automates subdomain enumeration via DNS brute force, integrates Shodan for port discovery, and gathers banner information with web UI visualization.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Automated subdomain discovery with banner grabbing, open port enumeration, Shodan integration",
|
||||
"input": "Domain name, subdomain wordlist, Shodan API key (optional), ViewDNS API key (optional)",
|
||||
"output": "Enumerated subdomains, open ports, banner information, historical data, web-based results UI",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Performs DNS brute force for subdomain enumeration and makes banner grabbing connections to discovered services.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "DNS Recon (T)",
|
||||
"type": "url",
|
||||
"url": "https://github.com/darkoperator/dnsrecon"
|
||||
"url": "https://github.com/darkoperator/dnsrecon",
|
||||
"description": "Python-based DNS enumeration script supporting zone transfers, standard record enumeration, TLD expansion, DNS brute force, and PTR lookups.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "DNS enumeration, zone transfer testing, subdomain brute forcing, DNS security assessment",
|
||||
"input": "Domain name, IP range/CIDR, subdomain wordlist, DNS server address",
|
||||
"output": "NS/SOA/MX/A records, discovered subdomains, zone transfer results, PTR records, wildcard resolution status",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Performs active DNS queries and brute force attempts; does not probe target services directly but makes repeated DNS requests.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Gobuster (T)",
|
||||
@@ -1163,7 +1523,22 @@
|
||||
{
|
||||
"name": "Netlas.io",
|
||||
"type": "url",
|
||||
"url": "https://app.netlas.io/domains/"
|
||||
"url": "https://app.netlas.io/domains/",
|
||||
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
|
||||
"input": "Domain name, IP address, ASN, DNS records",
|
||||
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -1194,7 +1569,22 @@
|
||||
{
|
||||
"name": "Netlas.io",
|
||||
"type": "url",
|
||||
"url": "https://app.netlas.io/"
|
||||
"url": "https://app.netlas.io/",
|
||||
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
|
||||
"input": "Domain name, IP address, ASN, DNS records",
|
||||
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Kraken (T)",
|
||||
@@ -1214,7 +1604,22 @@
|
||||
{
|
||||
"name": "Daily DNS Changes",
|
||||
"type": "url",
|
||||
"url": "https://dailychanges.domaintools.com/"
|
||||
"url": "https://dailychanges.domaintools.com/",
|
||||
"description": "DomainTools service monitoring DNS record changes across domains, detecting newly registered subdomains and tracking DNS infrastructure modifications.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "DNS change detection, subdomain discovery, infrastructure monitoring",
|
||||
"input": "Domain name",
|
||||
"output": "New DNS records, nameserver changes, subdomain discoveries, historical DNS changes",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Monitors public DNS records for changes; no active scanning or direct contact.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Redirect Detective",
|
||||
@@ -1330,7 +1735,22 @@
|
||||
{
|
||||
"name": "Netlas.io",
|
||||
"type": "url",
|
||||
"url": "https://app.netlas.io/certs/"
|
||||
"url": "https://app.netlas.io/certs/",
|
||||
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
|
||||
"input": "Domain name, IP address, ASN, DNS records",
|
||||
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5558,12 +5978,12 @@
|
||||
"url": "https://www.brbpub.com/"
|
||||
},
|
||||
{
|
||||
"name": "GOVDATA - Das Datenportal für Deutschland (German)",
|
||||
"name": "GOVDATA - Das Datenportal f\u00fcr Deutschland (German)",
|
||||
"type": "url",
|
||||
"url": "https://www.govdata.de/"
|
||||
},
|
||||
{
|
||||
"name": "Open-Data-Portal München (German)",
|
||||
"name": "Open-Data-Portal M\u00fcnchen (German)",
|
||||
"type": "url",
|
||||
"url": "https://www.opengov-muenchen.de/"
|
||||
},
|
||||
@@ -9737,7 +10157,7 @@
|
||||
"url": "https://themanyhats.club/centralised-place-for-privacy-resources/"
|
||||
},
|
||||
{
|
||||
"name": "The Hitchhiker’s Guide to Online Anonymity",
|
||||
"name": "The Hitchhiker\u2019s Guide to Online Anonymity",
|
||||
"type": "url",
|
||||
"url": "https://anonymousplanet.org/guide/"
|
||||
},
|
||||
|
||||
Reference in New Issue
Block a user