Enumerates a domain's DNS: standard records, SRV services, zone transfer checks and DNSSEC
Verified publisherSignedDockerNo API key neededCommunity-packaged
Registry
All tools
7 tools. Filter by what you have, what you need to find, or whether an API key is required.
Filters3
osintverse-community/gau
v2.2.4
Gets every known URL of a domain from the Wayback Machine, Common Crawl, OTX and urlscan
Verified publisherSignedDockerNo API key neededCommunity-packaged
Finds a domain's subdomains passively from dozens of public sources
Verified publisherSignedDockerNo API key neededCommunity-packaged
Gathers emails, subdomains, hosts and IPs for a domain from public search engines and datasets
Verified publisherSignedDockerNo API key neededCommunity-packaged
Reads a server's TLS certificate: names it covers, issuer, validity, fingerprints and JARM
Verified publisherSignedDockerNo API key neededCommunity-packaged
Finds a domain's subdomains in Certificate Transparency logs through crt.sh or Cert Spotter
Verified publisherSignedDockerNo API key neededCommunity-packaged
Looks up a domain's A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records
Verified publisherSignedDockerNo API key neededCommunity-packaged