Advanced Recon Tools
Subdomain Enumeration
crt.sh
Active
dorki.attaxa.com
Active
SecurityTrails
Active
vedbex.com
Active
viewdns.info
Active
*.google
Active
search.censys.io
Active
shodan.io
Active
Bing
Active
web-archive secret
Active
VirusTotal
Active
DNSdumpster
Active
HackerTarget
Active
Netcraft
Active
Secret Discovery
web.archive.org (Sensitive Files)
Active
web.archive.org (All URLs)
Active
AlienVault OTX URL List
Active
JS FILES
Active
GitHub Gists API Keys
Active
Config Secrets
Active
Development Secrets
Active
Authorization Tokens
Active
.ENV
Active
SSL Certificate CN Search
Active
Passive Reconnaissance
WHOIS Lookup
Active
DNS Information
Active
SSL Certificate Info
Active
Reverse IP Lookup
Active
ASN Lookup
Active
Robots.txt Analysis
Active
VirusTotal URLs
Active
S3 Bucket Enumeration
AWS S3 Buckets
Active
Google Cloud Storage
Active
Azure Blob Storage
Active
Technology Detection
builtwith.com
Active
webtechsurvey.com
Active
w3techs.com
Active
whatcms.org
Active
Port Scanning
viewdns.info
Active
dnschecker.org
Active
web-check.xyz
Active
URL Collection
web.archive.org
Active
urlscan.io
Active
CMS Dorking
WP Juicy Extensions
Active
WP Users
Active
Directory Traversal
Directory Listing
Active
Log Files
Active
Config Files
Active
Vulnerability Search
Exploit-DB
Active
NVD Database
Active
PacketStorm
Active
Code & Document Search
Pastebin Entries
Active
Documents
Active
GitHub/GitLab Code
Active
API Endpoints
API Documentation
Active
Swagger/OpenAPI
Active
GraphQL Endpoints
Active
Cloud Assets
AWS S3 Buckets
Active
Google Cloud Storage
Active
Azure Websites
Active
Cloud Storage URLs
Active
Development Assets
Version Control
Active
Dev Tools
Active
Dev Scripts
Active