🌐 SUBDOMAIN ENUMERATION
Subfinder
Amass (Passive + Active)
Assetfinder
Findomain
Chaos
CRT.sh
Shosubgo
GitHub-Subdomains
DNSDumpster
🔍 DNS / RESOLUTION
DNSX
PureDNS
ShuffleDNS
MassDNS
🌐 HTTP PROBING
HTTPX
Httprobe
Naabu
TLSX
🔗 URL COLLECTION
GAU
Waybackurls
Katana
Hakrawler
GoSpider
URLFinder
📜 JAVASCRIPT RECON
SubJS
LinkFinder
GetJS
JSFinder
🔑 PARAMETER DISCOVERY
ParamSpider
Arjun
x8
Unfurl
⚠️ VULNERABILITY SCANNING
Nuclei
Nuclei Templates (CVEs)
Nuclei Templates (Exposures)
Nuclei Templates (Misconfig)
Dalfox (XSS)
KXSS