📈 GH Trending Explorer 🎲 Surprise me
dnshe / DNSHE-FreeDomains

🌐 DNSHE — Free subdomains for developers, with Anycast DNS, a REST API, and free renewal within 180 days before expiry. Available suffixes: us.ci, cc.cd, de5.net, ccwu.cc.

▲ ~635/7d ★ 21k JavaScript 17d ago
projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

▲ ~201/7d ★ 32k Go today
Autumn-27 / ScopeSentry

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

▲ ~199/7d ★ 2.1k Go 🔥 13d ago
JoasASantos / php2shell-scanner

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

▲ 105/7d ★ 105 Python 3d ago
six2dez / reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

▲ ~70/7d ★ 8.3k Shell 28d ago
zordhalo / runs-on.dev

Grab your own cool 'runs-on.dev' subdomain to use for free forever.

▲ ~33/7d ★ 487 JavaScript today
is-a-dev / register

Grab your own sweet-looking '.is-a.dev' subdomain.

▲ ~30/7d ★ 12k JavaScript today
Ivanudcaller / bdo-viewer-resocket

Desktop companion to bdo-data-extractor: browse Black Desert items, recipes, knowledge, NPCs, with a cost-aware crafting calculator & gear builder. Wails3 + React. Fully local from your game files.

▲ 29/7d ★ 29 1d ago
nevercode-in / FreeDomains

A free, open-source subdomain service for developers to launch APIs, demos, and side projects without buying a domain

▲ ~28/7d ★ 1.0k TypeScript 20d ago
KingOfBugbounty / KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

▲ ~21/7d ★ 5.6k Python 3d ago
tobychui / zoraxy

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!

▲ ~21/7d ★ 5.5k HTML today
yyhuni / lunafox

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.

▲ ~21/7d ★ 53 Go 2d ago
js-org / js.org

Dedicated to JavaScript and its awesome community since 2015

▲ ~12/7d ★ 5.9k JavaScript 1d ago
TermuxHackz / X-osint

This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux

▲ ~12/7d ★ 2.8k Python 15d ago
montrush / bilibili-charging-downloader

B站充电视频下载器 - 解决BBDown 1.6.3 login假成功bug, 直接调B站API从Set-Cookie提取cookie, 支持充电视频完整版/UGC合集批量下载

▲ ~9/7d ★ 107 Python 1mo ago
mohamedabdou-ai / reel-studio

حوّل شرحك وحلقتك لريلز على ذوقك، بكابشن عربي وموشن يوضح الفكرة.

▲ ~9/7d ★ 40 JavaScript 4d ago
adrgs / requestrepo

Analyze HTTP, DNS and SMTP requests and create custom responses and DNS records for your subdomain

▲ ~5/7d ★ 545 Rust 1mo ago
shanmukhasaireddy13 / Go-Live

Instant, Globally-Distributed Anycast Subdomains for Developers (*.go-live.me) — 1-Click Vercel Deploy & Auto TLS 1.3

▲ ~5/7d ★ 66 1mo ago
Findomain / Findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

▲ ~4/7d ★ 3.8k Rust 5d ago
oiov / wr.do

一站式域名服务平台,集成短链生成、无限域名邮箱、文件存储和子域名管理,带有管理员面板,支持自部署

▲ ~4/7d ★ 2.3k TypeScript 7d ago
john-kurkowski / tldextract

Accurately separates a URL’s subdomain, domain, and public suffix, using the Public Suffix List (PSL).

▲ ~4/7d ★ 2.0k Python 20d ago
abdo-essam / ComposeShield

ComposeShield is Kotlin Multiplatform library for protecting sensitive UI content from screenshots, screen recording, screen sharing, and other forms of visual capture across Android and iOS.

▲ ~4/7d ★ 81 Kotlin 3d ago
RevoltSecurities / Subdominator

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

▲ ~2/7d ★ 814 Python 17d ago
chushuai / wscan

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

▲ ~2/7d ★ 717 Go 1mo ago
ARPSyndicate / puncia

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

▲ ~2/7d ★ 665 Python 1d ago
AbdoslamB / InkDoc

Turn any document into clean, AI-ready Markdown — locally on your machine. Desktop app for Windows, macOS & Linux powered by MarkItDown, Docling, GLM-OCR and Markit.

▲ ~2/7d ★ 57 Python 9d ago
yingfff123 / AtlasX

企业暴露面收集与持续监控(ASM)自托管系统:多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。

▲ ~2/7d ★ 49 Shell 1mo ago
projectdiscovery / shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

▲ ~0/7d ★ 1.7k Go 1d ago
edoardottt / scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

▲ ~0/7d ★ 1.3k Go 2d ago
remusao / tldts

JavaScript Library to extract domains, subdomains and public suffixes from complex URIs.

▲ ~0/7d ★ 772 TypeScript 1d ago
bdovaz / UnityNuGet

Provides a service to install NuGet packages into a Unity project via the Unity Package Manager

▲ ~0/7d ★ 743 C# 1d ago
yyhuni / xingrin

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

▲ ~0/7d ★ 671 TypeScript 1mo ago
LibUsbDotNet / LibUsbDotNet

My updates to LibUsbDotNet, an excellent library for cross-platform USB device control using Mono/.NET

▲ ~0/7d ★ 666 C# 9d ago
morpheuslord / GPT_Vuln-analyzer

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

▲ ~0/7d ★ 598 Python 29d ago
peerigon / parse-domain

Splits a hostname into subdomains, domain and (effective) top-level domains.

▲ ~0/7d ★ 517 TypeScript 2d ago
SamanPandey-in / dreamer

Dreamer is a self-hosted Platform-as-a-Service (PaaS) that enables developers to deploy applications with automatic builds, hosting, wildcard subdomain routing, and cloud-native infrastructure management.

▲ ~0/7d ★ 31 TypeScript 1mo ago
tooladda-online / dns-lookup

DNS Lookup — Enter a domain, subdomain, or hostname to retrieve A, AAAA, MX, TXT, SPF, DKIM, DMARC, NS, SOA, CNAME, PTR, SRV, CAA, DNSSEC, and more — queried live from public DNS-over-HTTPS resolvers. Get a DNS health score, provider detection, and export results in seconds. Free on ToolAdda.online.

▲ ~0/7d ★ 26 1mo ago
blechschmidt / massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)