Recon & OSINT

dnsx

Fast, multi-purpose DNS toolkit for resolution and probing.

dnsrecon

dnsx — terminal

$ subfinder -d example.com | dnsx -resp

What it does

dnsx runs fast, configurable DNS queries across many resolvers to validate subdomains, pull records, and probe at scale. It's commonly piped after subdomain discovery to keep only live hosts.

Source

https://github.com/projectdiscovery/dnsx ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.theHarvesterEmail, subdomain, and host OSINT gathering.MetagoofilMetadata extraction from public documents.

Need hosted scanning instead of local tooling?

Run a scan in the browser →